Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File:                     KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier:          KcJQaAkNivagtPpWFTS6m4oPkK4PyOqXsuSZPxjkHkg=
Subject key identifier:   23:24:5D:E6:49:B6:B6:25:71:D9:B5:84:69:64:DB:08:05:06:E7:74
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer:       /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial:       01962DF44402CF80DE84A0FF4EA698E1E3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number:          0934
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
                          2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: 5nKPYeAtRF5TptLil9izVnWOxCPmXfwqE/Yw57Hnrco=)
                          3: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:02:cf:80:de:84:a0:ff:4e:a6:98:e1:e3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=23245de649b6b62571d9b5846964db080506e774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:cd:51:c8:56:cc:83:64:78:56:bc:f8:f0:
                    07:61:44:17:a9:bc:72:fe:89:33:30:e4:36:71:a2:
                    3c:bd:a2:06:e8:98:39:21:53:17:14:52:82:63:35:
                    2a:2a:00:43:4a:14:42:a8:f0:de:a2:cf:a9:9c:04:
                    9c:0e:01:75:fe:0d:1b:3b:7c:31:b3:f8:18:b1:35:
                    0b:71:a8:90:ad:d9:73:e7:b9:34:6b:31:a8:a5:25:
                    21:7d:17:0e:6f:a7:49:a4:25:82:da:da:9a:81:5b:
                    86:74:a3:dc:f3:75:b4:d5:77:3b:c7:d6:b4:de:af:
                    bd:ab:40:60:c4:8d:53:10:63:8a:7a:aa:18:d5:92:
                    d1:3c:3d:18:aa:76:64:71:30:42:7b:58:70:ac:30:
                    6f:12:fb:8b:78:b2:8d:8e:c5:02:e4:cc:ed:d6:f3:
                    1d:e2:7a:cd:05:49:6f:ff:8c:9d:9b:bf:e9:2f:27:
                    35:e9:98:8e:bc:14:35:8a:07:cd:ad:25:ab:9b:9d:
                    43:55:8f:2e:ea:9d:d3:0b:90:9d:d2:f4:f9:19:a9:
                    27:42:92:2b:8c:b0:1c:a1:2d:c0:68:6e:9a:f4:6f:
                    ee:19:4d:3c:13:5f:a0:ea:3b:d7:ff:ca:b9:a7:7b:
                    d4:fc:7b:ce:c0:54:b9:25:cc:d1:74:95:e6:81:23:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:5D:E6:49:B6:B6:25:71:D9:B5:84:69:64:DB:08:05:06:E7:74
            X509v3 Authority Key Identifier:
                keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:54:ac:ef:53:37:b6:55:ed:f1:28:da:d5:a1:19:60:96:83:
         17:e3:d9:17:cf:90:df:7f:97:6f:f5:64:61:24:7b:ee:3a:40:
         a7:43:c5:bf:1a:05:da:65:d8:fc:48:ff:a5:39:2d:5a:c2:55:
         bc:92:02:bb:3a:85:08:6c:1a:51:07:6d:a9:c4:29:7c:2b:8d:
         2b:a7:69:69:8b:45:1b:d1:29:13:06:44:04:e0:a0:da:3d:14:
         aa:27:30:fb:bd:b0:10:74:4c:5c:59:d3:b4:0a:a7:a8:2f:aa:
         0d:0a:2b:e5:27:4b:01:c3:30:8f:68:5e:57:6b:ee:ad:de:dd:
         90:ba:7e:01:9a:95:98:f9:59:e1:9c:d1:5a:ae:3b:29:8c:be:
         72:04:44:45:de:5a:5a:d3:19:4d:ac:50:a1:be:57:64:69:e8:
         e7:67:7f:af:71:90:f6:b5:4e:6d:54:a8:3a:8d:22:11:33:ff:
         94:42:e1:d1:c3:fe:87:99:9d:bf:cb:00:fe:97:ab:38:9b:37:
         7e:cc:45:4e:62:bb:73:28:f3:9e:41:91:4e:ac:22:c7:1d:54:
         ad:e9:d8:dc:cf:ba:1a:14:ec:99:08:41:12:64:15:b9:88:1f:
         29:99:7f:6f:3a:0e:e6:10:c8:34:cf:c6:e2:c8:fa:8f:c9:a6:
         26:ab:ff:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EQCz4DehKD/TqaY4ePlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2UxYzk3ZjcxZjM1NTg2N2UzZmI4NzdmMjFhYTUxMzBi
NmNmNWQwHhcNMjUwNDEzMDcwMTQ0WhcNMjUwNDE0MDcwMTQ0WjAzMTEwLwYDVQQD
EygyMzI0NWRlNjQ5YjZiNjI1NzFkOWI1ODQ2OTY0ZGIwODA1MDZlNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMPNUchWzINkeFa8+PAHYUQXqbxy
/okzMOQ2caI8vaIG6Jg5IVMXFFKCYzUqKgBDShRCqPDeos+pnAScDgF1/g0bO3wx
s/gYsTULcaiQrdlz57k0azGopSUhfRcOb6dJpCWC2tqagVuGdKPc83W01Xc7x9a0
3q+9q0BgxI1TEGOKeqoY1ZLRPD0YqnZkcTBCe1hwrDBvEvuLeLKNjsUC5Mzt1vMd
4nrNBUlv/4ydm7/pLyc16ZiOvBQ1igfNrSWrm51DVY8u6p3TC5Cd0vT5GaknQpIr
jLAcoS3AaG6a9G/uGU08E1+g6jvX/8q5p3vU/HvOwFS5JczRdJXmgSPHiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMkXeZJtrYlcdm1hGlk2wgFBud0MB8GA1UdIwQY
MBaAFCh+HJf3HzVYZ+P7h38hqlEwts9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEt
OWViM2M2ODJiMDA5LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hZjE2MWItZWY1MS00NGJkLThlMGEtOWViM2M2ODJiMDA5
LzEvS0g0Y2xfY2ZOVmhuNF91SGZ5R3FVVEMyejEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1Ss71M3
tlXt8Sja1aEZYJaDF+PZF8+Q33+Xb/VkYSR77jpAp0PFvxoF2mXY/Ej/pTktWsJV
vJICuzqFCGwaUQdtqcQpfCuNK6dpaYtFG9EpEwZEBOCg2j0Uqicw+72wEHRMXFnT
tAqnqC+qDQor5SdLAcMwj2heV2vurd7dkLp+AZqVmPlZ4ZzRWq47KYy+cgRERd5a
WtMZTaxQob5XZGno52d/r3GQ9rVObVSoOo0iETP/lELh0cP+h5mdv8sA/perOJs3
fsxFTmK7cyjznkGRTqwixx1UrenY3M+6GhTsmQhBEmQVuYgfKZl/bzoO5hDINM/G
4sj6j8mmJqv/7Q==
-----END CERTIFICATE-----