Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File:                     KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier:          mP7gxlPGm1tLEudPvlhcHqsq9JzdHXEZx1oyp+mIx1E=
Subject key identifier:   1C:40:F8:2C:E3:4E:F8:C8:6B:DC:18:CB:DD:33:33:BD:15:61:96:C7
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer:       /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial:       01962F743EEA1130B60F0AEBE799FA8A10DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: ab9iQYUE19MJ/4jrUnfbf/UOqelxENLG6yxYDj8kRmQ=)
                          2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:ea:11:30:b6:0f:0a:eb:e7:99:fa:8a:10:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=1c40f82ce34ef8c86bdc18cbdd3333bd156196c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:0d:6d:14:50:e7:6d:ef:60:97:03:e3:13:
                    10:e1:4f:0b:4a:06:39:3f:e6:d2:64:66:c4:ac:90:
                    4c:fa:4e:37:2d:76:e1:67:58:86:26:a2:bd:fe:b7:
                    1e:5b:9c:f1:47:bd:ac:4b:c6:3c:00:e1:dd:dd:eb:
                    69:73:d6:c6:2b:98:70:04:ce:e9:ad:17:18:60:06:
                    34:99:09:58:3e:7a:4d:2c:dd:63:ed:6f:d8:2f:f7:
                    28:26:33:93:be:0d:5c:ee:64:47:c2:fd:c5:c6:3e:
                    ba:94:24:a6:d3:70:55:1a:f3:c7:67:d4:86:db:fe:
                    fa:eb:18:fe:47:8c:f8:f4:1b:92:84:2c:82:57:34:
                    34:83:f4:ed:1e:8f:a2:56:e8:f0:76:31:78:30:6a:
                    93:4f:41:2b:9e:d3:5d:5a:93:55:05:0d:5b:e1:9c:
                    1c:80:f4:42:84:51:d7:46:74:bb:60:f9:db:ed:11:
                    20:00:a9:97:3f:a8:60:83:01:99:61:3b:3b:c2:bb:
                    9a:6c:97:cb:6c:f7:cc:fd:fa:ff:fd:4d:b3:59:da:
                    11:df:11:76:de:71:82:6f:f2:80:54:62:fa:e0:90:
                    99:25:92:c3:d3:9f:9d:b8:06:96:f1:19:08:70:91:
                    5d:d7:46:ff:c3:27:a5:0c:52:a7:77:d2:ad:01:a3:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:40:F8:2C:E3:4E:F8:C8:6B:DC:18:CB:DD:33:33:BD:15:61:96:C7
            X509v3 Authority Key Identifier:
                keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:20:3f:fb:07:d3:64:3f:54:e5:71:04:a1:eb:a8:ef:5a:
         78:4c:38:40:9c:37:08:47:7e:a9:6f:31:5a:a3:8a:de:04:88:
         f8:23:33:2e:bb:58:96:bc:85:2a:a0:82:e4:44:9f:8c:76:ce:
         77:3b:48:8a:02:88:2d:e8:20:57:14:f5:83:22:72:1c:a5:b5:
         2c:eb:47:2d:d9:0a:6f:00:21:a0:3b:4e:5b:b1:fb:47:4a:dc:
         af:c2:79:77:7f:66:55:9e:d2:25:7f:8b:4c:46:30:83:42:f2:
         cd:2e:f3:63:50:10:b7:51:b3:63:c4:93:8f:41:4a:9b:72:1a:
         f7:0f:f4:50:a0:85:75:ca:4c:bb:ee:b0:57:0c:fd:1e:65:14:
         12:d9:5d:3a:e7:4e:b8:2a:d5:88:83:4b:cb:be:0a:34:86:fa:
         eb:05:bb:03:d4:50:9d:c5:ca:cc:22:26:11:80:62:46:6c:51:
         14:e4:b9:0d:8b:61:49:39:79:5d:55:15:65:e6:59:a0:b4:04:
         0a:cc:f2:2e:ee:72:1e:d5:89:9b:34:0c:c2:d6:68:46:fb:ed:
         88:44:57:37:93:b8:2e:9e:49:40:a4:36:16:dd:66:e6:d3:13:
         18:48:1a:d4:88:5d:5a:fd:b3:ed:0b:40:16:0b:b4:87:16:bb:
         f7:e4:c9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdD7qETC2Dwrr55n6ihDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl
ZGU3NDQwHhcNMjUwNDEzMTQwMTA5WhcNMjUwNDE0MTQwMTA5WjAzMTEwLwYDVQQD
EygxYzQwZjgyY2UzNGVmOGM4NmJkYzE4Y2JkZDMzMzNiZDE1NjE5NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUNbRRQ523vYJcD4xMQ4U8LSgY5
P+bSZGbErJBM+k43LXbhZ1iGJqK9/rceW5zxR72sS8Y8AOHd3etpc9bGK5hwBM7p
rRcYYAY0mQlYPnpNLN1j7W/YL/coJjOTvg1c7mRHwv3Fxj66lCSm03BVGvPHZ9SG
2/766xj+R4z49BuShCyCVzQ0g/TtHo+iVujwdjF4MGqTT0ErntNdWpNVBQ1b4Zwc
gPRChFHXRnS7YPnb7REgAKmXP6hggwGZYTs7wruabJfLbPfM/fr//U2zWdoR3xF2
3nGCb/KAVGL64JCZJZLD05+duAaW8RkIcJFd10b/wyelDFKnd9KtAaPbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxA+CzjTvjIa9wYy90zM70VYZbHMB8GA1UdIwQY
MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt
MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3
LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyE4gP/sH
02Q/VOVxBKHrqO9aeEw4QJw3CEd+qW8xWqOK3gSI+CMzLrtYlryFKqCC5ESfjHbO
dztIigKILeggVxT1gyJyHKW1LOtHLdkKbwAhoDtOW7H7R0rcr8J5d39mVZ7SJX+L
TEYwg0LyzS7zY1AQt1GzY8STj0FKm3Ia9w/0UKCFdcpMu+6wVwz9HmUUEtldOudO
uCrViINLy74KNIb66wW7A9RQncXKzCImEYBiRmxRFOS5DYthSTl5XVUVZeZZoLQE
CszyLu5yHtWJmzQMwtZoRvvtiERXN5O4Lp5JQKQ2Ft1m5tMTGEga1IhdWv2z7QtA
Fgu0hxa79+TJxA==
-----END CERTIFICATE-----