Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File:                     KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier:          COZRakEOgeZk2UfNiLuLDqv5YxJUSICAVaExTB+XtE4=
Subject key identifier:   7C:B9:AB:BD:CB:3E:87:F9:D6:24:42:4C:2E:11:CA:C7:B2:19:FD:8C
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer:       /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial:       01962F065C06AA435C45AED93BC2C5F9A9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number:          BC
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: HCnZ4QlNrjo4-1ShjXI6eoqgF7Q.roa (hash: RVcqorqVBH1UK65HrDodp8HEtA0dkfr8CZIvgxvJk/w=)
                          2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: 7kcZDg+XDoFjK7LJGKPTKPFCc4YUg4lFSOLvUtBcHuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5c:06:aa:43:5c:45:ae:d9:3b:c2:c5:f9:a9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=7cb9abbdcb3e87f9d624424c2e11cac7b219fd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:84:17:cb:47:ec:ee:52:88:5a:00:39:ed:
                    5a:3a:08:83:d9:d2:e0:85:82:eb:c0:0a:12:d2:4a:
                    2b:04:57:3f:3b:21:ac:8c:f2:bd:b8:64:bb:3e:cd:
                    56:f8:6a:b1:29:03:9a:a5:bb:82:18:ea:b6:e8:86:
                    62:a9:b8:7b:4c:56:44:80:26:03:88:40:a4:32:7e:
                    48:5b:3b:4e:9c:1a:d1:bf:59:22:83:1f:db:af:6e:
                    b9:2a:a8:00:c9:aa:7d:05:1a:c8:42:ff:c6:9a:a3:
                    4f:79:95:b2:8c:77:c5:51:a8:71:b2:87:85:5b:2f:
                    bd:64:50:3d:4a:89:89:65:d4:8d:92:17:ff:76:2c:
                    75:26:3a:64:4b:4f:b6:88:f0:b9:17:03:5b:68:a4:
                    d2:8f:56:5a:c2:10:f9:ce:15:3b:ac:dc:ab:b5:68:
                    01:0d:d9:36:4e:b4:97:a1:08:da:12:69:55:bd:38:
                    86:2f:94:e5:1f:13:6b:ba:66:0a:22:82:6b:6f:a7:
                    eb:f4:57:0a:2a:90:21:37:9f:c2:fb:31:41:39:08:
                    e1:fe:93:48:89:1c:d5:09:1f:39:46:e5:72:ba:9a:
                    45:f3:cf:c3:30:38:32:5c:20:3b:c5:99:23:97:c0:
                    07:37:d5:fe:4c:fc:b8:9a:d3:34:3e:d3:c1:54:a4:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:AB:BD:CB:3E:87:F9:D6:24:42:4C:2E:11:CA:C7:B2:19:FD:8C
            X509v3 Authority Key Identifier:
                keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:48:f0:8c:7d:7d:7a:ea:ec:27:30:69:f7:03:82:4c:7e:b2:
         b3:df:88:ce:96:65:84:99:f9:d1:68:45:f6:ae:a5:ec:f5:7a:
         1e:e1:a5:f3:3e:10:61:47:08:43:de:e3:46:c9:e5:24:73:7d:
         f2:10:cf:40:7a:c0:cd:00:4b:78:73:c9:cf:ee:b0:6b:10:c2:
         3a:32:14:e6:95:fc:51:37:c7:51:a2:91:db:ed:f0:5b:ce:32:
         69:e5:e1:59:4e:d9:38:39:e9:74:9d:78:77:ea:30:83:b5:e3:
         60:5c:cd:f6:9c:c1:e2:62:a2:86:e4:ae:5e:a3:2e:65:45:43:
         49:a1:8f:d0:4c:f6:a0:15:3c:93:50:56:89:0d:82:ea:35:49:
         19:77:c1:62:f7:96:ae:90:6e:6e:e1:f5:4e:77:ae:66:6e:1b:
         00:a3:46:ae:36:1f:1a:fe:9d:9d:43:8d:e3:ed:83:61:24:5e:
         a9:77:3e:c9:a8:ba:c2:a3:66:d6:3f:dc:38:a2:8c:42:5b:ff:
         b4:d8:d9:c3:cd:f3:5c:d6:89:57:dc:ff:25:47:ed:6c:df:f2:
         d9:fc:78:c2:a9:97:74:a1:ed:19:fa:bd:20:15:b1:19:41:41:
         77:f8:a9:1a:43:dd:59:d5:ac:ca:5c:06:c8:74:c7:b7:e4:9a:
         8d:2a:d0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlwGqkNcRa7ZO8LF+ammMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl
Y2QyMWEwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
Eyg3Y2I5YWJiZGNiM2U4N2Y5ZDYyNDQyNGMyZTExY2FjN2IyMTlmZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7uEF8tH7O5SiFoAOe1aOgiD2dLg
hYLrwAoS0korBFc/OyGsjPK9uGS7Ps1W+GqxKQOapbuCGOq26IZiqbh7TFZEgCYD
iECkMn5IWztOnBrRv1kigx/br265KqgAyap9BRrIQv/GmqNPeZWyjHfFUahxsoeF
Wy+9ZFA9SomJZdSNkhf/dix1JjpkS0+2iPC5FwNbaKTSj1ZawhD5zhU7rNyrtWgB
Ddk2TrSXoQjaEmlVvTiGL5TlHxNrumYKIoJrb6fr9FcKKpAhN5/C+zFBOQjh/pNI
iRzVCR85RuVyuppF88/DMDgyXCA7xZkjl8AHN9X+TPy4mtM0PtPBVKQqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy5q73LPof51iRCTC4RyseyGf2MMB8GA1UdIwQY
MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt
NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4
LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEjwjH19
eursJzBp9wOCTH6ys9+IzpZlhJn50WhF9q6l7PV6HuGl8z4QYUcIQ97jRsnlJHN9
8hDPQHrAzQBLeHPJz+6waxDCOjIU5pX8UTfHUaKR2+3wW84yaeXhWU7ZODnpdJ14
d+owg7XjYFzN9pzB4mKihuSuXqMuZUVDSaGP0Ez2oBU8k1BWiQ2C6jVJGXfBYveW
rpBubuH1TneuZm4bAKNGrjYfGv6dnUON4+2DYSReqXc+yai6wqNm1j/cOKKMQlv/
tNjZw83zXNaJV9z/JUftbN/y2fx4wqmXdKHtGfq9IBWxGUFBd/ipGkPdWdWsylwG
yHTHt+SajSrQUQ==
-----END CERTIFICATE-----