Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File:                     KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier:          S2wxximQfOyEq3/a+reBbV4Gn7jXwU/bowSkavQUkAY=
Subject key identifier:   08:06:8B:E6:1E:E8:30:8E:D7:42:EB:4B:44:2D:1A:94:A1:2F:63:4B
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer:       /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial:       01962E9902E4210B1CB7801D79141B68D360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number:          0778
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=)
                          2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: 60Ae+GWhhxh8HaQ9EHYUqmaufH5DaJ6VpaXd3GnaDB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:e4:21:0b:1c:b7:80:1d:79:14:1b:68:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=08068be61ee8308ed742eb4b442d1a94a12f634b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:f6:9d:cf:91:c8:87:4f:0e:a9:87:7a:92:
                    5d:29:b8:7c:dc:d1:5b:e2:50:3e:03:71:4a:94:eb:
                    e6:69:90:04:18:f8:09:5f:a7:a1:72:dd:7e:81:7a:
                    c0:8f:7d:fb:5f:d6:a1:82:d5:e1:0f:35:d6:61:29:
                    c7:36:42:f8:b1:a8:0f:81:53:0a:0e:d9:a8:a7:4b:
                    ce:c9:e9:84:85:5f:e4:eb:f6:7d:c2:bd:83:4c:5b:
                    f4:64:ad:62:d4:ef:f6:47:8a:3e:29:4f:cd:ca:56:
                    4c:b4:77:14:6b:ba:a0:da:8e:05:85:48:16:63:fc:
                    ee:6a:20:c2:97:7d:33:1d:a4:56:5a:fd:6b:f9:17:
                    bc:ee:06:5d:33:72:37:cd:05:4a:69:b9:94:2a:72:
                    8c:cf:b3:90:9a:5e:a7:30:8f:e6:b9:25:a3:28:d1:
                    ad:47:f0:64:2e:6d:f3:b7:f4:72:ea:12:67:d0:cd:
                    19:2f:a2:67:fc:a3:13:89:bc:fd:4e:8c:97:60:48:
                    f7:ad:9c:6f:e3:48:5b:2c:63:a2:83:6d:a9:d9:0b:
                    2f:9b:a1:ec:35:81:c3:16:f6:49:f3:71:79:58:33:
                    17:ac:a8:4c:eb:57:c9:cc:9a:f4:41:4f:a5:d9:f8:
                    6f:24:d5:f0:56:ba:ae:fd:86:da:f9:ad:65:90:a9:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:06:8B:E6:1E:E8:30:8E:D7:42:EB:4B:44:2D:1A:94:A1:2F:63:4B
            X509v3 Authority Key Identifier:
                keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d0:12:ff:d2:cd:84:b4:92:2d:b1:10:49:a5:b7:d7:3b:9b:
         0b:f7:8a:6a:2e:f1:0d:bc:6c:04:fa:0d:82:e9:7e:29:94:31:
         f7:7e:52:fb:f9:17:a1:93:00:90:d4:f4:bf:14:d3:1e:85:ac:
         a5:e8:18:a0:a5:0f:33:c1:4e:f7:74:9d:5b:a4:4b:55:a8:e3:
         51:d0:06:df:0e:fc:70:e6:6c:14:2f:a3:70:ca:ea:96:fd:21:
         9f:a3:22:8b:40:01:f2:f0:e6:fb:d4:24:60:3e:c7:60:e0:db:
         0f:b4:a8:57:73:a7:fd:ca:6c:b9:d4:bb:a7:c2:06:4e:88:e1:
         66:c9:ea:17:b3:e9:93:a4:b9:0a:be:26:be:d8:3c:ea:2f:7f:
         25:11:1c:56:0f:42:6d:df:da:0c:17:f2:c4:ce:9f:dd:14:5c:
         be:9f:bd:88:a2:1b:62:b3:90:b0:ab:eb:64:ea:ef:f1:e8:ca:
         e8:56:ec:e2:0e:57:ed:35:33:52:19:c0:c5:e3:a2:65:4e:39:
         17:80:c4:c1:a9:42:71:09:61:21:5c:47:a1:67:06:b4:cb:9b:
         98:39:4f:b2:31:76:ff:4d:cb:8f:58:fe:d4:98:7f:fe:04:c6:
         1d:48:42:93:86:d4:53:f1:09:d7:67:e7:49:b4:d7:0f:99:1e:
         51:af:5d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQLkIQsct4AdeRQbaNNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2E0MjI5NzE0ZjM0ZTI5ZDNkOTJiMjVmN2I1OWM3NDhm
MGRmYzYwHhcNMjUwNDEzMTAwMTQxWhcNMjUwNDE0MTAwMTQxWjAzMTEwLwYDVQQD
EygwODA2OGJlNjFlZTgzMDhlZDc0MmViNGI0NDJkMWE5NGExMmY2MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUH2nc+RyIdPDqmHepJdKbh83NFb
4lA+A3FKlOvmaZAEGPgJX6ehct1+gXrAj337X9ahgtXhDzXWYSnHNkL4sagPgVMK
Dtmop0vOyemEhV/k6/Z9wr2DTFv0ZK1i1O/2R4o+KU/NylZMtHcUa7qg2o4FhUgW
Y/zuaiDCl30zHaRWWv1r+Re87gZdM3I3zQVKabmUKnKMz7OQml6nMI/muSWjKNGt
R/BkLm3zt/Ry6hJn0M0ZL6Jn/KMTibz9ToyXYEj3rZxv40hbLGOig22p2Qsvm6Hs
NYHDFvZJ83F5WDMXrKhM61fJzJr0QU+l2fhvJNXwVrqu/Yba+a1lkKk+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgGi+Ye6DCO10LrS0QtGpShL2NLMB8GA1UdIwQY
MBaAFCl6QilxTzTinT2Ssl97WcdI8N/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xZDcyY2UtYmU0Yy00NDk4LWE4MjMt
M2FlYmM5ZjgxN2NlLzEvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xZDcyY2UtYmU0Yy00NDk4LWE4MjMtM2FlYmM5ZjgxN2Nl
LzEvS1hwQ0tYRlBOT0tkUFpLeVgzdFp4MGp3MzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9AS/9LN
hLSSLbEQSaW31zubC/eKai7xDbxsBPoNgul+KZQx935S+/kXoZMAkNT0vxTTHoWs
pegYoKUPM8FO93SdW6RLVajjUdAG3w78cOZsFC+jcMrqlv0hn6Mii0AB8vDm+9Qk
YD7HYODbD7SoV3On/cpsudS7p8IGTojhZsnqF7Ppk6S5Cr4mvtg86i9/JREcVg9C
bd/aDBfyxM6f3RRcvp+9iKIbYrOQsKvrZOrv8ejK6Fbs4g5X7TUzUhnAxeOiZU45
F4DEwalCcQlhIVxHoWcGtMubmDlPsjF2/03Lj1j+1Jh//gTGHUhCk4bUU/EJ12fn
SbTXD5keUa9dpA==
-----END CERTIFICATE-----