Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File:                     knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier:          2SWnnZr8PVfsxy5/kYYPCBS6gdpR2+YccRAEh0fFD6c=
Subject key identifier:   41:FF:35:98:71:8E:08:61:79:F5:A5:CC:29:A7:F9:51:34:3A:0C:E1
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer:       /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial:       01962DF3E6389F9EA34F9C31463FAB6CC395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number:          0BC0
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
                          2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: vqU82WERNKCA1AXPIEytP3CBGbvWMVZlJt8TfiD91sQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:38:9f:9e:a3:4f:9c:31:46:3f:ab:6c:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=41ff3598718e086179f5a5cc29a7f951343a0ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:8e:3d:69:c6:fd:26:3b:69:79:e9:22:5c:
                    23:86:2e:64:46:81:41:b2:08:c1:cd:66:a2:b5:78:
                    29:35:43:9c:a8:87:bd:67:f5:56:59:3c:9f:8c:b1:
                    2b:87:7c:bc:63:98:b7:f3:c6:7c:73:31:38:70:84:
                    0a:e1:7c:da:c3:a6:36:d5:53:e0:a3:30:3a:49:fb:
                    af:54:fa:57:a2:21:5f:e7:0c:be:29:f7:ec:21:93:
                    40:f9:ad:22:af:c6:5a:10:34:44:3b:22:5b:c4:1e:
                    0d:e1:b0:d8:70:77:2e:49:de:12:91:7d:3d:97:7b:
                    e7:68:ec:39:c4:24:54:0d:19:df:f7:8d:be:d4:79:
                    b2:62:5e:39:2a:b5:91:14:4e:c1:a8:d7:4d:ee:9f:
                    2c:da:cb:65:89:cd:df:fc:59:60:eb:53:1f:eb:3f:
                    20:d5:17:9a:6f:fa:36:35:f1:25:53:79:99:4a:d8:
                    bc:83:a4:70:b7:23:4f:b4:60:42:f0:f9:d7:30:d5:
                    c4:40:b9:7e:42:75:68:0f:fe:de:1b:0c:08:78:45:
                    42:bf:02:b1:21:d5:02:a8:9d:e4:82:4c:f2:a6:39:
                    ab:0a:0a:b7:a2:72:86:38:bd:85:e0:6a:8a:73:d7:
                    06:dd:db:91:fb:8b:b7:8c:b1:9a:09:01:95:23:92:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:35:98:71:8E:08:61:79:F5:A5:CC:29:A7:F9:51:34:3A:0C:E1
            X509v3 Authority Key Identifier:
                keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:ac:04:cc:38:62:3b:d5:6c:04:8c:a4:2f:54:36:c5:c3:
         42:83:c7:d6:ab:5b:c0:32:a9:22:62:c0:12:29:33:3f:46:1f:
         d9:9f:bc:43:ec:36:34:57:58:4d:34:db:e1:4f:fa:c0:50:47:
         df:2c:da:02:79:42:fb:86:c6:e1:89:ea:e2:06:0c:23:13:12:
         2f:eb:c8:9c:59:cd:0e:2f:f6:06:7b:17:92:1c:85:e4:ac:e2:
         90:e6:a8:77:fd:59:02:ea:94:18:8e:77:8f:af:ef:72:ce:2c:
         a5:59:ba:cb:84:c8:c9:2e:81:1e:0d:01:b4:5c:ce:00:89:fe:
         10:31:e3:85:c1:22:8b:f4:35:03:d1:03:7c:55:67:16:a9:00:
         b5:c2:60:0b:2a:dc:4d:87:40:ba:a2:17:60:72:57:7f:ad:00:
         85:00:62:35:2b:ed:e9:9a:3d:f5:b5:62:0d:2b:9c:3d:4e:6d:
         63:0d:e7:2c:9e:30:cb:93:c3:30:e3:57:0e:cc:06:72:f2:2c:
         f5:5c:da:f6:d5:5d:ca:a5:30:89:8b:20:09:3e:66:42:c6:74:
         39:14:ee:33:d3:27:8c:88:21:df:d3:f4:5e:95:51:e6:c0:1e:
         e6:75:6b:cf:f4:75:f5:2d:3f:1a:c7:24:05:ef:d2:89:35:6a:
         f6:dc:68:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+Y4n56jT5wxRj+rbMOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzEwNWM5ZDFmYjA2OTA1NTQ5NzFmNDY0Y2EyMWY0YTQ1
YzEwNmEwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
Eyg0MWZmMzU5ODcxOGUwODYxNzlmNWE1Y2MyOWE3Zjk1MTM0M2EwY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3qOPWnG/SY7aXnpIlwjhi5kRoFB
sgjBzWaitXgpNUOcqIe9Z/VWWTyfjLErh3y8Y5i388Z8czE4cIQK4Xzaw6Y21VPg
ozA6SfuvVPpXoiFf5wy+KffsIZNA+a0ir8ZaEDREOyJbxB4N4bDYcHcuSd4SkX09
l3vnaOw5xCRUDRnf942+1HmyYl45KrWRFE7BqNdN7p8s2stlic3f/Flg61Mf6z8g
1Reab/o2NfElU3mZSti8g6RwtyNPtGBC8PnXMNXEQLl+QnVoD/7eGwwIeEVCvwKx
IdUCqJ3kgkzypjmrCgq3onKGOL2F4GqKc9cG3duR+4u3jLGaCQGVI5IUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH/NZhxjghhefWlzCmn+VE0OgzhMB8GA1UdIwQY
MBaAFJJxBcnR+waQVUlx9GTKIfSkXBBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUt
NGVlOTJlZTFlMGNkLzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUtNGVlOTJlZTFlMGNk
LzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXusBMw4
YjvVbASMpC9UNsXDQoPH1qtbwDKpImLAEikzP0Yf2Z+8Q+w2NFdYTTTb4U/6wFBH
3yzaAnlC+4bG4Ynq4gYMIxMSL+vInFnNDi/2BnsXkhyF5KzikOaod/1ZAuqUGI53
j6/vcs4spVm6y4TIyS6BHg0BtFzOAIn+EDHjhcEii/Q1A9EDfFVnFqkAtcJgCyrc
TYdAuqIXYHJXf60AhQBiNSvt6Zo99bViDSucPU5tYw3nLJ4wy5PDMONXDswGcvIs
9Vza9tVdyqUwiYsgCT5mQsZ0ORTuM9MnjIgh39P0XpVR5sAe5nVrz/R19S0/Gsck
Be/SiTVq9txo3Q==
-----END CERTIFICATE-----