Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File:                     KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier:          N6pPYMD88SzjEUDhwz8j6RnTVW3tBgX7lvskwCV9TFY=
Subject key identifier:   60:9C:C3:77:33:A7:7E:42:58:58:51:DA:62:89:A7:33:57:86:4E:4D
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer:       /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial:       01962F3DBFD127B08A3DC06E1B2FE7229FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number:          1227
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: iwZuJ6ovLvlbzcYyvcAHwtgYopyt60VGOZ+S5ZbuNsw=)
                          2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bf:d1:27:b0:8a:3d:c0:6e:1b:2f:e7:22:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=609cc37733a77e42585851da6289a73357864e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:a8:9b:46:81:73:4b:4c:7c:4a:bd:23:45:
                    b2:75:91:dc:d9:57:c5:a2:6f:94:ef:0a:56:80:5b:
                    2b:c9:00:19:71:5d:d7:99:f4:da:bc:c1:33:30:f7:
                    9a:36:d0:24:74:64:f9:eb:3d:ba:0f:1f:33:ae:5f:
                    97:5d:0b:94:15:0f:e0:24:04:a2:db:1e:06:71:c0:
                    37:07:2a:14:16:40:e2:ff:fe:a0:ad:7b:41:93:dd:
                    83:98:fc:b1:f4:d8:e3:aa:60:60:e8:42:2e:de:00:
                    a6:95:23:11:a9:1c:af:cd:4c:7b:bb:dc:ff:64:38:
                    24:a2:43:42:1a:c7:07:87:a1:c9:4c:ea:42:f6:b5:
                    f1:9f:fa:cc:5b:b4:4e:28:c9:66:90:e5:2e:b6:a2:
                    5c:27:90:57:7e:4a:35:1f:a8:e9:f1:29:6a:b8:42:
                    4f:44:19:2c:11:34:f1:37:db:3c:c5:cf:1e:ad:0b:
                    d0:e1:d5:eb:65:09:6b:67:11:cf:94:21:11:33:48:
                    08:49:7a:9c:41:35:a8:97:0c:b2:03:8e:14:aa:32:
                    39:e8:fa:07:1c:8b:94:06:b6:d8:d5:ae:38:21:18:
                    de:93:f0:94:78:c4:d0:21:1d:10:96:48:be:d6:4c:
                    85:81:01:b3:5f:ff:a7:75:bc:ee:e3:2c:9a:a6:e1:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9C:C3:77:33:A7:7E:42:58:58:51:DA:62:89:A7:33:57:86:4E:4D
            X509v3 Authority Key Identifier:
                keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:84:5f:06:c2:b6:fa:c5:13:73:43:79:11:66:75:b6:de:2c:
         f1:33:63:c8:8a:52:57:58:4c:78:c8:75:2c:38:2c:65:30:b9:
         69:31:1a:f5:e5:32:c8:61:6c:ad:57:a6:64:e6:b3:2a:83:ed:
         31:d3:63:ce:1e:49:0a:cf:9d:53:5e:f5:a1:20:c0:7b:61:60:
         41:07:10:84:17:fb:9b:db:94:56:63:19:e5:08:5f:65:89:98:
         a0:5b:0b:d4:07:1a:05:fe:60:95:de:2e:00:9a:54:d6:96:3f:
         dc:fa:7a:71:0e:57:0e:e6:88:ad:da:16:8d:ae:63:bf:41:f7:
         c1:9b:78:c8:a0:af:98:ac:cb:4f:b4:2b:b1:f3:8c:7a:ac:14:
         6f:b9:e5:0f:cb:b3:1d:21:3a:a7:12:a6:e4:03:93:7c:17:f8:
         ac:6f:bf:d3:87:be:00:bf:f4:a1:30:0a:53:d9:cd:70:6c:4d:
         a9:38:93:85:36:3a:55:5b:d0:09:d5:d0:87:de:d8:a6:a7:c0:
         14:c3:27:b7:f6:a9:df:e1:57:c9:91:f3:c2:50:63:d6:fe:5b:
         c4:f7:bd:6f:6d:f5:18:11:9e:fc:51:bc:86:7b:9f:8b:e1:15:
         5e:03:ae:40:32:e1:65:59:af:c0:2e:f9:3b:1a:a7:4e:0e:e4:
         d2:c1:cc:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPb/RJ7CKPcBuGy/nIp+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTEwMGExNDVkY2I3YjM3OTUzNzliYjA5MzhmZTg5YWE4
NjE5MjQwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
Eyg2MDljYzM3NzMzYTc3ZTQyNTg1ODUxZGE2Mjg5YTczMzU3ODY0ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0aom0aBc0tMfEq9I0WydZHc2VfF
om+U7wpWgFsryQAZcV3XmfTavMEzMPeaNtAkdGT56z26Dx8zrl+XXQuUFQ/gJASi
2x4GccA3ByoUFkDi//6grXtBk92DmPyx9NjjqmBg6EIu3gCmlSMRqRyvzUx7u9z/
ZDgkokNCGscHh6HJTOpC9rXxn/rMW7ROKMlmkOUutqJcJ5BXfko1H6jp8SlquEJP
RBksETTxN9s8xc8erQvQ4dXrZQlrZxHPlCERM0gISXqcQTWolwyyA44UqjI56PoH
HIuUBrbY1a44IRjek/CUeMTQIR0Qlki+1kyFgQGzX/+ndbzu4yyapuGMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCcw3czp35CWFhR2mKJpzNXhk5NMB8GA1UdIwQY
MBaAFCqRAKFF3LezeVN5uwk4/omqhhkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzct
NzkyNDZjODk0NTkxLzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzctNzkyNDZjODk0NTkx
LzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4RfBsK2
+sUTc0N5EWZ1tt4s8TNjyIpSV1hMeMh1LDgsZTC5aTEa9eUyyGFsrVemZOazKoPt
MdNjzh5JCs+dU171oSDAe2FgQQcQhBf7m9uUVmMZ5QhfZYmYoFsL1AcaBf5gld4u
AJpU1pY/3Pp6cQ5XDuaIrdoWja5jv0H3wZt4yKCvmKzLT7QrsfOMeqwUb7nlD8uz
HSE6pxKm5AOTfBf4rG+/04e+AL/0oTAKU9nNcGxNqTiThTY6VVvQCdXQh97YpqfA
FMMnt/ap3+FXyZHzwlBj1v5bxPe9b231GBGe/FG8hnufi+EVXgOuQDLhZVmvwC75
OxqnTg7k0sHM/w==
-----END CERTIFICATE-----