Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File:                     KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier:          mcvkSg0CFT7MtHRRnRp74/Ffe1a4J79pfP3ypyZvzew=
Subject key identifier:   F9:44:76:25:1D:C7:DC:F1:2A:78:32:C7:B1:4F:9A:7C:01:22:1C:10
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer:       /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial:       01962E6201E17467FA142B83383593F4F43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number:          0CB0
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
                          2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: DOxco92Vmr99aYWVqBJzeIRiatbPehQbFDikPrz5blo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:e1:74:67:fa:14:2b:83:38:35:93:f4:f4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=f94476251dc7dcf12a7832c7b14f9a7c01221c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:a2:33:f0:10:5c:51:e6:7f:fe:79:be:d8:
                    51:ae:7a:7d:db:5e:b6:4f:7d:90:05:e0:dc:f3:a4:
                    c2:a3:66:dd:f6:ce:68:61:91:e9:27:bc:a0:c5:4a:
                    1f:e3:51:d8:96:65:f7:cb:9a:62:ed:77:b6:9c:bb:
                    77:9c:22:b5:ed:bd:2d:48:0c:44:a1:17:a1:ee:6f:
                    5a:e0:52:3f:8d:67:2d:54:1e:34:f5:e9:5d:85:ba:
                    0f:ac:86:e0:e2:2c:09:a9:4a:fe:ed:55:61:ae:19:
                    0c:29:49:03:83:ce:ea:19:bb:cd:4c:cc:fe:af:df:
                    ba:31:a7:34:4c:b5:29:0c:e5:2f:ff:36:3c:5d:5d:
                    a2:09:65:35:de:37:94:52:36:27:3b:4a:e0:7f:57:
                    f9:6d:f9:4e:5c:7a:c4:2b:a4:73:b9:fd:16:de:8b:
                    b7:86:48:12:40:2d:68:39:99:19:6c:03:34:a7:5c:
                    97:ec:33:51:ec:34:22:e1:6b:0c:c9:8f:08:01:25:
                    03:89:7d:1b:3d:8b:57:c4:b7:ac:89:81:dc:03:41:
                    c6:f9:6e:8f:26:8c:6f:a1:b7:7e:38:4c:00:a6:ed:
                    2e:7a:40:0f:5b:4e:84:44:59:55:28:39:ed:20:2c:
                    f7:81:15:d8:3c:63:ca:48:02:58:34:8c:67:c2:8d:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:76:25:1D:C7:DC:F1:2A:78:32:C7:B1:4F:9A:7C:01:22:1C:10
            X509v3 Authority Key Identifier:
                keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:d7:a1:48:60:7c:21:b5:e1:c3:f5:7e:f2:b3:ad:a9:0f:
         94:ff:76:4a:d9:7d:3a:2e:b3:cf:0a:69:f5:ae:d5:a0:80:24:
         31:ad:40:a6:3c:f1:57:df:ae:4a:41:03:fc:6b:32:45:d1:b6:
         c5:47:d4:91:b3:9f:07:f0:78:42:e6:4f:91:b5:c6:2b:6b:10:
         20:ff:ea:c6:1e:29:db:ae:2a:b8:b8:00:ea:b7:96:7e:89:bd:
         27:a2:a5:2d:5e:bf:bb:7e:e5:73:d1:db:b2:9b:cd:2e:d1:a0:
         89:c7:10:0f:15:5f:5b:37:33:35:0b:87:42:cf:84:e8:ae:8d:
         e7:84:b7:ae:da:d0:47:a9:f2:82:38:13:28:4d:04:d1:25:ec:
         02:03:67:e4:19:7a:72:38:58:a8:7b:35:be:6e:8e:f4:68:70:
         31:52:0b:be:e6:40:5e:6b:1f:2f:d4:29:ff:58:34:b7:e8:26:
         2c:f3:b8:67:29:06:8a:80:f0:4d:cc:ab:ff:be:62:c6:13:23:
         58:19:4c:69:44:56:1d:67:5f:f5:fb:e4:fb:e8:ec:63:ad:ae:
         d2:1b:fb:63:1d:a2:d1:00:15:34:3a:88:bf:2c:6e:d0:f0:a3:
         47:f2:83:7e:e4:4d:6b:b4:0f:fa:d3:ce:81:75:e6:de:c2:0d:
         7b:7a:f5:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgHhdGf6FCuDODWT9PQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mzc1YzljMDBiMTUyOWQ1NTFlZTdlMjhjNjA3MGFiNDNh
MmZlNzYwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
EyhmOTQ0NzYyNTFkYzdkY2YxMmE3ODMyYzdiMTRmOWE3YzAxMjIxYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze6iM/AQXFHmf/55vthRrnp92162
T32QBeDc86TCo2bd9s5oYZHpJ7ygxUof41HYlmX3y5pi7Xe2nLt3nCK17b0tSAxE
oReh7m9a4FI/jWctVB409eldhboPrIbg4iwJqUr+7VVhrhkMKUkDg87qGbvNTMz+
r9+6Mac0TLUpDOUv/zY8XV2iCWU13jeUUjYnO0rgf1f5bflOXHrEK6Rzuf0W3ou3
hkgSQC1oOZkZbAM0p1yX7DNR7DQi4WsMyY8IASUDiX0bPYtXxLesiYHcA0HG+W6P
Joxvobd+OEwApu0uekAPW06ERFlVKDntICz3gRXYPGPKSAJYNIxnwo176wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlEdiUdx9zxKngyx7FPmnwBIhwQMB8GA1UdIwQY
MBaAFCk3XJwAsVKdVR7n4oxgcKtDov52MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2Yt
MDUwNGUxMTFhM2I4LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2Y5NzctMDE1Yi00Y2FmLTg5M2YtMDUwNGUxMTFhM2I4
LzEvS1RkY25BQ3hVcDFWSHVmaWpHQndxME9pX25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0/XoUhg
fCG14cP1fvKzrakPlP92Stl9Oi6zzwpp9a7VoIAkMa1ApjzxV9+uSkED/GsyRdG2
xUfUkbOfB/B4QuZPkbXGK2sQIP/qxh4p264quLgA6reWfom9J6KlLV6/u37lc9Hb
spvNLtGgiccQDxVfWzczNQuHQs+E6K6N54S3rtrQR6nygjgTKE0E0SXsAgNn5Bl6
cjhYqHs1vm6O9GhwMVILvuZAXmsfL9Qp/1g0t+gmLPO4ZykGioDwTcyr/75ixhMj
WBlMaURWHWdf9fvk++jsY62u0hv7Yx2i0QAVNDqIvyxu0PCjR/KDfuRNa7QP+tPO
gXXm3sINe3r1MA==
-----END CERTIFICATE-----