Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File:                     KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier:          bc+NzQPMmr5GUY/3Mc2H4LMHmsYlYLywGZj+dXZ8Vq4=
Subject key identifier:   09:46:D6:60:61:FC:7E:B4:67:48:B7:F3:82:7E:33:54:5C:3C:E4:F7
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer:       /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial:       01962F06FF077120F5746763AD02666E2E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number:          10D8
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: h8lL+/FeX2hd29srPEJrzJlDTDhqz765jaA/gMPVZog=)
                          2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:07:71:20:f5:74:67:63:ad:02:66:6e:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=0946d66061fc7eb46748b7f3827e33545c3ce4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:29:eb:fb:3f:45:c1:be:d8:b3:77:ad:49:
                    55:c9:e3:28:33:00:25:d8:21:0c:35:31:79:88:6c:
                    04:7a:4a:cb:48:f9:f7:22:00:d5:6a:dc:c4:e3:bc:
                    26:a6:94:9f:c0:3a:61:38:11:88:54:43:b3:6c:53:
                    82:1d:75:d1:2e:fd:0a:68:b7:50:63:66:94:69:cb:
                    c0:54:f9:41:89:9e:43:ee:d8:a2:9b:46:93:62:2f:
                    68:04:3d:14:47:3c:41:eb:88:f1:ca:44:03:e2:b9:
                    a9:45:42:2b:60:69:4f:5a:40:9f:20:cd:a4:65:2b:
                    34:d3:85:20:aa:0d:9a:8c:22:26:e9:98:a1:8d:43:
                    1e:19:a4:b5:13:01:3c:61:cc:15:a3:6d:28:15:42:
                    bb:3e:15:b2:a0:bb:a5:2e:a3:0d:95:4e:a6:0d:46:
                    f2:dc:13:f5:ce:7d:66:94:75:f9:4f:4f:e9:fc:7c:
                    e2:79:a2:8b:ee:cc:c9:70:4f:6c:32:d5:07:3c:a4:
                    8d:ce:e7:bb:30:cd:48:e0:86:7c:87:7c:d5:72:c1:
                    93:27:c4:15:da:c3:dc:52:31:03:10:e8:f8:4a:21:
                    07:fb:6d:eb:7d:48:97:f6:18:44:16:53:03:2d:36:
                    b3:fc:21:d3:32:2e:2a:e5:83:b0:56:0d:71:52:13:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:46:D6:60:61:FC:7E:B4:67:48:B7:F3:82:7E:33:54:5C:3C:E4:F7
            X509v3 Authority Key Identifier:
                keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:80:e7:9a:65:01:02:84:f8:46:5b:13:1c:65:83:66:ea:fe:
         34:13:54:9c:e3:e7:ca:20:dd:e0:e8:9a:28:60:9d:94:f4:e3:
         c4:9c:e4:66:9e:7d:a7:93:de:44:d9:a7:70:d2:bd:6a:8a:d6:
         9c:92:f2:dc:65:9b:7b:72:b5:a2:9a:77:96:7d:64:bc:c5:9a:
         c9:d9:73:18:6f:a3:7c:cc:37:80:db:32:c1:27:c7:37:96:05:
         6a:f7:57:65:cd:0a:af:ec:fb:a5:0c:47:f6:3a:66:06:a6:09:
         8e:3e:26:3e:b7:d7:4f:b2:92:85:5e:9d:e9:0c:d4:fd:f6:bb:
         8b:80:c4:6d:aa:d9:ba:d2:86:13:18:48:2e:c2:c2:9d:62:fb:
         f1:67:fb:b7:e3:8e:05:58:cb:cd:fc:f8:83:e2:5b:75:56:1a:
         f1:f7:f8:df:cd:33:a5:97:aa:dd:ac:d3:35:cc:c5:d7:bf:d3:
         14:73:e1:01:a7:c8:b9:82:fb:c1:bf:0b:34:76:1e:aa:e4:cd:
         31:5b:61:36:c5:0e:1b:38:98:f3:01:ef:54:ec:e8:5b:19:43:
         9f:4b:90:be:f8:92:f6:5c:d5:e7:b2:b0:66:04:6e:80:06:bf:
         2f:eb:1c:8f:3e:cb:1c:80:ce:bb:23:1e:d5:7f:46:ed:f3:a3:
         97:f7:1a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBv8HcSD1dGdjrQJmbi5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDU5ZTg4OWY5OWFlZmRkZTVlOTQ5ZmU4MDc5ZDMzN2I1
N2Y0NDcwHhcNMjUwNDEzMTIwMTQ5WhcNMjUwNDE0MTIwMTQ5WjAzMTEwLwYDVQQD
EygwOTQ2ZDY2MDYxZmM3ZWI0Njc0OGI3ZjM4MjdlMzM1NDVjM2NlNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiEp6/s/RcG+2LN3rUlVyeMoMwAl
2CEMNTF5iGwEekrLSPn3IgDVatzE47wmppSfwDphOBGIVEOzbFOCHXXRLv0KaLdQ
Y2aUacvAVPlBiZ5D7tiim0aTYi9oBD0URzxB64jxykQD4rmpRUIrYGlPWkCfIM2k
ZSs004Ugqg2ajCIm6ZihjUMeGaS1EwE8YcwVo20oFUK7PhWyoLulLqMNlU6mDUby
3BP1zn1mlHX5T0/p/HzieaKL7szJcE9sMtUHPKSNzue7MM1I4IZ8h3zVcsGTJ8QV
2sPcUjEDEOj4SiEH+23rfUiX9hhEFlMDLTaz/CHTMi4q5YOwVg1xUhNwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlG1mBh/H60Z0i384J+M1RcPOT3MB8GA1UdIwQY
MBaAFCnVnoifma793l6Un+gHnTN7V/RHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2Ut
MzYyNmI4ZmZkMWU1LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNGJkYWUtMDlmMC00MzM0LTg1M2UtMzYyNmI4ZmZkMWU1
LzEvS2RXZWlKLVpydjNlWHBTZjZBZWRNM3RYOUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIDnmmUB
AoT4RlsTHGWDZur+NBNUnOPnyiDd4OiaKGCdlPTjxJzkZp59p5PeRNmncNK9aorW
nJLy3GWbe3K1opp3ln1kvMWaydlzGG+jfMw3gNsywSfHN5YFavdXZc0Kr+z7pQxH
9jpmBqYJjj4mPrfXT7KShV6d6QzU/fa7i4DEbarZutKGExhILsLCnWL78Wf7t+OO
BVjLzfz4g+JbdVYa8ff4380zpZeq3azTNczF17/TFHPhAafIuYL7wb8LNHYequTN
MVthNsUOGziY8wHvVOzoWxlDn0uQvviS9lzV57KwZgRugAa/L+scjz7LHIDOuyMe
1X9G7fOjl/caiA==
-----END CERTIFICATE-----