Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File:                     _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier:          joJZHcRpt1c+neZ2DrAnUGMShZpazO5eVrbinCIGZO4=
Subject key identifier:   4E:BD:23:07:72:9B:99:EE:90:EA:E2:26:9A:3B:EA:E8:88:08:FF:71
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer:       /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial:       01962E2B0EEC2A77A83488AE349DA4DD3D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number:          14AF
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=)
                          2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: JoaoX6+Ivy2lIfr19fZ6LdGj3D+6FfdwW+YmFaKx220=)
                          3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:ec:2a:77:a8:34:88:ae:34:9d:a4:dd:3d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=4ebd2307729b99ee90eae2269a3beae88808ff71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:ac:64:f9:c6:f0:4e:a9:4b:6e:f1:a1:31:
                    91:32:f7:80:ef:90:99:59:e0:22:a6:23:5f:67:8f:
                    50:5d:ac:cf:90:ff:c3:22:71:c7:3d:54:6a:2c:68:
                    60:24:03:97:c1:73:5a:b6:ef:53:a2:fe:b1:a1:d2:
                    6b:46:cc:57:43:a0:cf:85:c0:7c:cd:a6:4c:0b:0a:
                    63:b9:ec:1a:92:51:e1:30:ea:3f:11:ed:88:18:c4:
                    26:9e:ee:a7:a7:c7:f7:14:b7:7f:f2:5a:70:5a:23:
                    ad:b4:14:ec:48:47:aa:a5:1c:b5:bc:eb:ba:1e:dc:
                    38:df:db:d0:db:27:78:60:ae:10:58:54:10:bb:e9:
                    70:b6:ab:d7:a4:1e:bf:78:cf:00:5c:2a:aa:3d:b7:
                    fc:5d:0a:9f:0e:ab:01:2e:5d:19:28:fa:09:e1:30:
                    d2:47:b1:8c:e8:08:09:d5:32:53:d2:0f:58:6b:0f:
                    48:93:bf:57:4c:75:40:5f:f8:d4:9b:99:55:13:2e:
                    b2:2f:25:7f:7c:6f:19:3e:7a:0e:b2:e2:bc:20:c7:
                    26:e0:b5:9f:29:f3:f8:ce:ec:47:f6:fb:ef:e3:62:
                    67:56:92:4e:c5:e2:6f:d9:6a:3f:4b:0a:29:14:f5:
                    66:d5:4e:91:e6:a5:fc:f7:d0:5c:0c:f4:f8:47:cd:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BD:23:07:72:9B:99:EE:90:EA:E2:26:9A:3B:EA:E8:88:08:FF:71
            X509v3 Authority Key Identifier:
                keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:ca:99:74:66:df:36:cb:09:ce:3c:d8:52:69:aa:38:eb:
         52:69:74:52:e0:04:0e:c0:24:d4:43:03:23:73:60:22:cc:0c:
         7b:a4:ca:60:2b:ff:bd:92:e2:88:3d:00:17:2e:e0:87:c3:9f:
         c9:ab:32:74:1d:05:ff:bd:4c:a6:fd:c3:ce:a3:f7:2b:c6:46:
         35:f4:0d:85:e0:00:fd:c0:c4:d7:72:6d:1b:51:ce:ba:d8:66:
         bf:4c:31:84:a3:bb:a7:ed:b4:63:09:c9:a0:4f:56:1f:d7:5b:
         5f:4c:35:89:05:4b:65:69:d4:03:a0:3e:fa:f1:80:b0:28:7f:
         ae:30:c6:55:d3:48:cc:3b:93:fb:50:09:97:fc:7e:7a:c7:76:
         09:91:27:eb:8f:9e:81:46:74:e2:5d:16:87:91:19:5c:8e:8a:
         f9:04:7c:1e:2d:fe:11:d0:e4:8b:21:0f:53:59:98:e0:cb:47:
         0c:c2:78:a1:3e:34:ee:29:a4:8c:43:05:f0:10:30:c5:d5:5b:
         24:a3:08:fe:45:e6:e0:ef:20:ae:84:67:66:41:65:76:eb:97:
         29:79:6d:b7:95:39:52:22:a3:00:66:7d:41:7e:55:51:a6:5e:
         63:e9:15:7e:3f:8b:83:6b:a9:30:34:69:6e:0c:85:cc:ba:cb:
         83:7c:4f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw7sKneoNIiuNJ2k3T00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjUwNDEzMDgwMTM1WhcNMjUwNDE0MDgwMTM1WjAzMTEwLwYDVQQD
Eyg0ZWJkMjMwNzcyOWI5OWVlOTBlYWUyMjY5YTNiZWFlODg4MDhmZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstKsZPnG8E6pS27xoTGRMveA75CZ
WeAipiNfZ49QXazPkP/DInHHPVRqLGhgJAOXwXNatu9Tov6xodJrRsxXQ6DPhcB8
zaZMCwpjuewaklHhMOo/Ee2IGMQmnu6np8f3FLd/8lpwWiOttBTsSEeqpRy1vOu6
Htw439vQ2yd4YK4QWFQQu+lwtqvXpB6/eM8AXCqqPbf8XQqfDqsBLl0ZKPoJ4TDS
R7GM6AgJ1TJT0g9Yaw9Ik79XTHVAX/jUm5lVEy6yLyV/fG8ZPnoOsuK8IMcm4LWf
KfP4zuxH9vvv42JnVpJOxeJv2Wo/SwopFPVm1U6R5qX899BcDPT4R82+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE69Iwdym5nukOriJpo76uiICP9xMB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPHKmXRm
3zbLCc482FJpqjjrUml0UuAEDsAk1EMDI3NgIswMe6TKYCv/vZLiiD0AFy7gh8Of
yasydB0F/71Mpv3DzqP3K8ZGNfQNheAA/cDE13JtG1HOuthmv0wxhKO7p+20YwnJ
oE9WH9dbX0w1iQVLZWnUA6A++vGAsCh/rjDGVdNIzDuT+1AJl/x+esd2CZEn64+e
gUZ04l0Wh5EZXI6K+QR8Hi3+EdDkiyEPU1mY4MtHDMJ4oT407imkjEMF8BAwxdVb
JKMI/kXm4O8groRnZkFlduuXKXltt5U5UiKjAGZ9QX5VUaZeY+kVfj+Lg2upMDRp
bgyFzLrLg3xPIg==
-----END CERTIFICATE-----