Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File:                     KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier:          nNR0zZpEtoITgBGOpcaA+y3LK8ch4EWkrXlZWHWU4Q0=
Subject key identifier:   7D:3D:41:9A:DC:56:5E:8D:CF:31:09:55:C2:9F:29:48:3B:31:B3:E8
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer:       /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial:       01962F7437C58B78D0084CEAA2645A6CD524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number:          123D
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
                          2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: fQ7K8EWxv10oXM7D/uh/Z22D9QqnewJgdLG0OvEGjZA=)
                          3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:37:c5:8b:78:d0:08:4c:ea:a2:64:5a:6c:d5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=7d3d419adc565e8dcf310955c29f29483b31b3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:64:36:81:1b:e7:d5:bd:66:c0:67:fc:6b:45:
                    41:12:1d:cd:6c:e5:58:01:71:21:c9:ec:f6:cc:c4:
                    be:23:9d:86:f5:15:eb:93:47:29:96:e2:67:98:ec:
                    a2:1d:06:a2:c0:89:54:6f:8c:ba:30:55:d0:6d:cd:
                    3f:33:d1:8a:e5:0a:c1:a8:fe:18:0d:61:34:7f:38:
                    f4:9b:57:7c:46:bb:05:bf:31:01:5e:20:5b:e1:80:
                    41:6a:f8:ed:65:18:39:0a:a8:da:32:19:17:0d:b4:
                    b2:47:d0:19:be:13:1d:95:c6:11:43:ba:06:f0:f8:
                    ed:dd:9a:58:7e:53:2b:9e:c8:6a:b3:20:54:40:e8:
                    d7:71:81:bc:37:73:65:b3:fc:b5:6c:a7:af:34:f9:
                    ea:42:07:7c:50:e6:43:1a:e2:2e:d1:be:5a:a1:ab:
                    55:2f:a8:71:a9:e4:89:98:f8:e0:62:9c:88:fa:9d:
                    da:96:49:06:64:11:3a:18:38:4a:d8:aa:d1:7a:0d:
                    54:be:18:43:ed:d7:f9:04:f8:b9:ed:c6:d7:40:ae:
                    0c:96:08:f8:c6:fc:e0:4a:96:c8:73:62:b0:87:ba:
                    13:fb:74:e0:86:d9:a4:9e:6d:ed:9c:14:9a:79:ed:
                    8b:ca:8e:35:cf:82:16:02:b3:d3:95:ef:33:f2:c5:
                    8e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3D:41:9A:DC:56:5E:8D:CF:31:09:55:C2:9F:29:48:3B:31:B3:E8
            X509v3 Authority Key Identifier:
                keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ad:25:02:1f:ef:1e:a2:e2:11:87:a4:4a:2e:ec:65:a3:e0:
         4c:37:50:55:ea:17:54:68:bb:b6:50:d5:2e:65:9b:e3:3e:07:
         1a:af:a0:91:c8:93:00:c5:2a:f2:aa:9c:37:0f:f6:70:10:ed:
         6d:46:c9:2d:ff:fd:ae:ee:36:b5:9d:6c:f7:4c:b7:65:ee:f3:
         f2:6e:fd:1c:f9:69:3e:17:3e:db:c6:05:2a:3f:b5:cb:81:03:
         04:cc:31:9f:44:fd:09:28:36:6f:74:e0:b6:35:5a:a0:79:d7:
         ed:57:ed:0e:74:24:4d:fd:db:d9:aa:d4:8a:0c:db:d7:11:83:
         a2:a5:aa:9f:c0:70:6d:2b:c8:c5:e0:b7:27:d3:ff:93:cc:f5:
         b7:5f:0a:a2:e7:2c:ec:5b:65:6d:bf:1c:05:3a:94:a2:ae:6a:
         ed:a4:b6:8f:50:37:c9:a2:96:f0:bc:a6:30:62:b6:3e:8e:8b:
         7a:42:6d:81:32:26:d0:7c:ef:10:c4:fc:4c:87:1f:db:ef:60:
         c9:e2:2e:f8:f6:50:05:74:85:93:8b:da:5a:9b:9b:71:3e:28:
         91:b1:c3:be:4f:75:1e:ee:05:95:d1:09:76:a5:b9:2c:b0:b6:
         09:ac:97:91:7f:8d:8d:34:0e:e3:9c:44:61:c6:10:d2:3f:17:
         13:4f:af:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDfFi3jQCEzqomRabNUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
Eyg3ZDNkNDE5YWRjNTY1ZThkY2YzMTA5NTVjMjlmMjk0ODNiMzFiM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GQ2gRvn1b1mwGf8a0VBEh3NbOVY
AXEhyez2zMS+I52G9RXrk0cpluJnmOyiHQaiwIlUb4y6MFXQbc0/M9GK5QrBqP4Y
DWE0fzj0m1d8RrsFvzEBXiBb4YBBavjtZRg5CqjaMhkXDbSyR9AZvhMdlcYRQ7oG
8Pjt3ZpYflMrnshqsyBUQOjXcYG8N3Nls/y1bKevNPnqQgd8UOZDGuIu0b5aoatV
L6hxqeSJmPjgYpyI+p3alkkGZBE6GDhK2KrReg1UvhhD7df5BPi57cbXQK4Mlgj4
xvzgSpbIc2Kwh7oT+3Tghtmknm3tnBSaee2Lyo41z4IWArPTle8z8sWO+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH09QZrcVl6NzzEJVcKfKUg7MbPoMB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea0lAh/v
HqLiEYekSi7sZaPgTDdQVeoXVGi7tlDVLmWb4z4HGq+gkciTAMUq8qqcNw/2cBDt
bUbJLf/9ru42tZ1s90y3Ze7z8m79HPlpPhc+28YFKj+1y4EDBMwxn0T9CSg2b3Tg
tjVaoHnX7VftDnQkTf3b2arUigzb1xGDoqWqn8BwbSvIxeC3J9P/k8z1t18Koucs
7Ftlbb8cBTqUoq5q7aS2j1A3yaKW8LymMGK2Po6LekJtgTIm0HzvEMT8TIcf2+9g
yeIu+PZQBXSFk4vaWpubcT4okbHDvk91Hu4FldEJdqW5LLC2CayXkX+NjTQO45xE
YcYQ0j8XE0+vkQ==
-----END CERTIFICATE-----