Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File:                     KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier:          n6q9PEdci59ZXVvQPhZHoV0GSbszDpzF6GOR+U13jGg=
Subject key identifier:   18:0A:B6:C5:84:AF:07:59:59:C7:03:B5:3F:59:A5:DB:0F:8E:FE:ED
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer:       /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial:       01962E2AED2B37EE11EA36A2D57393CAD7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number:          0211
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: NDdGdasCV11kwmn0RdnMIlvZwaH55GAxUNyyybDeeiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:2b:37:ee:11:ea:36:a2:d5:73:93:ca:d7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=180ab6c584af075959c703b53f59a5db0f8efeed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:4b:34:45:b1:88:a8:bc:fa:3f:53:cc:11:
                    cc:be:69:89:bf:50:ed:ca:30:fe:e6:40:e9:41:c0:
                    db:80:e8:36:75:96:cb:2c:03:e3:d2:fd:3a:c2:6d:
                    66:fa:d9:1a:1c:89:84:22:ea:fe:8a:63:0e:59:a8:
                    36:a3:88:58:80:5a:38:e3:82:5e:5a:5f:5b:ef:55:
                    57:64:ba:1d:ca:d7:c0:3c:a9:81:17:ca:00:37:d8:
                    74:9b:0c:41:ef:44:8d:1b:21:6a:05:b8:b5:c5:fb:
                    48:6e:40:f3:01:8e:62:15:56:54:db:5a:a1:7c:d4:
                    f6:e0:7f:fd:ea:46:a6:95:75:a2:0c:e9:e2:66:bd:
                    a6:88:2f:9e:cc:95:a8:07:dd:70:31:91:18:9c:78:
                    32:fe:65:68:71:fc:d3:4a:5f:d1:2e:b1:4b:22:3b:
                    c7:27:e3:2b:8a:c9:ea:c7:48:af:aa:13:ab:57:fb:
                    c4:84:5d:f7:8f:e6:d5:14:e7:4b:6e:c3:6a:e3:6b:
                    eb:5c:4a:da:36:7f:7a:ed:12:36:f2:ef:44:d2:fc:
                    2b:79:92:a3:15:d5:67:19:45:eb:52:d5:fe:5b:1b:
                    7e:05:dd:38:69:19:36:60:a4:f2:86:09:0b:8a:28:
                    f2:a8:0b:0f:0a:62:d0:3c:e9:91:e3:04:40:ef:3c:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0A:B6:C5:84:AF:07:59:59:C7:03:B5:3F:59:A5:DB:0F:8E:FE:ED
            X509v3 Authority Key Identifier:
                keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:c2:c8:fc:2a:af:ef:84:0c:03:78:1e:99:40:15:84:29:
         73:09:50:fe:c9:7b:ed:fd:e5:72:20:77:6f:38:e4:73:b7:c3:
         a6:36:d2:79:ac:68:33:36:a8:74:9d:59:88:27:2c:23:64:7a:
         dc:5d:4b:1b:d1:8f:4b:15:12:ec:8f:42:05:e4:97:2b:7a:a5:
         db:09:fb:a2:a6:89:7d:b4:64:80:89:1b:51:cf:1e:2a:2c:fc:
         d7:4f:f2:a8:ce:4b:22:95:ed:72:0e:09:c2:69:32:f4:3c:16:
         a9:22:7f:56:37:10:1a:0f:96:69:11:b2:54:e6:20:ef:83:ce:
         c0:5c:e5:d1:85:50:8b:03:58:89:67:e2:fc:a7:b1:da:cf:21:
         e7:79:aa:31:e1:db:9c:91:95:52:6c:b2:0f:59:22:18:8f:1c:
         c5:a0:02:bd:e3:9c:ae:10:2c:5f:2f:41:8d:30:87:bb:5b:cc:
         33:d8:a2:ac:a6:0b:45:5d:ce:f8:48:f6:1e:4d:e1:79:43:b9:
         5f:7b:8b:1e:9c:ff:56:ca:6b:58:be:59:f3:e9:ce:ff:0f:e4:
         b6:96:97:98:3e:86:13:01:82:cb:eb:c6:78:dc:77:3f:f6:17:
         81:a2:d5:92:d0:c6:57:ca:79:06:ba:0d:9c:60:d4:26:3f:56:
         5b:d4:e5:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu0rN+4R6jai1XOTytekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTYwYWQwZmRkYjQzMjY5YjdlNmQ1YjQ4NDMyOGE0NzZm
MGVhNjgwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
EygxODBhYjZjNTg0YWYwNzU5NTljNzAzYjUzZjU5YTVkYjBmOGVmZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLNLNEWxiKi8+j9TzBHMvmmJv1Dt
yjD+5kDpQcDbgOg2dZbLLAPj0v06wm1m+tkaHImEIur+imMOWag2o4hYgFo444Je
Wl9b71VXZLodytfAPKmBF8oAN9h0mwxB70SNGyFqBbi1xftIbkDzAY5iFVZU21qh
fNT24H/96kamlXWiDOniZr2miC+ezJWoB91wMZEYnHgy/mVocfzTSl/RLrFLIjvH
J+Mrisnqx0ivqhOrV/vEhF33j+bVFOdLbsNq42vrXEraNn967RI28u9E0vwreZKj
FdVnGUXrUtX+Wxt+Bd04aRk2YKTyhgkLiijyqAsPCmLQPOmR4wRA7zxwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgKtsWErwdZWccDtT9ZpdsPjv7tMB8GA1UdIwQY
MBaAFClWCtD920Mmm35tW0hDKKR28OpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85YTcxMTMtODY5ZS00NmMwLTlhMzgt
OGEyZWZlMmZiMDhiLzEvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85YTcxMTMtODY5ZS00NmMwLTlhMzgtOGEyZWZlMmZiMDhi
LzEvS1ZZSzBQM2JReWFiZm0xYlNFTW9wSGJ3Nm1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsfCyPwq
r++EDAN4HplAFYQpcwlQ/sl77f3lciB3bzjkc7fDpjbSeaxoMzaodJ1ZiCcsI2R6
3F1LG9GPSxUS7I9CBeSXK3ql2wn7oqaJfbRkgIkbUc8eKiz810/yqM5LIpXtcg4J
wmky9DwWqSJ/VjcQGg+WaRGyVOYg74POwFzl0YVQiwNYiWfi/Kex2s8h53mqMeHb
nJGVUmyyD1kiGI8cxaACveOcrhAsXy9BjTCHu1vMM9iirKYLRV3O+Ej2Hk3heUO5
X3uLHpz/VsprWL5Z8+nO/w/ktpaXmD6GEwGCy+vGeNx3P/YXgaLVktDGV8p5BroN
nGDUJj9WW9TltQ==
-----END CERTIFICATE-----