Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File:                     KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier:          NHK7/5IZufvMd109G9x+fRk9+rGDTdbe98HZgXQXnGU=
Subject key identifier:   79:EC:FE:D7:93:58:A4:41:74:38:A5:10:3B:0B:A5:E2:AA:43:70:67
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer:       /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial:       01962DF41E9950FD131E2FBDD95DFAE5DC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number:          0E67
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: gMEb5fMFtphgLAFumgeSklPuaFZGt518VKpM6cGEa0o=)
                          2: jp-8lbUOvN6sUPZsTL-dh7MOVR8.roa (hash: /kMpoM5rzLA4Q5DdnfjuYEV0in2H+0XYtN+u4LENV/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1e:99:50:fd:13:1e:2f:bd:d9:5d:fa:e5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=79ecfed79358a4417438a5103b0ba5e2aa437067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:2c:c6:fe:b6:30:3f:fc:01:39:1e:7d:30:
                    da:ba:20:86:5e:d5:30:a4:43:e4:7d:11:f6:1a:ef:
                    b3:4d:5d:dc:3c:06:5e:be:ef:7d:46:3f:7b:39:7c:
                    e1:3d:be:7d:46:7c:7e:6e:a0:98:57:b0:31:1a:7d:
                    f5:f2:24:6b:95:e0:90:6f:32:25:ed:ba:43:e0:94:
                    93:79:95:55:e7:09:a5:30:cf:3c:7b:2b:42:e4:bf:
                    74:9a:99:04:51:33:46:df:d8:74:f1:53:48:e0:c8:
                    8f:92:a4:88:3d:90:6c:5a:61:05:d2:63:5d:6c:c8:
                    a3:4f:43:08:fd:0c:64:c1:f1:d8:19:6e:80:bc:d6:
                    e2:85:24:08:de:90:5d:f0:fb:5b:68:99:9e:3a:1e:
                    07:13:47:a4:3d:b3:aa:04:52:9b:0d:4c:1a:22:9a:
                    b3:5a:59:d6:45:4b:ce:63:c9:b9:21:b5:2e:96:67:
                    e0:0f:19:58:be:55:23:e3:94:52:9a:64:fb:78:57:
                    0d:d3:43:33:e4:d6:fc:5d:a0:d0:c4:a8:e6:cb:fe:
                    7c:ff:71:39:42:e5:9d:78:e9:5b:27:75:4c:a5:85:
                    f9:dd:b0:b1:12:2a:d3:cb:9c:50:8d:8c:fd:14:92:
                    9b:24:13:29:14:aa:2d:39:a5:a4:74:a0:8b:03:9b:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:FE:D7:93:58:A4:41:74:38:A5:10:3B:0B:A5:E2:AA:43:70:67
            X509v3 Authority Key Identifier:
                keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:89:de:78:6e:e8:fd:3b:eb:f2:05:3b:ee:6b:5c:8a:fc:
         82:b8:df:aa:d1:92:f3:02:04:2d:f3:16:cb:e2:1f:92:af:d0:
         38:38:82:6b:c8:5b:a0:15:aa:38:12:d5:0f:82:3f:dd:a8:87:
         49:79:e4:8a:4e:03:96:ba:80:9b:23:cc:67:5c:3c:b6:fb:e2:
         72:f9:88:a6:e9:f2:62:fe:de:3b:ba:55:4b:0c:27:1a:97:cb:
         f1:4e:4e:ee:76:ea:1b:83:d2:c8:a6:d5:13:9e:de:bb:82:2e:
         d2:69:df:3d:32:e3:6c:87:f3:41:0d:3b:70:52:80:65:b5:d2:
         ca:b5:2c:7e:7e:2c:b3:10:fc:07:3c:31:c1:39:8c:b4:7d:65:
         a0:78:fa:c7:89:ee:d2:80:ac:7c:ae:0e:22:8e:c1:77:08:6d:
         75:25:ad:34:d8:0b:fb:e0:aa:12:2e:d0:a1:e7:0b:83:6b:f7:
         e3:b7:08:48:79:0b:a3:29:f6:53:2a:b0:4b:5e:77:9f:7c:e5:
         31:a0:c0:18:e1:55:07:4e:c1:09:96:a6:91:27:b1:40:75:03:
         8d:54:8b:4f:76:0e:d2:8e:7f:90:8d:9f:cb:70:42:56:e9:e2:
         36:45:d2:a1:71:be:5a:1b:b3:d2:d8:38:47:26:42:8d:e2:02:
         2c:83:5c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B6ZUP0THi+92V365dyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmViZDQ2NTg2MTg0NzNlZDRjODM3NjdjNTFkZThlMjMz
YzMyOTIwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg3OWVjZmVkNzkzNThhNDQxNzQzOGE1MTAzYjBiYTVlMmFhNDM3MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIsxv62MD/8ATkefTDauiCGXtUw
pEPkfRH2Gu+zTV3cPAZevu99Rj97OXzhPb59Rnx+bqCYV7AxGn318iRrleCQbzIl
7bpD4JSTeZVV5wmlMM88eytC5L90mpkEUTNG39h08VNI4MiPkqSIPZBsWmEF0mNd
bMijT0MI/QxkwfHYGW6AvNbihSQI3pBd8PtbaJmeOh4HE0ekPbOqBFKbDUwaIpqz
WlnWRUvOY8m5IbUulmfgDxlYvlUj45RSmmT7eFcN00Mz5Nb8XaDQxKjmy/58/3E5
QuWdeOlbJ3VMpYX53bCxEirTy5xQjYz9FJKbJBMpFKotOaWkdKCLA5sdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHns/teTWKRBdDilEDsLpeKqQ3BnMB8GA1UdIwQY
MBaAFCi+vUZYYYRz7UyDdnxR3o4jPDKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWIt
YmE3OTU2YjBmMmRkLzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hYTk3NWMtYjliNS00NjUxLWJjNWItYmE3OTU2YjBmMmRk
LzEvS0w2OVJsaGhoSFB0VElOMmZGSGVqaU04TXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8iJ3nhu
6P076/IFO+5rXIr8grjfqtGS8wIELfMWy+Ifkq/QODiCa8hboBWqOBLVD4I/3aiH
SXnkik4DlrqAmyPMZ1w8tvvicvmIpunyYv7eO7pVSwwnGpfL8U5O7nbqG4PSyKbV
E57eu4Iu0mnfPTLjbIfzQQ07cFKAZbXSyrUsfn4ssxD8BzwxwTmMtH1loHj6x4nu
0oCsfK4OIo7BdwhtdSWtNNgL++CqEi7QoecLg2v347cISHkLoyn2UyqwS153n3zl
MaDAGOFVB07BCZamkSexQHUDjVSLT3YO0o5/kI2fy3BCVuniNkXSoXG+Whuz0tg4
RyZCjeICLINcxQ==
-----END CERTIFICATE-----