Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier:          cwwA304Jp9mPJUxCVayOyHnQ4BH9MDNtHIYLUIRY3Pc=
Subject key identifier:   3E:F1:29:01:46:36:D9:6E:B2:0E:19:BF:4D:75:9C:F4:CB:76:EA:A9
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer:       /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial:       01962FABB3DA60CF7EDD69C1EFBAB1C24EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number:          05C1
Signing time:             Sun 13 Apr 2025 15:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:43 +0000
Files and hashes:         1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: XTSTVWNRQmpAjOrmFY2a9SnXZ6qwVbjWUrnMvQIM3CU=)
                          2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b3:da:60:cf:7e:dd:69:c1:ef:ba:b1:c2:4e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Validity
            Not Before: Apr 13 15:01:43 2025 GMT
            Not After : Apr 14 15:01:43 2025 GMT
        Subject: CN=3ef129014636d96eb20e19bf4d759cf4cb76eaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:f6:3b:0d:f8:ae:06:3d:36:b0:b3:8d:7b:
                    78:da:eb:74:3f:a6:f0:75:b9:03:1f:a3:c4:33:bb:
                    73:ef:9b:65:62:4f:6b:9b:68:74:3c:d1:cc:07:90:
                    bb:40:ce:b9:ff:32:5f:fd:09:4b:19:48:52:f1:d7:
                    41:68:04:dc:76:ce:ee:a1:d1:e2:c8:09:1b:0a:90:
                    e4:98:06:4f:b5:e4:ff:67:c2:73:0f:00:e3:7a:d8:
                    3b:2c:75:e2:ce:37:e8:e6:4e:ac:ae:40:1c:60:8a:
                    cd:41:66:76:8e:b5:11:4d:fa:17:1e:8a:3c:1a:57:
                    14:a1:7b:34:e1:f8:5a:32:bd:92:a0:09:1d:4b:f2:
                    b1:51:a8:6b:33:de:1e:ab:8e:04:cb:15:48:3b:33:
                    19:98:95:1a:95:10:79:61:c9:15:6a:54:e8:c5:80:
                    6c:88:7c:61:52:50:bd:3b:a6:c8:d9:fe:7e:3c:ba:
                    8c:aa:e7:26:f5:56:e4:5a:8e:d4:6f:ed:de:e3:71:
                    c3:b7:b6:5c:7a:6a:ee:c9:4a:d8:97:b2:48:c9:2b:
                    0d:6b:57:26:ed:57:34:23:ec:24:fe:1d:33:91:ff:
                    b4:1c:1a:e1:8d:f1:a9:3c:a0:07:2d:c2:f9:fd:7c:
                    49:aa:00:ae:1f:f1:b1:b8:9a:6b:ee:2a:cb:4c:e6:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:29:01:46:36:D9:6E:B2:0E:19:BF:4D:75:9C:F4:CB:76:EA:A9
            X509v3 Authority Key Identifier:
                keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:3a:ef:a2:e0:72:35:94:91:95:3e:6c:57:2c:f2:0b:60:
         98:40:be:3c:38:81:26:f8:98:67:84:ab:8a:0f:bc:84:54:01:
         e1:e9:90:34:8a:b5:46:62:fd:32:d9:5a:54:77:5b:20:dd:a4:
         2d:10:d3:28:cc:d7:d8:7d:18:d0:6e:d6:85:39:ce:ea:33:10:
         cf:e6:1c:83:4d:e5:d0:b5:9e:a1:cb:c7:ea:bd:5f:3e:5d:0b:
         5a:cb:4b:85:89:45:df:0e:a1:48:56:5f:7e:df:df:69:8f:69:
         7c:78:a6:1d:b8:48:7b:5d:99:4d:26:3e:b7:1f:fc:ff:e3:e5:
         7b:99:2a:27:55:57:0c:b1:5b:b7:1c:ce:04:e6:e0:3a:f8:a9:
         cd:96:aa:87:4c:6d:da:83:cb:9d:67:59:91:75:55:d6:4b:8a:
         9d:73:e5:16:18:e4:ca:91:3b:72:da:3d:3d:d9:e6:d2:20:d5:
         47:9b:60:6c:9b:61:df:a1:65:46:19:44:ec:ec:b5:57:b9:ec:
         4d:70:f7:7a:59:fa:a3:11:49:ff:f8:4f:98:ef:7c:3e:e4:1b:
         68:5a:b4:2c:b9:91:69:64:8b:b9:3c:63:cc:e2:61:69:52:16:
         8e:80:f5:f3:0c:02:88:76:60:5b:3d:d4:42:35:55:d0:c9:2f:
         fc:28:65:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq7PaYM9+3WnB77qxwk7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjUwNDEzMTUwMTQzWhcNMjUwNDE0MTUwMTQzWjAzMTEwLwYDVQQD
EygzZWYxMjkwMTQ2MzZkOTZlYjIwZTE5YmY0ZDc1OWNmNGNiNzZlYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rP2Ow34rgY9NrCzjXt42ut0P6bw
dbkDH6PEM7tz75tlYk9rm2h0PNHMB5C7QM65/zJf/QlLGUhS8ddBaATcds7uodHi
yAkbCpDkmAZPteT/Z8JzDwDjetg7LHXizjfo5k6srkAcYIrNQWZ2jrURTfoXHoo8
GlcUoXs04fhaMr2SoAkdS/KxUahrM94eq44EyxVIOzMZmJUalRB5YckValToxYBs
iHxhUlC9O6bI2f5+PLqMqucm9VbkWo7Ub+3e43HDt7ZcemruyUrYl7JIySsNa1cm
7Vc0I+wk/h0zkf+0HBrhjfGpPKAHLcL5/XxJqgCuH/GxuJpr7irLTOZM/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7xKQFGNtlusg4Zv011nPTLduqpMB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV0676Lg
cjWUkZU+bFcs8gtgmEC+PDiBJviYZ4Srig+8hFQB4emQNIq1RmL9MtlaVHdbIN2k
LRDTKMzX2H0Y0G7WhTnO6jMQz+Ycg03l0LWeocvH6r1fPl0LWstLhYlF3w6hSFZf
ft/faY9pfHimHbhIe12ZTSY+tx/8/+Ple5kqJ1VXDLFbtxzOBObgOvipzZaqh0xt
2oPLnWdZkXVV1kuKnXPlFhjkypE7cto9Pdnm0iDVR5tgbJth36FlRhlE7Oy1V7ns
TXD3eln6oxFJ//hPmO98PuQbaFq0LLmRaWSLuTxjzOJhaVIWjoD18wwCiHZgWz3U
QjVV0Mkv/Chl5A==
-----END CERTIFICATE-----