Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File:                     KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier:          v7iYw2rGJUt2DsHEFX2fnn9bbVFHCzBYPazKkkNYQsY=
Subject key identifier:   4D:B0:CA:AD:E4:A8:5F:5A:2C:A4:D2:DA:40:97:49:A0:F9:2D:E3:E6
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer:       /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial:       01962DF423307C9487A1C1ACB780CBD9B815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number:          0D4B
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: UXMpNi2c8+eiI7OploMjqaRtfTc9JbJvhSpKSm2R4Io=)
                          2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:23:30:7c:94:87:a1:c1:ac:b7:80:cb:d9:b8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=4db0caade4a85f5a2ca4d2da409749a0f92de3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:1b:1f:99:1a:98:58:47:f3:55:57:99:f4:
                    e9:28:bf:5d:77:f1:0b:7d:08:98:c4:c9:3f:e3:6e:
                    4a:bf:18:df:49:7b:f8:67:43:ba:76:72:ed:61:35:
                    00:a2:a6:1e:c4:d8:f2:bc:96:86:30:9b:59:58:35:
                    62:b5:8f:65:d8:41:4a:77:e4:11:1c:8c:6a:04:4b:
                    82:99:23:4b:08:9f:dc:fd:b0:fd:da:16:58:69:ee:
                    e1:bf:5d:48:2c:65:4b:a5:75:b0:70:32:f2:fd:fb:
                    a4:5b:a1:31:93:ca:c6:41:03:c3:21:48:79:d6:1e:
                    3f:3f:52:e8:18:a4:bc:36:9e:82:50:da:c7:4e:d7:
                    2a:c9:b6:8f:a7:43:92:d7:bb:ff:1d:2f:7c:29:d9:
                    ae:6a:7b:10:f9:4b:89:c6:72:d3:92:16:4e:63:86:
                    21:0b:fe:bb:e8:a5:05:16:56:3b:e6:c7:a8:61:88:
                    40:18:9b:34:f7:94:2e:5f:af:c2:7b:df:2a:2b:60:
                    c9:12:00:7a:d1:4e:4d:3c:24:bd:8e:f3:07:4b:b7:
                    df:f2:85:3f:b4:ab:6d:8f:14:d5:ad:9f:f7:49:02:
                    bc:78:1b:eb:3d:c6:94:74:61:1c:9c:bc:72:4e:01:
                    08:b2:14:07:74:e3:29:9c:22:8b:b5:f0:7b:85:0b:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B0:CA:AD:E4:A8:5F:5A:2C:A4:D2:DA:40:97:49:A0:F9:2D:E3:E6
            X509v3 Authority Key Identifier:
                keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:a4:d9:7d:25:49:c1:09:8a:02:5c:58:41:09:c2:50:66:
         85:12:60:85:87:63:c1:2e:4c:cc:4b:7a:db:b1:4c:46:b3:a4:
         08:40:da:27:1a:9f:af:5c:f7:56:33:b4:52:0f:08:fc:b7:ea:
         2b:1e:20:7e:2f:f2:ff:5d:70:37:7b:ac:6c:49:1d:02:da:d5:
         5a:36:65:7a:dd:d1:4a:94:60:5a:05:01:58:5a:0b:ff:4d:7f:
         fe:d2:e0:d9:de:24:d5:8c:11:4f:e3:26:6e:59:7e:6f:ea:88:
         76:33:57:e8:83:0b:82:48:08:a5:e6:72:10:c8:54:ea:23:91:
         42:bd:aa:16:98:8d:21:4b:59:1b:ba:4c:37:3b:02:f9:99:c9:
         dc:e8:fa:9c:55:af:7f:d0:68:4a:5b:74:82:4f:90:f5:0f:db:
         4e:bc:79:8f:48:22:08:1c:2d:23:a8:f8:ea:77:fd:a0:22:f1:
         09:4b:4f:e0:e2:70:78:66:8a:f9:d9:87:04:2d:de:13:02:4d:
         fa:e0:f3:69:67:a9:51:2a:12:be:06:17:fd:85:b1:82:8c:12:
         3e:c6:bf:d4:85:10:39:dd:9e:df:e2:16:8a:c4:e5:02:d1:7e:
         4b:4a:06:00:b6:91:00:db:74:4a:f7:f7:16:73:6e:6c:06:9c:
         43:f7:8b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CMwfJSHocGst4DL2bgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YzliMDQwMTZmNmYwMjE4MzMwN2MxN2RmNjMwYTAyODll
YzViYjUwHhcNMjUwNDEzMDcwMTM2WhcNMjUwNDE0MDcwMTM2WjAzMTEwLwYDVQQD
Eyg0ZGIwY2FhZGU0YTg1ZjVhMmNhNGQyZGE0MDk3NDlhMGY5MmRlM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCcbH5kamFhH81VXmfTpKL9dd/EL
fQiYxMk/425KvxjfSXv4Z0O6dnLtYTUAoqYexNjyvJaGMJtZWDVitY9l2EFKd+QR
HIxqBEuCmSNLCJ/c/bD92hZYae7hv11ILGVLpXWwcDLy/fukW6Exk8rGQQPDIUh5
1h4/P1LoGKS8Np6CUNrHTtcqybaPp0OS17v/HS98KdmuansQ+UuJxnLTkhZOY4Yh
C/676KUFFlY75seoYYhAGJs095QuX6/Ce98qK2DJEgB60U5NPCS9jvMHS7ff8oU/
tKttjxTVrZ/3SQK8eBvrPcaUdGEcnLxyTgEIshQHdOMpnCKLtfB7hQvLYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2wyq3kqF9aLKTS2kCXSaD5LePmMB8GA1UdIwQY
MBaAFCnJsEAW9vAhgzB8F99jCgKJ7Fu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et
MWQ1OTFiYmQ0MDYwLzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw
LzEvS2Ntd1FCYjI4Q0dETUh3WDMyTUtBb25zVzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAKk2X0l
ScEJigJcWEEJwlBmhRJghYdjwS5MzEt627FMRrOkCEDaJxqfr1z3VjO0Ug8I/Lfq
Kx4gfi/y/11wN3usbEkdAtrVWjZlet3RSpRgWgUBWFoL/01//tLg2d4k1YwRT+Mm
bll+b+qIdjNX6IMLgkgIpeZyEMhU6iORQr2qFpiNIUtZG7pMNzsC+ZnJ3Oj6nFWv
f9BoSlt0gk+Q9Q/bTrx5j0giCBwtI6j46nf9oCLxCUtP4OJweGaK+dmHBC3eEwJN
+uDzaWepUSoSvgYX/YWxgowSPsa/1IUQOd2e3+IWisTlAtF+S0oGALaRANt0Svf3
FnNubAacQ/eLFg==
-----END CERTIFICATE-----