Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File:                     KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier:          uFjt1W0UF/RDMCpqWT6IeQ2Zs0zanpctDokCbJR239k=
Subject key identifier:   66:03:7E:4D:EC:1A:37:60:4D:32:AD:B2:B4:D3:14:C0:FB:89:24:C8
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer:       /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial:       01962E2AB908C4F047C8BB8358C86FA1E44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number:          0200
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
                          2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: wd9jAWILXJIq9zGBfJgEDnzOuAQLgKUtJ2NqE01O5wQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b9:08:c4:f0:47:c8:bb:83:58:c8:6f:a1:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=66037e4dec1a37604d32adb2b4d314c0fb8924c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:cf:ea:1a:99:fa:b7:0c:3a:f5:2d:e6:c6:
                    f8:7a:24:2d:15:ad:20:64:6c:4d:f6:d5:92:7c:8b:
                    2f:4d:a0:49:84:d6:28:3e:d3:7e:b5:d1:0d:fd:95:
                    7a:52:8a:47:da:2b:8b:52:18:a2:aa:1c:3b:c4:39:
                    6b:88:53:07:43:b4:c4:41:d3:b5:ae:a2:9f:35:f1:
                    21:e0:9e:fc:2e:28:2b:11:8a:34:49:31:57:b8:ab:
                    bd:a7:6f:2e:ad:14:cd:ac:ed:84:3e:9c:06:45:9b:
                    d9:f4:a9:22:e8:eb:a4:24:ae:4a:b2:9e:91:84:78:
                    ee:b5:94:c8:61:c7:ef:1b:53:47:f8:41:72:71:8d:
                    e2:ef:ae:eb:7c:05:06:ad:d1:7e:77:6e:b5:12:b0:
                    1e:a5:eb:df:2b:9d:4e:06:2c:d6:20:7e:c7:2b:9c:
                    24:c1:98:ea:e8:40:92:ad:34:f4:db:4d:f8:26:ec:
                    e9:95:98:84:53:03:9f:79:ef:92:63:d2:21:bf:bf:
                    f9:0a:11:7d:65:fe:81:a7:cc:64:f9:f4:3d:aa:17:
                    41:87:52:36:1d:cc:c9:27:03:82:08:e3:1e:a3:25:
                    34:1b:6b:b6:fd:51:34:2a:9d:d8:92:29:52:28:26:
                    b9:be:47:6d:9d:e4:97:69:a0:32:09:61:6f:7a:75:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:7E:4D:EC:1A:37:60:4D:32:AD:B2:B4:D3:14:C0:FB:89:24:C8
            X509v3 Authority Key Identifier:
                keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:90:5c:c3:a7:34:e5:07:ca:a8:9b:18:d8:b1:42:49:af:81:
         4b:15:4b:0b:59:40:7d:d9:06:f8:c1:22:8c:a9:d1:e6:ef:90:
         29:1d:c8:dd:3d:83:20:27:4e:2f:94:51:9c:31:29:86:34:0c:
         05:74:1e:b0:fe:f7:72:2f:71:a2:89:84:84:07:99:fa:1d:e3:
         3c:75:cb:18:e0:be:54:b3:13:15:69:04:ed:e2:c9:fe:3a:a0:
         86:5c:3a:ff:86:10:34:be:33:78:65:2a:d8:15:a1:14:b5:d7:
         ef:85:77:fb:34:05:63:5c:e0:0a:c7:fb:69:50:24:f6:8d:5e:
         37:64:7b:52:1b:a5:e1:72:e5:45:b7:5b:1d:68:0c:cc:18:94:
         47:b2:7f:b6:5c:e7:c1:e9:98:03:26:6a:58:a3:3f:68:77:1b:
         c8:58:58:56:57:92:20:42:4a:dd:30:b6:90:d1:c8:1f:e2:8a:
         40:4c:58:da:e7:72:f3:bf:2d:fb:d5:e4:59:0c:d8:e0:9e:d4:
         d1:ac:27:b2:3a:19:b3:7f:ad:85:9a:2c:68:7f:65:a4:04:af:
         46:e4:b6:59:5c:82:69:ae:c1:89:8d:0b:19:84:dc:da:ac:06:
         e3:e5:94:b9:54:71:9c:49:10:9f:34:9f:6b:30:8a:7c:1c:26:
         87:ae:c5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKrkIxPBHyLuDWMhvoeRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTc4OGVkYTZjODBlZjkwMmI5NWQ2MDM4NzAwYTVkYTdk
NmQwY2MwHhcNMjUwNDEzMDgwMTEzWhcNMjUwNDE0MDgwMTEzWjAzMTEwLwYDVQQD
Eyg2NjAzN2U0ZGVjMWEzNzYwNGQzMmFkYjJiNGQzMTRjMGZiODkyNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBbP6hqZ+rcMOvUt5sb4eiQtFa0g
ZGxN9tWSfIsvTaBJhNYoPtN+tdEN/ZV6UopH2iuLUhiiqhw7xDlriFMHQ7TEQdO1
rqKfNfEh4J78LigrEYo0STFXuKu9p28urRTNrO2EPpwGRZvZ9Kki6OukJK5Ksp6R
hHjutZTIYcfvG1NH+EFycY3i767rfAUGrdF+d261ErAepevfK51OBizWIH7HK5wk
wZjq6ECSrTT02034JuzplZiEUwOfee+SY9Ihv7/5ChF9Zf6Bp8xk+fQ9qhdBh1I2
HczJJwOCCOMeoyU0G2u2/VE0Kp3YkilSKCa5vkdtneSXaaAyCWFvenUA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYDfk3sGjdgTTKtsrTTFMD7iSTIMB8GA1UdIwQY
MBaAFCqniO2myA75ArldYDhwCl2n1tDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMt
ZjE2ZjFlZTRmODkxLzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hNjU3NGQtZmI2ZC00N2RiLWJhMGMtZjE2ZjFlZTRmODkx
LzEvS3FlSTdhYklEdmtDdVYxZ09IQUtYYWZXME13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJBcw6c0
5QfKqJsY2LFCSa+BSxVLC1lAfdkG+MEijKnR5u+QKR3I3T2DICdOL5RRnDEphjQM
BXQesP73ci9xoomEhAeZ+h3jPHXLGOC+VLMTFWkE7eLJ/jqghlw6/4YQNL4zeGUq
2BWhFLXX74V3+zQFY1zgCsf7aVAk9o1eN2R7Uhul4XLlRbdbHWgMzBiUR7J/tlzn
wemYAyZqWKM/aHcbyFhYVleSIEJK3TC2kNHIH+KKQExY2udy878t+9XkWQzY4J7U
0awnsjoZs3+thZosaH9lpASvRuS2WVyCaa7BiY0LGYTc2qwG4+WUuVRxnEkQnzSf
azCKfBwmh67F6g==
-----END CERTIFICATE-----