Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File:                     kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier:          BkTwLSd/vD3t3WeJUuDFCrOjuQEM2tK+Uo11X/1drPg=
Subject key identifier:   1C:CD:FE:53:70:52:82:D5:9C:1B:32:2D:A5:BD:93:17:EB:D1:38:4F
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer:       /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial:       01962E2AC9DC6C8E71B784EA64DB5909936A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number:          02C8
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: 55z/1C7H1mV20Qq55JE8Acq6XtMdX6OjFnAMtSe4UCk=)
                          2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:dc:6c:8e:71:b7:84:ea:64:db:59:09:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=1ccdfe53705282d59c1b322da5bd9317ebd1384f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:d1:f0:21:3f:e1:08:c9:57:09:18:77:ed:
                    f3:bf:74:50:27:38:92:6f:cf:3f:9b:24:c1:e9:2e:
                    67:c3:ad:ca:f1:49:c2:46:b4:2f:60:84:9e:1d:cc:
                    7b:a7:87:b3:95:2b:8e:65:a7:f7:8e:e9:30:8f:1b:
                    f3:6f:4c:5a:35:a7:62:dc:9a:b0:06:c9:19:5d:db:
                    0d:b0:d1:a4:66:57:ed:98:c5:99:e0:c2:6f:b8:fb:
                    a7:5f:c6:35:3e:8e:60:aa:8c:dc:7e:f9:34:de:54:
                    b6:ef:97:36:89:e8:6f:69:71:fe:e8:34:c4:a4:43:
                    27:99:44:a8:5f:cd:69:51:7e:be:13:69:82:14:f2:
                    33:d2:34:6f:93:23:f3:a3:5c:9f:e4:4f:81:f3:5d:
                    3a:9a:fb:eb:2f:5d:26:1e:f9:5e:68:5b:85:b3:46:
                    cb:a9:00:76:3f:68:3b:80:da:8e:21:68:78:dd:18:
                    e1:fd:42:6a:d7:c9:7b:68:2b:46:af:3b:93:05:08:
                    8e:11:4d:a5:a5:fe:cf:87:88:ed:20:de:6a:0f:e8:
                    b4:37:98:71:10:9b:4c:dc:f5:7f:8e:56:b9:fd:02:
                    15:6d:5d:90:66:cb:e3:a7:1c:89:c6:39:b6:86:dc:
                    05:60:ea:06:b9:52:98:e2:56:94:98:80:f0:35:06:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CD:FE:53:70:52:82:D5:9C:1B:32:2D:A5:BD:93:17:EB:D1:38:4F
            X509v3 Authority Key Identifier:
                keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:3b:93:44:04:5e:0b:81:6b:99:96:ee:18:ab:21:c9:4d:
         8f:9c:2c:5c:00:c7:9e:83:8f:a1:ec:85:41:14:e2:3e:cc:d5:
         70:08:44:18:0c:ca:ad:33:6f:81:b9:8c:f2:21:69:5c:12:ca:
         5f:2e:27:67:82:23:4b:bf:3d:64:88:2c:d0:24:e8:6e:9a:5b:
         d1:5a:85:1c:02:85:6f:6c:0a:fe:7f:08:4b:6f:f2:a9:1c:c7:
         5a:25:bf:e2:0c:f5:de:a8:9a:ae:09:30:70:8c:cd:c7:a1:79:
         55:39:21:8d:95:27:d7:71:7d:dd:c5:41:70:9e:89:96:1e:5d:
         0e:39:c2:85:7d:8d:33:b2:8d:82:b0:32:c7:fb:e6:49:76:86:
         6e:e4:7a:d0:50:12:f7:ff:a7:d7:fc:4c:4d:5c:37:e6:6d:91:
         11:b3:c1:c7:d1:3b:8a:e2:0e:af:47:b4:24:99:1b:71:d2:89:
         59:d8:0c:3c:7c:aa:e9:fd:58:7c:29:60:54:a4:8d:cf:e4:23:
         24:1a:1c:0d:04:c0:66:e0:46:8a:68:ce:8b:0f:30:9f:84:44:
         d2:52:37:89:55:95:21:37:28:da:3b:fb:c1:6e:a7:c3:44:af:
         34:f3:5c:9d:07:ae:8a:26:66:a6:dc:13:a7:e8:d4:c9:1d:29:
         35:b5:26:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsncbI5xt4TqZNtZCZNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNjgzNWE3ODYwMjMxZDdiYzE2NDhkNDVmOGU5NTdmNTE1
MDViMjgwHhcNMjUwNDEzMDgwMTE4WhcNMjUwNDE0MDgwMTE4WjAzMTEwLwYDVQQD
EygxY2NkZmU1MzcwNTI4MmQ1OWMxYjMyMmRhNWJkOTMxN2ViZDEzODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VfR8CE/4QjJVwkYd+3zv3RQJziS
b88/myTB6S5nw63K8UnCRrQvYISeHcx7p4ezlSuOZaf3jukwjxvzb0xaNadi3Jqw
BskZXdsNsNGkZlftmMWZ4MJvuPunX8Y1Po5gqozcfvk03lS275c2iehvaXH+6DTE
pEMnmUSoX81pUX6+E2mCFPIz0jRvkyPzo1yf5E+B8106mvvrL10mHvleaFuFs0bL
qQB2P2g7gNqOIWh43Rjh/UJq18l7aCtGrzuTBQiOEU2lpf7Ph4jtIN5qD+i0N5hx
EJtM3PV/jla5/QIVbV2QZsvjpxyJxjm2htwFYOoGuVKY4laUmIDwNQZcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzN/lNwUoLVnBsyLaW9kxfr0ThPMB8GA1UdIwQY
MBaAFJFoNaeGAjHXvBZI1F+OlX9RUFsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEt
NGRlYmIxYWZhOTk3LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZWIxNzctMzZiOS00M2QzLTljZmEtNGRlYmIxYWZhOTk3
LzEva1dnMXA0WUNNZGU4RmtqVVg0NlZmMUZRV3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7s7k0QE
XguBa5mW7hirIclNj5wsXADHnoOPoeyFQRTiPszVcAhEGAzKrTNvgbmM8iFpXBLK
Xy4nZ4IjS789ZIgs0CTobppb0VqFHAKFb2wK/n8IS2/yqRzHWiW/4gz13qiargkw
cIzNx6F5VTkhjZUn13F93cVBcJ6Jlh5dDjnChX2NM7KNgrAyx/vmSXaGbuR60FAS
9/+n1/xMTVw35m2REbPBx9E7iuIOr0e0JJkbcdKJWdgMPHyq6f1YfClgVKSNz+Qj
JBocDQTAZuBGimjOiw8wn4RE0lI3iVWVITco2jv7wW6nw0SvNPNcnQeuiiZmptwT
p+jUyR0pNbUmVw==
-----END CERTIFICATE-----