Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File:                     KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier:          +qr+W3Ksf1SP8cmTvdkSLKPAjzfwKyGz8F4TC2ffIB0=
Subject key identifier:   83:AD:04:23:07:C0:E3:04:B8:3A:4D:E9:59:C6:37:DF:4E:38:A4:09
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer:       /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial:       01962E61FAD98B258915967AEE889E08E890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number:          0482
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: brAPQKmuSnUtgXOpa3EtkpYR9adRDgzJfuP7wWs0ENE=)
                          2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:d9:8b:25:89:15:96:7a:ee:88:9e:08:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=83ad042307c0e304b83a4de959c637df4e38a409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:4a:27:5b:73:ae:ca:d8:2a:d4:17:f2:a4:
                    47:0c:68:d9:75:3b:ee:68:cc:0c:6d:4d:96:d2:54:
                    27:b3:38:3b:07:52:f0:8a:50:c0:23:d5:7c:21:8b:
                    94:b3:f5:47:df:e2:88:0e:89:db:aa:fa:d5:ff:51:
                    bc:25:8e:98:7c:8e:b5:f6:61:c7:9d:c1:43:7d:45:
                    ff:18:84:49:6e:aa:90:68:80:f4:20:9b:76:eb:ee:
                    00:04:df:e5:ec:b8:f5:c2:e8:02:d3:08:15:f0:16:
                    94:83:7a:ef:80:ee:cd:ea:af:9d:0a:b5:fa:6b:25:
                    ef:55:0a:92:70:ac:19:ca:91:ac:9e:73:88:11:c9:
                    d1:dc:f2:13:e6:9d:42:bc:9c:37:5e:ae:75:79:25:
                    3b:9d:12:4f:d1:01:0c:e2:e4:33:aa:a4:f2:cd:8f:
                    1b:ee:5b:4a:ad:ce:9a:9b:a9:4c:11:b8:c8:ca:b8:
                    4d:f1:51:52:a1:46:5b:a1:34:aa:6a:c0:cc:09:88:
                    16:44:f2:cc:cc:00:13:0a:16:46:6f:96:b1:9d:00:
                    05:71:fb:e8:ae:dc:55:5e:4b:b4:e9:e6:30:54:36:
                    3b:e0:91:a6:37:77:df:58:58:ff:ca:be:5b:6f:fa:
                    39:5d:09:98:5a:ec:bf:f8:08:18:50:3c:28:58:38:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:04:23:07:C0:E3:04:B8:3A:4D:E9:59:C6:37:DF:4E:38:A4:09
            X509v3 Authority Key Identifier:
                keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:26:ce:4f:d4:06:ba:f9:25:58:f4:54:c3:01:22:7d:ff:f7:
         f8:52:6d:da:69:a1:c4:73:0f:7e:e6:47:28:f2:0a:07:ba:b8:
         9d:1f:65:a3:41:2a:46:60:45:68:4d:3e:7b:54:31:3c:7f:db:
         1d:ca:02:b7:a0:95:d6:a4:3a:5a:26:88:00:93:cb:a1:d4:e4:
         f7:dc:09:6a:65:20:34:19:79:26:ea:51:a6:55:d6:93:83:c0:
         a6:f9:82:4e:79:45:c7:90:f4:31:e8:9a:1d:59:fc:f1:4f:d1:
         82:24:c0:2d:5d:c5:48:a7:27:fa:80:2c:9c:20:e9:49:12:80:
         3d:b8:cf:b6:ce:20:a3:4d:47:e8:c4:e1:d4:48:83:84:e0:40:
         92:0b:3b:aa:e4:c9:e2:8e:4b:53:54:f4:e7:f9:00:c8:f7:37:
         8c:27:36:5f:47:75:37:2e:8a:08:99:e2:f1:76:97:01:35:d4:
         20:54:84:eb:a2:75:1c:5d:15:06:1c:fe:dd:3e:5d:47:47:b1:
         a8:79:bb:93:aa:6e:b6:62:a2:59:07:cb:d9:8b:2a:ca:07:5e:
         9c:ba:5a:85:50:c3:f7:65:ba:81:2d:a4:84:a1:72:5f:e4:72:
         c3:b7:c8:ac:03:6e:ac:92:46:51:c1:ca:19:b7:b6:18:bc:20:
         5b:aa:8f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfrZiyWJFZZ67oieCOiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDU1OGUyNjU2YmY4OTczMzM4OTU5NGRmMTQ0ZDIxZDFk
YzAzMTMwHhcNMjUwNDEzMDkwMTM1WhcNMjUwNDE0MDkwMTM1WjAzMTEwLwYDVQQD
Eyg4M2FkMDQyMzA3YzBlMzA0YjgzYTRkZTk1OWM2MzdkZjRlMzhhNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmohKJ1tzrsrYKtQX8qRHDGjZdTvu
aMwMbU2W0lQnszg7B1LwilDAI9V8IYuUs/VH3+KIDonbqvrV/1G8JY6YfI619mHH
ncFDfUX/GIRJbqqQaID0IJt26+4ABN/l7Lj1wugC0wgV8BaUg3rvgO7N6q+dCrX6
ayXvVQqScKwZypGsnnOIEcnR3PIT5p1CvJw3Xq51eSU7nRJP0QEM4uQzqqTyzY8b
7ltKrc6am6lMEbjIyrhN8VFSoUZboTSqasDMCYgWRPLMzAATChZGb5axnQAFcfvo
rtxVXku06eYwVDY74JGmN3ffWFj/yr5bb/o5XQmYWuy/+AgYUDwoWDjjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOtBCMHwOMEuDpN6VnGN99OOKQJMB8GA1UdIwQY
MBaAFCpFWOJla/iXMziVlN8UTSHR3AMTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzkt
OTA1NTI4M2YwZWFlLzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNWMzOGYtNGZjMy00MjgzLTljMzktOTA1NTI4M2YwZWFl
LzEvS2tWWTRtVnItSmN6T0pXVTN4Uk5JZEhjQXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSbOT9QG
uvklWPRUwwEiff/3+FJt2mmhxHMPfuZHKPIKB7q4nR9lo0EqRmBFaE0+e1QxPH/b
HcoCt6CV1qQ6WiaIAJPLodTk99wJamUgNBl5JupRplXWk4PApvmCTnlFx5D0Meia
HVn88U/RgiTALV3FSKcn+oAsnCDpSRKAPbjPts4go01H6MTh1EiDhOBAkgs7quTJ
4o5LU1T05/kAyPc3jCc2X0d1Ny6KCJni8XaXATXUIFSE66J1HF0VBhz+3T5dR0ex
qHm7k6putmKiWQfL2YsqygdenLpahVDD92W6gS2khKFyX+Ryw7fIrANurJJGUcHK
Gbe2GLwgW6qPhQ==
-----END CERTIFICATE-----