Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File:                     1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier:          zz0YD723uyOWl29eHmdqbHrEXRiUK/Wdp9Xq1ginVbc=
Subject key identifier:   07:14:79:C8:F0:CC:AE:25:0C:50:A9:36:FC:91:E6:36:6A:AC:29:72
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer:       /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial:       01962F3D64D90D04B0152642504AC795B9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: ix9wTaigoqLaDl2BkgA+ajXczryUyvtjXAUu/5lOGJY=)
                          2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:64:d9:0d:04:b0:15:26:42:50:4a:c7:95:b9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=071479c8f0ccae250c50a936fc91e6366aac2972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:aa:bc:a6:2d:6c:30:22:a7:6a:e2:c7:47:d0:
                    78:37:47:0f:6b:db:eb:36:6d:fb:e5:5d:dd:92:9e:
                    28:8b:6f:b1:f0:aa:4b:51:b6:f7:78:db:a4:01:a0:
                    d3:0f:0e:e7:97:43:e7:75:2e:eb:bf:a0:30:c0:52:
                    f3:5e:c9:2b:87:8e:91:95:4e:45:8a:f6:51:c2:65:
                    a6:78:2d:16:d8:77:81:02:ab:a6:74:16:c5:e2:a3:
                    f6:16:17:02:57:54:eb:26:78:c2:3b:8b:05:cb:c2:
                    2b:fc:5e:ce:c6:e2:0a:2e:3b:21:63:d4:f7:d0:b0:
                    3d:8a:3e:74:77:25:0a:60:a7:11:69:2e:43:f2:9b:
                    be:9b:5b:86:30:37:ce:bf:19:1b:42:b1:ed:84:94:
                    83:7f:ed:49:65:bc:61:a9:6d:82:de:66:e1:69:19:
                    0b:19:46:f9:bf:44:65:59:9a:a9:aa:2f:1a:73:12:
                    6b:4e:56:a5:a7:27:5a:53:45:42:3f:e3:25:8b:7d:
                    4f:23:a7:94:97:08:e2:56:95:a8:1e:5f:b9:dd:c0:
                    5c:8e:ff:5b:64:66:b7:45:ea:be:3e:f8:44:c8:6a:
                    58:82:be:c9:7c:1f:76:b6:d5:bb:32:01:40:ad:05:
                    21:b8:25:c6:ba:61:e6:2b:57:d1:85:e9:5a:99:b8:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:79:C8:F0:CC:AE:25:0C:50:A9:36:FC:91:E6:36:6A:AC:29:72
            X509v3 Authority Key Identifier:
                keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:64:41:6f:db:3f:1d:16:6f:bb:c4:9c:06:13:6c:63:f1:0d:
         9a:7c:f6:3b:0f:d9:bb:82:5e:5b:ea:da:de:e7:e3:d0:02:16:
         cf:92:03:35:1a:8e:b1:93:39:51:2e:ab:9c:8b:66:23:dc:a0:
         c5:f7:db:1c:ef:61:bc:53:ff:8c:7f:7b:c3:3d:5e:86:34:ed:
         8f:16:b6:3c:15:33:1e:aa:8d:f1:4f:d6:bd:0a:d5:ff:22:16:
         03:c1:2d:f8:b9:b7:62:c1:43:15:37:01:14:5c:0f:28:2b:9a:
         c6:c8:56:43:a1:13:73:f6:9a:bb:16:4b:58:cb:8a:db:d1:d5:
         42:b9:c8:65:3a:b7:d3:09:8f:55:44:c3:5c:7c:bc:6d:65:ce:
         88:55:90:86:c5:8c:e4:27:2c:3c:27:cb:a3:30:23:35:e8:43:
         49:e0:df:6d:ad:5d:38:b8:32:84:fc:30:d2:da:d6:1b:2e:94:
         26:05:c6:b4:26:b9:eb:50:3e:1b:93:a9:c0:9d:b5:f0:10:da:
         96:d9:ab:c5:2a:9a:1b:b8:7c:a6:ea:36:96:d0:70:6b:4a:09:
         94:4a:fb:03:cf:8b:04:6b:14:b5:9e:c6:b3:77:2d:5d:71:da:
         70:bc:cc:25:f9:cd:aa:09:5f:cf:15:aa:2d:74:4f:c3:fc:fa:
         05:c9:9f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWTZDQSwFSZCUErHlbn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDgyOTQ0NDNhZWQxNmQwNmI4NmFmMTRmNWE1ZjBhNTA4
Mzc3NGEwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
EygwNzE0NzljOGYwY2NhZTI1MGM1MGE5MzZmYzkxZTYzNjZhYWMyOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKq8pi1sMCKnauLHR9B4N0cPa9vr
Nm375V3dkp4oi2+x8KpLUbb3eNukAaDTDw7nl0PndS7rv6AwwFLzXskrh46RlU5F
ivZRwmWmeC0W2HeBAqumdBbF4qP2FhcCV1TrJnjCO4sFy8Ir/F7OxuIKLjshY9T3
0LA9ij50dyUKYKcRaS5D8pu+m1uGMDfOvxkbQrHthJSDf+1JZbxhqW2C3mbhaRkL
GUb5v0RlWZqpqi8acxJrTlalpydaU0VCP+Mli31PI6eUlwjiVpWoHl+53cBcjv9b
ZGa3Req+PvhEyGpYgr7JfB92ttW7MgFArQUhuCXGumHmK1fRhelambiLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcUecjwzK4lDFCpNvyR5jZqrClyMB8GA1UdIwQY
MBaAFNZIKURDrtFtBrhq8U9aXwpQg3dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDkt
ZTU3Y2M4MWY1MjMzLzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDktZTU3Y2M4MWY1MjMz
LzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2RBb9s/
HRZvu8ScBhNsY/ENmnz2Ow/Zu4JeW+ra3ufj0AIWz5IDNRqOsZM5US6rnItmI9yg
xffbHO9hvFP/jH97wz1ehjTtjxa2PBUzHqqN8U/WvQrV/yIWA8Et+Lm3YsFDFTcB
FFwPKCuaxshWQ6ETc/aauxZLWMuK29HVQrnIZTq30wmPVUTDXHy8bWXOiFWQhsWM
5CcsPCfLozAjNehDSeDfba1dOLgyhPww0trWGy6UJgXGtCa561A+G5OpwJ218BDa
ltmrxSqaG7h8puo2ltBwa0oJlEr7A8+LBGsUtZ7Gs3ctXXHacLzMJfnNqglfzxWq
LXRPw/z6BcmfnQ==
-----END CERTIFICATE-----