Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
File:                     KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft (raw, json)
Hash identifier:          mIuYkTpukofBDzn3E2IGgk2DKMEPuQFDKEZAqSkDkqQ=
Subject key identifier:   0B:A2:DC:F6:60:30:26:B5:CF:FC:54:F2:E1:50:51:75:2C:2F:08:6F
Authority key identifier: 2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0
Certificate issuer:       /CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
Certificate serial:       01962E98B8AE4A1CC1E09FA2460241C4BA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft
Manifest number:          071F
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl (hash: 6fDAiZihf14mrF8iQpqfj6MkY1fXYKgVXlrSQrl9XZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:ae:4a:1c:c1:e0:9f:a2:46:02:41:c4:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a14915e27f8bf405ccfca94b6c530bd4d3e54c0
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=0ba2dcf6603026b5cffc54f2e15051752c2f086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:6e:1f:59:5c:2d:4a:ab:ff:96:33:02:df:
                    8f:4b:fd:4c:19:1c:01:d0:72:bf:1f:c5:ec:85:5a:
                    6e:ef:f9:30:d7:1c:e6:6e:4c:b9:e4:f2:54:da:be:
                    c0:84:78:d8:a8:55:86:75:63:4d:f9:44:69:47:83:
                    c9:b6:3e:74:ae:21:93:0b:e0:23:9e:9e:29:83:1d:
                    72:d3:41:60:50:ea:25:f5:95:d9:f8:13:16:4c:c0:
                    58:39:9b:d2:89:ff:19:e6:da:7a:08:dd:7b:71:09:
                    0a:42:40:ba:e1:27:12:da:8c:a8:d7:40:98:ad:8e:
                    1a:3a:6f:af:2a:80:4e:54:42:b5:a9:cc:1b:02:70:
                    f2:57:2d:0f:de:47:43:0c:ce:90:1f:91:bb:74:57:
                    9b:a5:b7:84:da:ef:0b:5f:e0:cd:62:4f:23:10:0e:
                    09:cf:70:5d:0f:e2:bb:d3:78:5d:c2:7b:75:8e:08:
                    d8:d7:38:0c:d0:59:90:94:de:ef:2d:f1:94:f4:6b:
                    17:d8:7e:ff:b9:a1:c5:3c:c2:80:4c:88:20:f0:04:
                    fe:4c:cb:49:f7:58:b6:6e:e1:cb:06:3a:b4:61:02:
                    ac:2f:e8:21:88:a7:f6:ac:a4:38:7b:22:52:95:23:
                    46:bd:6f:3a:d7:a2:6e:f1:d1:15:47:bc:9a:52:9d:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A2:DC:F6:60:30:26:B5:CF:FC:54:F2:E1:50:51:75:2C:2F:08:6F
            X509v3 Authority Key Identifier:
                keyid:2A:14:91:5E:27:F8:BF:40:5C:CF:CA:94:B6:C5:30:BD:4D:3E:54:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhSRXif4v0Bcz8qUtsUwvU0-VMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4721ac-c4fd-46af-9a91-40ae9247cc64/1/KhSRXif4v0Bcz8qUtsUwvU0-VMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:fc:e3:b3:7f:f2:91:bd:1a:65:12:e8:8e:c3:d2:cf:18:
         2b:c7:5d:c0:6d:75:a7:ce:0c:2f:ec:66:dc:b8:8e:67:76:d0:
         14:77:a5:8d:b8:8b:16:ff:5e:c6:ba:9d:75:ce:0f:26:52:71:
         0b:e8:80:8f:0c:1b:aa:f7:04:7c:b8:c6:3e:c6:8e:a2:31:fe:
         27:9c:7d:0b:bd:90:65:fa:4e:ad:3f:30:c2:02:a9:0e:ea:9d:
         e7:6d:d8:c8:99:6f:d0:13:ab:ee:2c:54:01:56:18:d9:b4:1a:
         9c:08:ba:25:c0:3d:75:ae:a3:f6:41:e4:c3:80:1a:a0:f9:ab:
         ec:7f:a2:7e:31:ec:65:45:f2:3b:a4:24:75:5e:40:83:e6:09:
         82:02:e9:df:d4:f6:b9:46:16:d1:0d:94:b8:fb:e3:87:1e:b8:
         b2:ff:6b:db:36:0a:ec:cc:30:94:46:13:b8:31:8a:15:81:0e:
         8c:9c:61:ac:1d:85:b5:58:a3:3f:39:b0:d5:5d:4b:0a:4a:23:
         fa:52:c1:9a:70:16:7f:fe:69:10:96:88:a9:04:b4:e1:f0:57:
         e0:77:31:62:81:66:9f:c9:7b:6d:01:4e:c0:7f:ff:49:78:53:
         e2:24:9e:74:4b:e7:2c:ea:07:35:4b:66:a8:55:09:59:6e:d9:
         d7:1c:7d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLiuShzB4J+iRgJBxLo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTQ5MTVlMjdmOGJmNDA1Y2NmY2E5NGI2YzUzMGJkNGQz
ZTU0YzAwHhcNMjUwNDEzMTAwMTIyWhcNMjUwNDE0MTAwMTIyWjAzMTEwLwYDVQQD
EygwYmEyZGNmNjYwMzAyNmI1Y2ZmYzU0ZjJlMTUwNTE3NTJjMmYwODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzJuH1lcLUqr/5YzAt+PS/1MGRwB
0HK/H8XshVpu7/kw1xzmbky55PJU2r7AhHjYqFWGdWNN+URpR4PJtj50riGTC+Aj
np4pgx1y00FgUOol9ZXZ+BMWTMBYOZvSif8Z5tp6CN17cQkKQkC64ScS2oyo10CY
rY4aOm+vKoBOVEK1qcwbAnDyVy0P3kdDDM6QH5G7dFebpbeE2u8LX+DNYk8jEA4J
z3BdD+K703hdwnt1jgjY1zgM0FmQlN7vLfGU9GsX2H7/uaHFPMKATIgg8AT+TMtJ
91i2buHLBjq0YQKsL+ghiKf2rKQ4eyJSlSNGvW8616Ju8dEVR7yaUp383QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAui3PZgMCa1z/xU8uFQUXUsLwhvMB8GA1UdIwQY
MBaAFCoUkV4n+L9AXM/KlLbFML1NPlTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEt
NDBhZTkyNDdjYzY0LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NzIxYWMtYzRmZC00NmFmLTlhOTEtNDBhZTkyNDdjYzY0
LzEvS2hTUlhpZjR2MEJjejhxVXRzVXd2VTAtVk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpv847N/
8pG9GmUS6I7D0s8YK8ddwG11p84ML+xm3LiOZ3bQFHeljbiLFv9exrqddc4PJlJx
C+iAjwwbqvcEfLjGPsaOojH+J5x9C72QZfpOrT8wwgKpDuqd523YyJlv0BOr7ixU
AVYY2bQanAi6JcA9da6j9kHkw4AaoPmr7H+ifjHsZUXyO6QkdV5Ag+YJggLp39T2
uUYW0Q2UuPvjhx64sv9r2zYK7MwwlEYTuDGKFYEOjJxhrB2FtVijPzmw1V1LCkoj
+lLBmnAWf/5pEJaIqQS04fBX4HcxYoFmn8l7bQFOwH//SXhT4iSedEvnLOoHNUtm
qFUJWW7Z1xx97g==
-----END CERTIFICATE-----