Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File:                     knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier:          Upth6TQysrQcrtyt3zsH+dopawPJKD8aFCydrT14bMs=
Subject key identifier:   3A:E6:23:04:2B:B1:D2:54:A6:81:D4:9D:E4:A4:12:F2:06:EE:1E:92
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer:       /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial:       01962DF3EB2C0004D48A9DE76D790AC78553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number:          92
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
                          2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: ZJBuAiHxpZsypAqYX9I2SEOKIl2UJtXi4/cLoHHe36A=)
                          3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:2c:00:04:d4:8a:9d:e7:6d:79:0a:c7:85:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=3ae623042bb1d254a681d49de4a412f206ee1e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:5d:95:70:c4:8b:6d:77:fd:ae:25:7e:3b:
                    43:16:b6:13:9b:af:ad:c7:e4:16:a2:42:6d:19:ad:
                    5f:d9:19:f8:0d:a7:54:75:c2:ac:91:1e:03:5f:5c:
                    85:07:54:81:fd:c5:af:88:46:26:79:9e:53:2c:c8:
                    f4:8f:1f:d2:bd:ee:f1:e3:28:5f:66:b0:7e:a0:55:
                    8e:c1:af:5c:09:77:bd:18:72:0b:80:33:86:7f:58:
                    64:f5:32:8f:67:6f:e7:d8:47:96:66:27:02:e9:9a:
                    40:65:a5:02:c2:9f:9c:7a:74:38:22:2f:2f:f0:67:
                    b6:10:d9:6f:70:d6:bd:42:06:e6:ee:42:fc:8a:c7:
                    b6:d4:7e:11:e1:d8:4d:00:61:c3:f2:58:e2:59:e9:
                    f7:f4:67:30:22:78:1f:04:88:a5:e0:19:0c:32:dc:
                    2b:4c:fe:43:20:6f:db:b9:d8:cd:90:55:d7:bb:59:
                    17:17:cc:90:79:2f:a0:a0:5e:e0:34:79:9d:6f:4b:
                    73:6c:94:b0:10:b3:ea:35:54:b4:47:0d:4d:ef:6a:
                    a2:a8:79:5b:39:00:b7:b4:0b:8b:bc:8e:a5:38:00:
                    fe:04:25:da:69:f3:80:1a:eb:e2:5c:a1:5a:28:e9:
                    9d:e6:46:03:fe:4c:40:64:3a:d3:70:d7:8b:d9:80:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E6:23:04:2B:B1:D2:54:A6:81:D4:9D:E4:A4:12:F2:06:EE:1E:92
            X509v3 Authority Key Identifier:
                keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:fe:3f:ff:95:84:a9:72:ff:04:cc:c3:8c:7d:7d:c2:95:
         54:b1:2c:bc:ce:cf:f5:3b:eb:30:d2:e0:5f:61:43:f8:ce:75:
         c3:08:f1:2c:13:bf:8e:da:0f:a5:42:b7:e5:06:71:42:20:68:
         24:51:29:8d:1c:6b:5d:fc:e4:31:fe:e5:33:07:f3:09:c6:79:
         b2:66:0d:fe:fe:21:70:44:ab:90:9a:96:0e:98:ae:25:ce:c6:
         39:d7:9b:6f:10:54:de:6c:f6:84:cf:2e:0b:de:a3:6b:89:4d:
         e4:1e:d7:f0:e7:42:f2:6e:2e:86:0e:4b:8e:a3:06:de:4a:98:
         66:dc:66:05:78:e9:36:d2:29:e8:0d:79:2a:92:0e:37:71:93:
         be:a3:92:c3:c5:b6:34:f7:82:4c:7a:49:36:66:18:f5:75:50:
         1b:36:3b:3c:29:94:b8:e7:4b:bb:03:10:db:e8:54:2a:d0:85:
         44:10:4f:2a:71:3e:d2:73:d1:98:e6:eb:7a:df:f6:1d:68:c1:
         f4:e1:c1:c9:ac:76:16:a0:9d:b3:97:30:c6:2f:13:c6:bd:95:
         39:31:64:aa:de:4d:3e:4b:a8:cf:b7:14:bd:75:99:a1:49:0c:
         3a:06:c0:29:bd:66:64:35:b2:36:6e:2f:81:de:d0:ac:fd:f4:
         72:4e:aa:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+ssAATUip3nbXkKx4VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm
NmE2NDkwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
EygzYWU2MjMwNDJiYjFkMjU0YTY4MWQ0OWRlNGE0MTJmMjA2ZWUxZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAJdlXDEi213/a4lfjtDFrYTm6+t
x+QWokJtGa1f2Rn4DadUdcKskR4DX1yFB1SB/cWviEYmeZ5TLMj0jx/Sve7x4yhf
ZrB+oFWOwa9cCXe9GHILgDOGf1hk9TKPZ2/n2EeWZicC6ZpAZaUCwp+cenQ4Ii8v
8Ge2ENlvcNa9Qgbm7kL8ise21H4R4dhNAGHD8ljiWen39GcwIngfBIil4BkMMtwr
TP5DIG/budjNkFXXu1kXF8yQeS+goF7gNHmdb0tzbJSwELPqNVS0Rw1N72qiqHlb
OQC3tAuLvI6lOAD+BCXaafOAGuviXKFaKOmd5kYD/kxAZDrTcNeL2YDsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrmIwQrsdJUpoHUneSkEvIG7h6SMB8GA1UdIwQY
MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt
NTAxYzcxYzQzYjA5LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5
LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObL+P/+V
hKly/wTMw4x9fcKVVLEsvM7P9TvrMNLgX2FD+M51wwjxLBO/jtoPpUK35QZxQiBo
JFEpjRxrXfzkMf7lMwfzCcZ5smYN/v4hcESrkJqWDpiuJc7GOdebbxBU3mz2hM8u
C96ja4lN5B7X8OdC8m4uhg5LjqMG3kqYZtxmBXjpNtIp6A15KpION3GTvqOSw8W2
NPeCTHpJNmYY9XVQGzY7PCmUuOdLuwMQ2+hUKtCFRBBPKnE+0nPRmObret/2HWjB
9OHByax2FqCds5cwxi8Txr2VOTFkqt5NPkuoz7cUvXWZoUkMOgbAKb1mZDWyNm4v
gd7QrP30ck6qLg==
-----END CERTIFICATE-----