Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File:                     _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier:          k3qhkmZD48qjxLQXbcu8fKkoTO5tAr1IMxb44Pq+Daw=
Subject key identifier:   27:3E:5E:F7:6B:53:DC:CA:D3:72:A8:CA:AF:93:58:C4:55:46:8D:D1
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer:       /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial:       01962F068D0913503E406F5C27F19332CD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number:          0285
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
                          2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: ulmvhRO7tMt6q6TlAWohqM83Kh8X/UJCNEZSa0QfM6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:09:13:50:3e:40:6f:5c:27:f1:93:32:cd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=273e5ef76b53dccad372a8caaf9358c455468dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:93:53:1a:57:d9:9c:80:34:07:1b:a1:64:
                    ca:e2:8d:da:fc:82:ab:9d:25:a6:2d:16:3d:23:1c:
                    eb:65:b0:27:a8:df:89:fa:91:6d:43:e0:16:14:01:
                    a6:44:ef:91:55:b7:8b:54:98:d5:08:d1:6e:57:5a:
                    d9:52:94:16:fa:b0:a6:bf:04:75:2e:cf:37:76:57:
                    d8:3c:b6:d2:27:e1:18:a0:13:59:24:06:b5:54:e2:
                    d8:57:f4:10:e7:0c:5c:37:60:e6:85:d0:7b:8c:db:
                    79:dd:52:9f:7d:84:15:33:12:53:00:5d:ce:55:6c:
                    56:89:48:11:36:41:d9:8d:66:80:76:84:8b:14:8a:
                    84:44:ac:8a:1a:8e:c5:ab:c1:b1:75:f4:1b:0c:16:
                    2c:68:85:c1:d2:ac:1a:cd:6b:1e:09:a1:48:b2:17:
                    80:62:2c:2c:7d:81:00:14:95:cf:9e:ae:b6:de:d5:
                    d4:54:b4:28:dd:be:d1:55:6c:3d:a8:ac:dc:1c:43:
                    cc:b6:9f:b6:f2:bd:6a:63:e2:ed:b7:e5:b7:b3:97:
                    46:6f:a3:c8:18:ef:01:ee:87:06:00:ed:5c:42:c3:
                    e6:60:5b:ba:d3:96:9c:73:3c:c8:74:50:aa:1e:73:
                    8e:c7:71:5c:35:1a:31:96:a6:b3:d9:0c:59:33:12:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3E:5E:F7:6B:53:DC:CA:D3:72:A8:CA:AF:93:58:C4:55:46:8D:D1
            X509v3 Authority Key Identifier:
                keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:c1:ee:82:1f:6e:43:c7:48:a1:9c:90:48:88:62:85:7b:
         f1:d7:50:5e:cf:c4:fb:79:6c:57:87:f9:9e:34:a2:ef:00:e2:
         79:bf:06:db:f1:50:c2:c1:2b:bb:dc:a3:20:18:82:de:f7:b9:
         5b:d9:bd:9d:0c:b4:5f:9e:a9:81:f4:78:e4:8e:66:2b:7c:8f:
         9f:06:e8:3a:5b:fe:c2:9e:ae:8c:77:06:23:f1:a6:d0:47:02:
         65:72:ff:b7:2c:4d:7c:cd:a0:3e:18:e7:b8:8b:f2:70:78:9b:
         25:1c:2e:3b:86:6d:f4:c1:bb:85:9e:94:34:c2:92:30:8e:e0:
         c0:50:a8:4d:3a:0b:40:0a:30:6b:05:2b:e5:d9:eb:6a:da:ca:
         92:fe:57:56:66:e9:15:d1:67:26:f7:b7:b4:81:c0:1f:81:29:
         a0:65:5d:b2:5d:1a:e7:95:f5:67:a5:50:68:46:df:b8:f3:63:
         25:d0:f2:6c:5c:c7:7d:94:5a:dd:ea:fc:8f:97:b0:17:7d:02:
         0a:27:72:be:0c:35:36:31:9e:58:96:fd:b8:97:31:b3:72:ff:
         c5:9b:40:d0:42:cc:5c:e4:15:39:38:58:d3:41:9f:61:df:b9:
         da:5e:0c:50:49:e3:90:1c:3b:2c:a6:4f:d6:0c:52:6e:8a:b8:
         4d:45:63:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBo0JE1A+QG9cJ/GTMs0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1
NzY4OTMwHhcNMjUwNDEzMTIwMTIwWhcNMjUwNDE0MTIwMTIwWjAzMTEwLwYDVQQD
EygyNzNlNWVmNzZiNTNkY2NhZDM3MmE4Y2FhZjkzNThjNDU1NDY4ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxeTUxpX2ZyANAcboWTK4o3a/IKr
nSWmLRY9IxzrZbAnqN+J+pFtQ+AWFAGmRO+RVbeLVJjVCNFuV1rZUpQW+rCmvwR1
Ls83dlfYPLbSJ+EYoBNZJAa1VOLYV/QQ5wxcN2DmhdB7jNt53VKffYQVMxJTAF3O
VWxWiUgRNkHZjWaAdoSLFIqERKyKGo7Fq8GxdfQbDBYsaIXB0qwazWseCaFIsheA
YiwsfYEAFJXPnq623tXUVLQo3b7RVWw9qKzcHEPMtp+28r1qY+Ltt+W3s5dGb6PI
GO8B7ocGAO1cQsPmYFu605acczzIdFCqHnOOx3FcNRoxlqaz2QxZMxLCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc+XvdrU9zK03Koyq+TWMRVRo3RMB8GA1UdIwQY
MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt
YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1
LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/jB7oIf
bkPHSKGckEiIYoV78ddQXs/E+3lsV4f5njSi7wDieb8G2/FQwsEru9yjIBiC3ve5
W9m9nQy0X56pgfR45I5mK3yPnwboOlv+wp6ujHcGI/Gm0EcCZXL/tyxNfM2gPhjn
uIvycHibJRwuO4Zt9MG7hZ6UNMKSMI7gwFCoTToLQAowawUr5dnratrKkv5XVmbp
FdFnJve3tIHAH4EpoGVdsl0a55X1Z6VQaEbfuPNjJdDybFzHfZRa3er8j5ewF30C
Cidyvgw1NjGeWJb9uJcxs3L/xZtA0ELMXOQVOThY00GfYd+52l4MUEnjkBw7LKZP
1gxSboq4TUVj+g==
-----END CERTIFICATE-----