Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File:                     K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier:          ykJAZhRoRMHM6k2NGtRkLlsbMMIWYhgFw0Qrkp+lpEU=
Subject key identifier:   A1:5B:CC:1D:A1:84:78:48:1D:54:BB:B4:D6:2C:56:E9:95:26:D8:E1
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer:       /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial:       01962FAB6E34B50CC914BC929D574CF13097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number:          0902
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
                          2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: cDhZEKzEgV7UV+iw5NFU2vszfgIMHQ9GaoO22UPCntk=)
                          3: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
                          4: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6e:34:b5:0c:c9:14:bc:92:9d:57:4c:f1:30:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=a15bcc1da18478481d54bbb4d62c56e99526d8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:ed:f8:76:0c:20:5d:4d:e2:c8:b7:57:ec:
                    26:d1:87:da:88:bd:3b:7f:77:7c:27:e6:29:2c:4a:
                    17:2d:ec:97:01:a0:88:81:27:16:64:b4:f6:e7:f4:
                    c1:86:82:91:4b:2c:18:72:db:58:1e:b0:dc:f0:ca:
                    47:70:06:7f:3d:93:60:eb:a8:59:7f:c4:54:a8:95:
                    60:ff:74:bf:a5:39:c6:e0:f3:1d:03:68:29:85:1f:
                    5c:e6:07:1a:0a:2a:60:38:91:f7:9d:39:b7:3a:04:
                    99:cb:c5:cd:7b:94:3d:90:fd:77:25:a9:07:c3:f0:
                    c6:e8:6a:58:5d:59:d8:51:07:44:94:e2:3f:6f:70:
                    9f:b0:79:2c:6c:0d:03:c6:ba:16:6f:53:2d:77:08:
                    01:82:e2:f6:74:f9:fc:ba:05:c1:17:1d:e0:60:d6:
                    ca:d1:79:e5:50:6a:53:e1:29:8c:49:fb:5f:0d:86:
                    a2:55:cd:d1:64:1c:e1:ab:89:cb:3f:0c:40:82:6f:
                    30:4a:cd:7d:bc:55:ba:e2:2e:0c:85:4c:e9:ef:45:
                    d4:fb:34:1e:27:93:7b:bb:49:e2:3a:dc:18:75:11:
                    fc:34:7b:7f:82:49:c6:8e:63:4a:2c:d9:38:db:9d:
                    d9:7a:e1:0b:77:99:74:80:b8:9e:2c:10:dc:35:d2:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5B:CC:1D:A1:84:78:48:1D:54:BB:B4:D6:2C:56:E9:95:26:D8:E1
            X509v3 Authority Key Identifier:
                keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:3d:7c:c3:a7:1b:8f:87:f2:27:27:61:04:c9:7a:35:33:
         8f:19:f5:5f:2a:23:66:ad:65:81:a9:ae:0f:1a:f7:e1:fe:5b:
         b2:1b:e2:9f:e6:ed:b8:1b:03:f2:3f:be:dd:6a:0e:0d:f2:2b:
         77:8e:0c:a9:97:48:3f:f1:21:70:28:b5:69:06:8e:3e:44:11:
         66:42:d7:fd:b0:df:aa:d9:b7:bd:67:91:c9:c3:88:80:77:83:
         ba:e5:df:6d:bd:6d:6f:9a:d8:4f:fa:6e:43:82:f4:f1:47:26:
         92:99:f3:34:96:9c:1f:24:ac:f1:a7:63:e2:53:1a:91:a5:d6:
         f3:9c:07:02:5b:14:b5:cf:33:a3:b0:8e:fd:ed:17:78:69:6c:
         6f:50:c0:f9:b9:d2:92:e9:87:d8:87:a0:20:61:7d:98:5a:be:
         20:23:b7:bf:86:b4:e0:00:22:0e:dc:0b:45:fb:a2:bb:e0:89:
         bd:b2:67:14:0a:2b:06:98:b1:b5:ce:5e:7f:49:60:7c:c3:b2:
         55:c2:68:fb:b1:0e:25:e5:96:91:bc:8b:13:44:e8:8d:c0:db:
         20:10:f9:28:b5:72:aa:f3:83:1d:f1:f0:3b:21:1f:f7:4f:d3:
         36:ef:5b:46:c2:f0:b2:84:1e:3d:d5:75:6c:ed:a2:81:7c:67:
         9c:b8:75:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq240tQzJFLySnVdM8TCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl
YmJjNTQwHhcNMjUwNDEzMTUwMTI2WhcNMjUwNDE0MTUwMTI2WjAzMTEwLwYDVQQD
EyhhMTViY2MxZGExODQ3ODQ4MWQ1NGJiYjRkNjJjNTZlOTk1MjZkOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbt+HYMIF1N4si3V+wm0YfaiL07
f3d8J+YpLEoXLeyXAaCIgScWZLT25/TBhoKRSywYcttYHrDc8MpHcAZ/PZNg66hZ
f8RUqJVg/3S/pTnG4PMdA2gphR9c5gcaCipgOJH3nTm3OgSZy8XNe5Q9kP13JakH
w/DG6GpYXVnYUQdElOI/b3CfsHksbA0DxroWb1MtdwgBguL2dPn8ugXBFx3gYNbK
0XnlUGpT4SmMSftfDYaiVc3RZBzhq4nLPwxAgm8wSs19vFW64i4MhUzp70XU+zQe
J5N7u0niOtwYdRH8NHt/gknGjmNKLNk4253ZeuELd5l0gLieLBDcNdIXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFbzB2hhHhIHVS7tNYsVumVJtjhMB8GA1UdIwQY
MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt
OGJlZmVlNDllZDRkLzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk
LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/g9fMOn
G4+H8icnYQTJejUzjxn1XyojZq1lgamuDxr34f5bshvin+btuBsD8j++3WoODfIr
d44MqZdIP/EhcCi1aQaOPkQRZkLX/bDfqtm3vWeRycOIgHeDuuXfbb1tb5rYT/pu
Q4L08UcmkpnzNJacHySs8adj4lMakaXW85wHAlsUtc8zo7CO/e0XeGlsb1DA+bnS
kumH2IegIGF9mFq+ICO3v4a04AAiDtwLRfuiu+CJvbJnFAorBpixtc5ef0lgfMOy
VcJo+7EOJeWWkbyLE0TojcDbIBD5KLVyqvODHfHwOyEf90/TNu9bRsLwsoQePdV1
bO2igXxnnLh14g==
-----END CERTIFICATE-----