Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File:                     KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier:          wZMzh8FFdfVa65xP7yubq/6J/50QmopJ2KbaKyaMOkE=
Subject key identifier:   90:02:58:B2:F7:D2:20:35:6A:BA:56:F7:99:16:ED:F2:CE:A6:17:0A
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer:       /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial:       01962E98C898FE4FDC6F51688DCD68FE592A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: l6BsXSsI/hGG4S+nN6t8N4j1Zta7eGI7KIDqqX54LB4=)
                          2: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:98:fe:4f:dc:6f:51:68:8d:cd:68:fe:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=900258b2f7d220356aba56f79916edf2cea6170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:83:84:aa:fa:52:bb:ff:48:b3:61:b1:7c:
                    d1:6c:0b:6a:69:d2:08:ff:1c:08:af:89:3a:ef:66:
                    1c:23:2c:c6:f1:e8:f1:f9:d1:66:a8:20:fa:00:d6:
                    d1:2f:fd:9c:df:ad:a3:47:ff:45:93:22:63:42:50:
                    63:51:98:ee:99:47:ec:45:73:ff:4e:8b:60:b0:93:
                    3b:5e:ec:81:55:83:06:88:ae:74:5d:91:43:eb:79:
                    f3:70:79:a4:9d:5a:39:4b:5a:00:34:6e:dd:77:7c:
                    30:67:7f:a2:47:b9:cb:7c:38:e0:8b:82:3d:1a:91:
                    37:03:7c:bf:b3:d8:6f:f5:c6:50:4f:93:dd:d7:87:
                    bd:d1:89:cb:b5:e5:49:51:a5:8f:b2:94:1c:26:f2:
                    77:fc:5c:da:a5:bb:9d:5c:6d:12:77:72:63:24:0f:
                    b1:a9:f8:99:88:d4:1d:14:5b:9d:da:72:38:ca:fb:
                    ca:c0:45:c4:51:24:63:dc:bd:4b:94:ad:7c:36:73:
                    0b:03:58:4a:6a:b6:71:39:ca:24:ca:62:39:01:27:
                    55:6d:d9:fc:4f:00:b5:f9:c2:da:b6:f8:dc:1c:ab:
                    8d:4f:39:30:1e:52:a4:9d:c3:57:88:73:15:b0:05:
                    3b:aa:b5:43:3b:d7:9a:b6:a9:46:72:72:d2:05:43:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:58:B2:F7:D2:20:35:6A:BA:56:F7:99:16:ED:F2:CE:A6:17:0A
            X509v3 Authority Key Identifier:
                keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:5f:7e:2f:a4:f7:e0:69:37:a9:6f:d0:8f:24:91:bb:74:
         fa:2e:5c:4a:78:3e:bd:dd:8a:f1:87:54:7c:76:99:61:d1:4a:
         87:32:5a:71:a7:fe:87:b0:88:a1:7c:01:90:76:14:f5:6e:d4:
         45:a2:a5:b7:0f:7c:61:e4:27:b6:a5:af:d9:7c:50:db:c8:51:
         08:31:a0:5a:76:51:00:9c:7b:3d:0c:07:44:c9:aa:77:6e:58:
         e0:df:9c:0a:e8:6b:51:4f:90:1b:9b:ce:e7:a8:f9:0b:42:09:
         b2:ec:44:8e:d4:06:f1:ef:1b:fd:ad:30:51:5e:be:15:d4:cd:
         08:2a:c9:25:be:17:c5:cc:d3:1b:76:a7:f3:16:09:1d:1b:41:
         5d:17:01:46:98:c6:8f:df:01:2a:dd:b6:4c:d9:12:9b:4a:06:
         2b:64:bb:2b:f9:68:72:69:98:d8:9b:ba:bc:8f:a7:37:df:24:
         45:02:e2:43:1a:de:dd:12:9a:8c:25:bb:d9:06:9c:8a:fa:11:
         f2:63:67:32:0a:a5:7c:de:d9:ab:da:d0:93:95:de:65:3e:3e:
         7b:9f:7d:de:48:c5:30:00:7e:67:98:99:0a:61:d3:bf:f5:89:
         bc:5c:84:cd:2c:30:46:7d:d8:5d:d5:f8:cb:f5:fb:a4:c2:4f:
         6e:b2:ea:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMiY/k/cb1Fojc1o/lkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg5MDAyNThiMmY3ZDIyMDM1NmFiYTU2Zjc5OTE2ZWRmMmNlYTYxNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCCDhKr6Urv/SLNhsXzRbAtqadII
/xwIr4k672YcIyzG8ejx+dFmqCD6ANbRL/2c362jR/9FkyJjQlBjUZjumUfsRXP/
TotgsJM7XuyBVYMGiK50XZFD63nzcHmknVo5S1oANG7dd3wwZ3+iR7nLfDjgi4I9
GpE3A3y/s9hv9cZQT5Pd14e90YnLteVJUaWPspQcJvJ3/FzapbudXG0Sd3JjJA+x
qfiZiNQdFFud2nI4yvvKwEXEUSRj3L1LlK18NnMLA1hKarZxOcokymI5ASdVbdn8
TwC1+cLatvjcHKuNTzkwHlKkncNXiHMVsAU7qrVDO9eatqlGcnLSBUNdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJACWLL30iA1arpW95kW7fLOphcKMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsFffi+k
9+BpN6lv0I8kkbt0+i5cSng+vd2K8YdUfHaZYdFKhzJacaf+h7CIoXwBkHYU9W7U
RaKltw98YeQntqWv2XxQ28hRCDGgWnZRAJx7PQwHRMmqd25Y4N+cCuhrUU+QG5vO
56j5C0IJsuxEjtQG8e8b/a0wUV6+FdTNCCrJJb4XxczTG3an8xYJHRtBXRcBRpjG
j98BKt22TNkSm0oGK2S7K/locmmY2Ju6vI+nN98kRQLiQxre3RKajCW72QacivoR
8mNnMgqlfN7Zq9rQk5XeZT4+e5993kjFMAB+Z5iZCmHTv/WJvFyEzSwwRn3YXdX4
y/X7pMJPbrLqtg==
-----END CERTIFICATE-----