Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
File:                     mk-ppgpaJP_mFLbftYgT2SWjsxg.mft (raw, json)
Hash identifier:          Y3Isg+2X5IgGGuKIQ8pYmtwy2V3GvAhcFKCM+msljEk=
Subject key identifier:   6B:A9:53:5D:58:DE:15:01:0B:F2:B1:7F:8F:20:45:D7:27:2F:1D:49
Authority key identifier: 9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18
Certificate issuer:       /CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
Certificate serial:       01962ECFB055915A8104BE08D7BF4A28ADDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft
Manifest number:          0BFF
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: WF_UUzJyBXVRYaWBRz9A5RqP7uM.roa (hash: fXJDB7viVboUYMb0Tq5yYms1zX+sjGa50QbTOcD6d1o=)
                          2: mk-ppgpaJP_mFLbftYgT2SWjsxg.crl (hash: upddRzH35Qo3602V8rfOndXqcM2Il7MxiIvAG2Xc39c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b0:55:91:5a:81:04:be:08:d7:bf:4a:28:ad:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4fa9a60a5a24ffe614b6dfb58813d925a3b318
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=6ba9535d58de15010bf2b17f8f2045d7272f1d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:ea:4c:21:01:19:21:1c:31:7b:9b:ae:84:
                    20:c6:63:f4:2a:af:de:b4:04:ab:bf:6b:46:d3:ea:
                    0a:f7:69:2b:54:72:f0:68:84:5c:96:62:58:a6:aa:
                    77:2d:c8:86:38:2f:07:42:81:cb:de:86:ef:13:1e:
                    7c:7d:8f:95:21:91:07:84:1d:2b:fd:45:8a:57:d4:
                    27:cb:35:35:29:1b:e9:3f:d8:6c:fc:d9:7e:6b:66:
                    13:41:a2:10:c0:d6:aa:ba:62:5e:5e:53:9d:7a:8c:
                    28:b1:0a:5f:b1:9d:13:d0:d7:dc:62:0e:fe:bc:a2:
                    f5:2f:21:4c:63:b3:4d:2c:bf:9f:ea:28:62:af:b8:
                    e0:38:bf:21:01:53:a9:22:2b:0d:f7:e3:22:b1:f0:
                    1f:63:ac:b8:7d:d2:1a:8a:c8:78:da:7a:b2:0c:81:
                    75:6b:0e:e2:08:a2:98:71:45:c9:a2:95:7f:1f:31:
                    20:07:c4:5f:86:41:f9:1e:35:46:77:7d:7c:90:71:
                    62:81:1b:7e:52:13:7f:2d:b3:24:4a:ab:c2:e2:2f:
                    e8:67:34:f8:a5:98:b3:ea:bd:f8:9e:c6:84:46:be:
                    65:a8:fa:13:24:05:b1:62:78:46:85:a6:f5:e8:1c:
                    86:4a:ea:0b:fa:26:59:37:fc:47:79:38:f3:76:6d:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:53:5D:58:DE:15:01:0B:F2:B1:7F:8F:20:45:D7:27:2F:1D:49
            X509v3 Authority Key Identifier:
                keyid:9A:4F:A9:A6:0A:5A:24:FF:E6:14:B6:DF:B5:88:13:D9:25:A3:B3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk-ppgpaJP_mFLbftYgT2SWjsxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0494-5ad6-4ea4-95fa-a83d9d920d31/1/mk-ppgpaJP_mFLbftYgT2SWjsxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:23:b7:a8:a0:a8:79:56:f4:9b:8a:97:79:27:9c:4e:3e:
         02:2e:96:e8:cd:04:1b:5f:0a:b3:5c:90:d7:b3:b2:ac:e6:bd:
         7d:f1:07:47:7c:7d:a7:20:86:3f:34:e0:ea:43:5f:ff:b2:26:
         bb:ac:ea:fd:2d:0b:1c:74:f0:7f:bf:6d:bd:15:37:c5:65:ed:
         91:f2:5f:39:64:7c:ed:a8:0e:1f:a8:75:f1:dd:a8:8b:87:c5:
         3c:b8:59:fb:6c:ea:0c:b9:c9:34:ee:dc:1e:c5:1c:33:14:1b:
         ce:37:0e:d0:e5:10:c1:90:7d:76:71:a3:55:31:7c:2a:91:7c:
         6b:02:3f:2f:12:8b:bb:87:51:ad:80:4d:91:20:39:ad:d1:97:
         dc:21:a4:50:1d:ab:e4:6d:06:c7:aa:bc:8c:be:1e:d3:3a:a1:
         b7:92:1f:fd:c0:ff:4a:20:93:fc:c3:89:47:e8:91:c0:4f:b6:
         a9:d8:f5:b4:07:02:5e:5c:41:e6:ce:e4:a4:2c:6d:95:4a:bb:
         9a:43:8e:19:b0:86:f0:e3:84:9a:93:85:18:f3:0f:97:1c:cb:
         eb:56:b3:57:3e:e5:68:70:72:14:3f:59:b6:ce:a0:95:53:9c:
         0f:4f:de:02:73:fd:07:ad:9a:37:bd:03:e8:3c:be:8b:be:95:
         45:82:7e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7BVkVqBBL4I179KKK3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGZhOWE2MGE1YTI0ZmZlNjE0YjZkZmI1ODgxM2Q5MjVh
M2IzMTgwHhcNMjUwNDEzMTEwMTI1WhcNMjUwNDE0MTEwMTI1WjAzMTEwLwYDVQQD
Eyg2YmE5NTM1ZDU4ZGUxNTAxMGJmMmIxN2Y4ZjIwNDVkNzI3MmYxZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8HqTCEBGSEcMXubroQgxmP0Kq/e
tASrv2tG0+oK92krVHLwaIRclmJYpqp3LciGOC8HQoHL3obvEx58fY+VIZEHhB0r
/UWKV9QnyzU1KRvpP9hs/Nl+a2YTQaIQwNaqumJeXlOdeowosQpfsZ0T0NfcYg7+
vKL1LyFMY7NNLL+f6ihir7jgOL8hAVOpIisN9+MisfAfY6y4fdIaish42nqyDIF1
aw7iCKKYcUXJopV/HzEgB8RfhkH5HjVGd318kHFigRt+UhN/LbMkSqvC4i/oZzT4
pZiz6r34nsaERr5lqPoTJAWxYnhGhab16ByGSuoL+iZZN/xHeTjzdm0q5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGupU11Y3hUBC/Kxf48gRdcnLx1JMB8GA1UdIwQY
MBaAFJpPqaYKWiT/5hS237WIE9klo7MYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEt
YTgzZDlkOTIwZDMxLzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81YjA0OTQtNWFkNi00ZWE0LTk1ZmEtYTgzZDlkOTIwZDMx
LzEvbWstcHBncGFKUF9tRkxiZnRZZ1QyU1dqc3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/kjt6ig
qHlW9JuKl3knnE4+Ai6W6M0EG18Ks1yQ17OyrOa9ffEHR3x9pyCGPzTg6kNf/7Im
u6zq/S0LHHTwf79tvRU3xWXtkfJfOWR87agOH6h18d2oi4fFPLhZ+2zqDLnJNO7c
HsUcMxQbzjcO0OUQwZB9dnGjVTF8KpF8awI/LxKLu4dRrYBNkSA5rdGX3CGkUB2r
5G0Gx6q8jL4e0zqht5If/cD/SiCT/MOJR+iRwE+2qdj1tAcCXlxB5s7kpCxtlUq7
mkOOGbCG8OOEmpOFGPMPlxzL61azVz7laHByFD9Zts6glVOcD0/eAnP9B62aN70D
6Dy+i76VRYJ+Bg==
-----END CERTIFICATE-----