Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
File:                     KY60_lwZ8pLyiSTL8VVaj1do2CY.mft (raw, json)
Hash identifier:          OUskq1ODc7DEIxZbjamB2pAWB9sRGC4KppYkwv9QdcA=
Subject key identifier:   D0:29:B4:E0:40:2A:A3:6D:E9:30:06:60:FE:50:9E:80:78:9B:43:C8
Authority key identifier: 29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26
Certificate issuer:       /CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
Certificate serial:       01962E99795992B72F9BC9F0DD5F4BFCF6FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: KY60_lwZ8pLyiSTL8VVaj1do2CY.crl (hash: AzCP3MvIfzmbpLEXKDR3/aRTcsFWV1Wn0/xGSOz6UeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:59:92:b7:2f:9b:c9:f0:dd:5f:4b:fc:f6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298eb4fe5c19f292f28924cbf1555a8f5768d826
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=d029b4e0402aa36de9300660fe509e80789b43c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:3b:2e:79:ca:e1:95:45:74:f1:8c:d5:7e:
                    2d:59:07:f5:87:71:b8:e2:d6:5f:f3:54:ae:4a:0f:
                    cb:ba:16:b9:72:e2:14:d7:6d:f9:c7:34:b2:fb:29:
                    cb:3b:ce:d5:10:14:9f:45:37:7b:ef:1f:54:36:7d:
                    c3:03:bc:cd:f2:37:2d:78:79:12:41:9a:4f:9a:52:
                    12:f2:cd:c0:fb:d7:5a:02:a1:18:af:c2:44:d5:08:
                    79:90:5e:e2:29:1f:24:4f:f1:6e:a6:d7:32:2f:70:
                    90:b7:e8:53:6e:07:90:37:87:99:e5:1e:2d:ec:9f:
                    bf:00:9d:1c:e7:18:d7:84:0b:91:ba:2e:9b:7b:9c:
                    32:02:9b:50:ad:06:b6:90:00:39:52:86:bf:40:76:
                    90:6b:82:53:36:c5:cb:e8:c1:64:18:a5:39:a9:57:
                    87:7d:ff:0b:1a:6d:c3:fa:25:67:0f:82:57:f6:3b:
                    a1:9f:0e:17:02:77:60:d3:b7:8c:5f:9e:75:f7:22:
                    94:a7:eb:3e:61:2e:ed:e8:47:36:bd:e3:03:1b:92:
                    b5:5e:39:ab:4a:33:17:64:84:9d:00:90:8c:74:3a:
                    32:6f:87:38:f1:2c:15:a4:08:bd:bd:c4:84:3b:dd:
                    cd:68:75:f2:b0:96:17:14:ee:52:ff:ed:4e:14:b4:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:B4:E0:40:2A:A3:6D:E9:30:06:60:FE:50:9E:80:78:9B:43:C8
            X509v3 Authority Key Identifier:
                keyid:29:8E:B4:FE:5C:19:F2:92:F2:89:24:CB:F1:55:5A:8F:57:68:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY60_lwZ8pLyiSTL8VVaj1do2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97111c-2e61-4359-8766-6bedf2fbdce2/1/KY60_lwZ8pLyiSTL8VVaj1do2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:29:42:26:51:5b:a7:18:2e:1e:1e:91:d7:1a:3b:f1:f7:f4:
         6c:7f:1a:dd:dc:26:53:e3:a8:ea:e0:09:ea:cc:34:5f:74:d8:
         6f:fc:0a:15:dd:e3:dd:98:d8:da:22:46:ff:8e:a3:48:7c:d2:
         08:2a:17:cf:36:94:e2:06:c0:68:ed:79:8f:e7:e5:93:af:8b:
         e6:ed:61:1c:57:f2:64:3d:58:80:92:70:cf:be:ca:a5:27:98:
         b6:67:96:a1:6c:91:b5:02:ee:ca:48:8e:91:6b:04:d0:41:9f:
         a5:15:70:f2:bb:e3:5e:44:9a:23:7e:a6:c9:3e:03:63:f6:db:
         8c:e6:84:c9:e5:ba:3e:b7:b3:e1:31:17:98:41:5b:4d:f9:30:
         39:ef:07:e2:b0:64:73:00:9d:10:a7:15:3d:84:3d:4c:d6:1e:
         9d:bb:0c:2c:53:9b:d0:69:8b:ed:aa:a9:ee:f1:57:01:2a:2b:
         d9:c7:07:2c:46:ba:b6:99:7a:c8:64:d6:51:ce:4a:fe:06:92:
         c7:5b:ab:da:40:98:d4:1c:77:89:60:3b:28:59:85:7f:87:3b:
         4b:22:fb:46:b2:e4:ea:14:70:8f:4e:c8:c2:22:86:53:97:6c:
         d5:a6:5c:bb:cf:c3:5a:f9:c2:00:64:14:75:e7:d2:4c:d9:33:
         96:c3:7e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXlZkrcvm8nw3V9L/Pb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OGViNGZlNWMxOWYyOTJmMjg5MjRjYmYxNTU1YThmNTc2
OGQ4MjYwHhcNMjUwNDEzMTAwMjEyWhcNMjUwNDE0MTAwMjEyWjAzMTEwLwYDVQQD
EyhkMDI5YjRlMDQwMmFhMzZkZTkzMDA2NjBmZTUwOWU4MDc4OWI0M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQ7LnnK4ZVFdPGM1X4tWQf1h3G4
4tZf81SuSg/Luha5cuIU1235xzSy+ynLO87VEBSfRTd77x9UNn3DA7zN8jcteHkS
QZpPmlIS8s3A+9daAqEYr8JE1Qh5kF7iKR8kT/FuptcyL3CQt+hTbgeQN4eZ5R4t
7J+/AJ0c5xjXhAuRui6be5wyAptQrQa2kAA5Uoa/QHaQa4JTNsXL6MFkGKU5qVeH
ff8LGm3D+iVnD4JX9juhnw4XAndg07eMX5519yKUp+s+YS7t6Ec2veMDG5K1Xjmr
SjMXZISdAJCMdDoyb4c48SwVpAi9vcSEO93NaHXysJYXFO5S/+1OFLQv4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAptOBAKqNt6TAGYP5QnoB4m0PIMB8GA1UdIwQY
MBaAFCmOtP5cGfKS8okky/FVWo9XaNgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NzExMWMtMmU2MS00MzU5LTg3NjYt
NmJlZGYyZmJkY2UyLzEvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NzExMWMtMmU2MS00MzU5LTg3NjYtNmJlZGYyZmJkY2Uy
LzEvS1k2MF9sd1o4cEx5aVNUTDhWVmFqMWRvMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABClCJlFb
pxguHh6R1xo78ff0bH8a3dwmU+Oo6uAJ6sw0X3TYb/wKFd3j3ZjY2iJG/46jSHzS
CCoXzzaU4gbAaO15j+flk6+L5u1hHFfyZD1YgJJwz77KpSeYtmeWoWyRtQLuykiO
kWsE0EGfpRVw8rvjXkSaI36myT4DY/bbjOaEyeW6Prez4TEXmEFbTfkwOe8H4rBk
cwCdEKcVPYQ9TNYenbsMLFOb0GmL7aqp7vFXASor2ccHLEa6tpl6yGTWUc5K/gaS
x1ur2kCY1Bx3iWA7KFmFf4c7SyL7RrLk6hRwj07IwiKGU5ds1aZcu8/DWvnCAGQU
defSTNkzlsN+8g==
-----END CERTIFICATE-----