Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File:                     KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier:          ON0ILQbiyLSYLL9e9u2R9r3awhWJzMWs6i+KUxityTI=
Subject key identifier:   6E:62:2D:5E:A8:11:51:46:C2:D1:12:DA:0F:68:DA:72:01:28:C3:26
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer:       /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial:       01962E98C5A126A4F1AEF5DED1110CDCCEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number:          07B7
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: uzlV0FW01GzICTAl9hanH8qKThqnHcU/28TEA75/Qk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:a1:26:a4:f1:ae:f5:de:d1:11:0c:dc:ce:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=6e622d5ea8115146c2d112da0f68da720128c326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b4:a3:b0:b7:eb:d9:da:ce:b9:f1:cb:af:d0:
                    ee:a2:e0:99:ee:03:1e:87:2a:b3:f4:7a:8c:d5:07:
                    79:d9:ec:98:df:26:09:46:de:2e:46:ec:5b:ab:78:
                    5f:26:3a:96:13:16:9c:3a:64:2a:c1:9d:49:5c:15:
                    5e:90:09:44:9c:ed:20:dd:70:de:c5:52:0b:fc:0c:
                    ea:57:5a:ed:a3:13:ac:f1:90:36:c9:74:a9:6a:79:
                    c8:ff:94:ef:97:3d:82:6c:03:dc:65:2a:c1:c3:03:
                    d9:0f:40:91:ea:5e:29:e8:ca:53:11:d5:79:d9:53:
                    be:37:34:65:01:83:6b:58:f0:c9:8d:3e:33:1d:86:
                    3b:18:ac:e5:36:91:af:3a:74:0c:a6:53:d4:bf:bd:
                    3c:66:27:24:5d:ea:e6:98:1f:0c:9a:bf:cb:96:c7:
                    44:ef:f6:c0:de:5b:7a:fe:b0:59:0b:80:c2:fc:d4:
                    5b:c1:a8:2a:d9:54:79:b6:33:7c:41:27:f1:4b:a1:
                    87:1f:60:4c:ec:be:e8:b7:15:1f:5c:92:e9:38:0b:
                    c4:2b:f6:70:ee:29:2b:c4:b4:23:12:cd:ce:5b:4a:
                    f2:d2:1d:ca:0e:7d:70:a0:1f:4f:d3:74:84:db:22:
                    6e:84:ba:99:02:1d:8c:82:e8:18:21:92:23:e0:26:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:2D:5E:A8:11:51:46:C2:D1:12:DA:0F:68:DA:72:01:28:C3:26
            X509v3 Authority Key Identifier:
                keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:68:ea:4f:6e:80:05:14:53:6e:5c:f5:c1:d6:c8:e6:3f:
         20:ae:46:67:c1:0e:11:ec:29:90:fc:d0:88:5b:06:20:0c:83:
         eb:f1:18:3f:eb:66:2e:d3:68:e8:80:95:87:b9:85:65:ff:13:
         cc:57:c2:d4:cd:05:1f:91:88:22:b3:13:ec:6c:f2:0f:e8:67:
         df:5f:82:8e:a7:75:2b:a1:45:41:42:c1:61:68:36:e3:8c:d9:
         a6:86:81:c9:89:c2:1e:78:89:0e:40:26:fb:c4:72:30:39:54:
         b4:66:1f:60:5f:8c:5f:5c:69:db:01:a3:24:25:a5:e3:54:5b:
         7c:c8:5d:0e:55:8f:78:3d:98:48:2b:48:b3:a4:71:4b:4c:4b:
         df:ce:5f:55:dc:50:39:e4:c8:e2:74:5e:b4:05:5d:5f:5f:3c:
         2c:f2:76:25:93:a1:71:2a:0b:81:94:12:b7:ff:66:b1:48:39:
         f6:39:41:9c:67:3e:fb:db:88:a7:ab:3b:ac:4b:f3:c6:dd:0f:
         68:60:d1:9a:f9:3d:89:25:45:8f:ce:3a:6c:5d:11:04:76:b9:
         9f:07:d4:36:5c:dc:b1:58:9d:1c:49:48:55:9f:77:94:9c:71:
         35:2b:d8:2c:db:ed:61:e4:48:ae:16:a0:6f:bd:ad:bd:8f:4f:
         c7:45:f6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMWhJqTxrvXe0REM3M7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjUxMTI4ODJkOGU2YzcyZDAyMmMyYzNkYTE3YjUyYzJh
ZGIwN2IwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg2ZTYyMmQ1ZWE4MTE1MTQ2YzJkMTEyZGEwZjY4ZGE3MjAxMjhjMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LSjsLfr2drOufHLr9DuouCZ7gMe
hyqz9HqM1Qd52eyY3yYJRt4uRuxbq3hfJjqWExacOmQqwZ1JXBVekAlEnO0g3XDe
xVIL/AzqV1rtoxOs8ZA2yXSpannI/5Tvlz2CbAPcZSrBwwPZD0CR6l4p6MpTEdV5
2VO+NzRlAYNrWPDJjT4zHYY7GKzlNpGvOnQMplPUv708ZickXermmB8Mmr/LlsdE
7/bA3lt6/rBZC4DC/NRbwagq2VR5tjN8QSfxS6GHH2BM7L7otxUfXJLpOAvEK/Zw
7ikrxLQjEs3OW0ry0h3KDn1woB9P03SE2yJuhLqZAh2MgugYIZIj4CZVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5iLV6oEVFGwtES2g9o2nIBKMMmMB8GA1UdIwQY
MBaAFChlESiC2ObHLQIsLD2he1LCrbB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDhkMDktMzllOS00MDhmLWEzNzAt
OWJiM2Y1N2MwZWYwLzEvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZDhkMDktMzllOS00MDhmLWEzNzAtOWJiM2Y1N2MwZWYw
LzEvS0dVUktJTFk1c2N0QWl3c1BhRjdVc0t0c0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzdo6k9u
gAUUU25c9cHWyOY/IK5GZ8EOEewpkPzQiFsGIAyD6/EYP+tmLtNo6ICVh7mFZf8T
zFfC1M0FH5GIIrMT7GzyD+hn31+Cjqd1K6FFQULBYWg244zZpoaByYnCHniJDkAm
+8RyMDlUtGYfYF+MX1xp2wGjJCWl41RbfMhdDlWPeD2YSCtIs6RxS0xL385fVdxQ
OeTI4nRetAVdX188LPJ2JZOhcSoLgZQSt/9msUg59jlBnGc++9uIp6s7rEvzxt0P
aGDRmvk9iSVFj846bF0RBHa5nwfUNlzcsVidHElIVZ93lJxxNSvYLNvtYeRIrhag
b72tvY9Px0X2aQ==
-----END CERTIFICATE-----