Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File:                     xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier:          O4X9AQo1NRYtGqV8RkUHQqj26VZeI90REAs4utwoEEM=
Subject key identifier:   3A:CC:DA:4A:57:69:85:D8:2E:F8:86:5C:D9:AD:6A:D2:AD:29:6F:D6
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer:       /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial:       01962DF3E16527D83F5935FF5202AF93C317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number:          0A2F
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
                          2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: X6IOGuYed9GDDyUhbQR6iKLDJyJbGSzkrF5CjSsOjU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:65:27:d8:3f:59:35:ff:52:02:af:93:c3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=3accda4a576985d82ef8865cd9ad6ad2ad296fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:b0:6d:5a:73:30:90:63:55:6f:b4:e7:57:
                    83:ec:bc:3f:80:e3:71:f3:16:30:b5:5e:1a:83:1a:
                    3c:55:c2:dd:d9:f4:0d:0e:f6:7d:de:34:85:f6:ec:
                    3f:0d:f1:27:a3:1b:c9:3c:fc:1d:8a:b3:c8:3b:b5:
                    7e:78:63:2d:52:cc:e1:99:f3:b4:a5:b9:e4:27:90:
                    bb:36:e8:87:cd:1a:3c:6f:b4:f7:7d:6e:86:71:74:
                    02:de:87:f9:c5:3d:6b:64:cb:5c:8a:fc:cd:fc:2c:
                    52:3c:b3:e2:ef:e1:31:42:28:47:1a:78:70:6d:e1:
                    28:69:c3:7e:00:26:a4:05:0a:4a:0b:db:34:74:8b:
                    c2:1d:8c:3c:f6:ee:5e:17:d0:8b:26:ef:c0:f2:71:
                    95:d2:36:d7:f9:f7:47:b7:00:68:31:61:34:44:bc:
                    0c:a3:dd:0a:bd:3d:0c:d8:6c:6a:84:ef:c3:06:5c:
                    82:5c:60:43:6e:0d:8f:01:d1:8b:17:15:de:33:f4:
                    37:05:eb:8d:b3:a3:b7:5e:84:34:13:b3:24:01:a3:
                    82:8f:aa:6f:75:08:dd:ea:6a:17:3a:03:8f:02:bf:
                    7a:5a:9a:6c:d8:cd:54:53:0b:5f:2f:f0:05:7b:e6:
                    79:6a:5a:f2:45:1f:5a:d8:bf:8b:b6:5a:97:26:61:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:DA:4A:57:69:85:D8:2E:F8:86:5C:D9:AD:6A:D2:AD:29:6F:D6
            X509v3 Authority Key Identifier:
                keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:24:32:6a:bc:db:94:b7:54:07:07:42:69:d3:89:14:d1:c1:
         4f:e4:81:a9:63:d0:19:47:c0:68:fb:65:68:0a:a3:00:b5:78:
         56:76:3f:47:47:f7:b0:09:a1:2a:4f:8a:7e:38:d6:40:1b:bf:
         4a:67:10:17:03:b8:88:07:db:86:44:8b:56:e2:2a:cf:b5:53:
         47:17:ad:c3:2f:e5:0e:03:2d:0d:5e:6c:be:cd:1f:4e:37:8e:
         0e:da:3e:9a:65:d2:45:11:e8:1a:01:f5:1a:fa:96:3a:3d:70:
         df:c5:6a:cf:85:d7:1b:0e:b6:aa:09:c8:43:d8:d0:69:46:3d:
         d4:ab:21:0b:6a:25:99:20:16:a9:80:fd:5a:be:74:d6:d8:8a:
         c5:13:8d:b7:9c:52:0b:53:ee:55:4d:24:9c:48:fa:c2:1e:2e:
         90:d6:65:db:0b:a1:a5:04:57:22:f2:0b:84:5f:e5:46:e3:0b:
         c4:22:7a:31:ec:6c:47:0e:a1:b0:3f:12:31:0c:60:19:53:17:
         08:63:b6:ad:a8:f2:c0:bf:cc:39:7e:e6:ac:10:7d:d2:85:ba:
         fc:e7:bc:33:48:a6:02:be:58:c4:32:c7:e8:16:03:e8:29:b5:
         7a:c2:2a:9e:fc:78:c4:93:f5:b9:ca:38:cd:c2:23:ba:05:4b:
         a3:84:69:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+FlJ9g/WTX/UgKvk8MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTMxNjI4NTY1ODIwYjNhNWEzZTFjZmM4Nzc3M2UyODNm
Yjk1YzEwHhcNMjUwNDEzMDcwMTE5WhcNMjUwNDE0MDcwMTE5WjAzMTEwLwYDVQQD
EygzYWNjZGE0YTU3Njk4NWQ4MmVmODg2NWNkOWFkNmFkMmFkMjk2ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmOwbVpzMJBjVW+051eD7Lw/gONx
8xYwtV4agxo8VcLd2fQNDvZ93jSF9uw/DfEnoxvJPPwdirPIO7V+eGMtUszhmfO0
pbnkJ5C7NuiHzRo8b7T3fW6GcXQC3of5xT1rZMtcivzN/CxSPLPi7+ExQihHGnhw
beEoacN+ACakBQpKC9s0dIvCHYw89u5eF9CLJu/A8nGV0jbX+fdHtwBoMWE0RLwM
o90KvT0M2GxqhO/DBlyCXGBDbg2PAdGLFxXeM/Q3BeuNs6O3XoQ0E7MkAaOCj6pv
dQjd6moXOgOPAr96Wpps2M1UUwtfL/AFe+Z5alryRR9a2L+LtlqXJmHQlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrM2kpXaYXYLviGXNmtatKtKW/WMB8GA1UdIwQY
MBaAFMSjFihWWCCzpaPhz8h3c+KD+5XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEt
ZmIzMDdiYWRlYzRkLzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEtZmIzMDdiYWRlYzRk
LzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSQyarzb
lLdUBwdCadOJFNHBT+SBqWPQGUfAaPtlaAqjALV4VnY/R0f3sAmhKk+KfjjWQBu/
SmcQFwO4iAfbhkSLVuIqz7VTRxetwy/lDgMtDV5svs0fTjeODto+mmXSRRHoGgH1
GvqWOj1w38Vqz4XXGw62qgnIQ9jQaUY91KshC2olmSAWqYD9Wr501tiKxRONt5xS
C1PuVU0knEj6wh4ukNZl2wuhpQRXIvILhF/lRuMLxCJ6MexsRw6hsD8SMQxgGVMX
CGO2rajywL/MOX7mrBB90oW6/Oe8M0imAr5YxDLH6BYD6Cm1esIqnvx4xJP1uco4
zcIjugVLo4RpBA==
-----END CERTIFICATE-----