Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File:                     KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier:          vI0AtMTuaLAUgmgIICO5gsaE8C/Z+z9bfWdLDV7YmL0=
Subject key identifier:   1D:D2:AC:B7:FD:C4:1F:D8:BE:D0:39:81:EE:97:EF:6C:D5:DA:A1:00
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer:       /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial:       01962E9892D7748C0CAF975E57FDE1022148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number:          0B1E
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 8gsOL2eU8trsvwc78Z2ZBxmIJU8.roa (hash: U9kGrmKtwph96lNZQv3D9nLxVV6hC3SJ4xgIzZS6eNw=)
                          2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: L7Rk+GuomG7Vaa4ojit3K93khsD4jrcQWoOQKTW/Grg=)
                          3: r23XkTQdFdKFayUIhFOF4SL6nWc.roa (hash: Q5cBXjvEd4FzKMPjAAxINMxDmDD6U9ghS7XqogAQVJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:d7:74:8c:0c:af:97:5e:57:fd:e1:02:21:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=1dd2acb7fdc41fd8bed03981ee97ef6cd5daa100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:21:b5:15:69:cc:1e:60:8d:82:a2:26:19:d0:
                    6a:14:14:6b:e7:bd:ad:ea:f2:75:86:59:c6:95:bd:
                    3f:e0:90:9a:4a:dd:e5:4c:45:af:c4:07:36:0a:e4:
                    f9:ec:47:56:d7:1e:e9:52:e1:a4:7d:05:24:43:7a:
                    cc:ea:18:10:ea:55:7a:38:59:08:af:fc:cc:23:15:
                    0b:46:91:69:3d:7c:a6:4a:da:1a:9d:a0:2e:7b:81:
                    fd:42:42:0e:09:47:d9:8b:63:7f:f3:45:cf:4a:ad:
                    1c:1a:f4:3e:a3:58:e0:5f:92:e7:69:4b:06:ae:94:
                    0a:2d:1b:8b:ac:9d:f4:2e:26:85:93:ca:19:6d:60:
                    28:1d:a2:f9:e9:5b:1f:a1:e6:38:d7:30:e2:f6:70:
                    18:c0:07:55:31:6b:6c:4e:f0:fa:a6:8c:d8:a3:18:
                    f8:80:2c:38:29:07:25:d9:1d:34:ce:9f:78:bf:9e:
                    37:04:a6:70:34:32:8d:a1:69:66:12:12:c1:a8:10:
                    32:07:1b:fd:38:f4:1b:9c:64:e5:7d:76:bf:62:a8:
                    ab:2d:90:23:c4:17:45:f5:d4:1f:6a:fa:75:f5:e2:
                    9c:a1:5c:d5:bb:32:14:f6:e6:22:0f:55:ba:74:39:
                    e4:61:63:c9:28:01:3b:6e:4f:b6:d5:ae:ae:50:1c:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:AC:B7:FD:C4:1F:D8:BE:D0:39:81:EE:97:EF:6C:D5:DA:A1:00
            X509v3 Authority Key Identifier:
                keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:3f:58:88:e1:be:33:e0:b8:6c:0e:f4:40:34:43:02:7e:
         4d:96:2c:0e:ec:24:af:07:f6:c5:4f:7e:22:05:f8:7a:fb:d1:
         d8:bf:22:d3:b4:02:12:06:a3:6a:20:5b:03:8c:54:4b:30:56:
         91:39:7d:52:1c:4f:50:80:a9:44:8b:f3:8f:dc:72:c1:47:3d:
         bb:7f:8f:e1:f2:63:0c:8c:99:f6:f2:46:a0:83:c3:01:d7:95:
         d0:94:bd:c1:ab:c5:0c:28:76:c2:5d:84:0d:a5:d2:36:f9:b5:
         ec:8a:40:82:05:2c:97:21:0c:96:83:03:ae:f0:7e:cf:c7:56:
         44:f4:52:d9:46:3b:34:e2:6b:c1:ed:7b:91:f4:0d:20:29:06:
         13:06:23:ec:d4:2d:c6:0d:34:08:f2:20:47:5f:69:7c:6e:0d:
         5d:76:d6:9f:8d:c8:c8:f2:61:93:8d:9a:26:c5:f0:6c:06:09:
         46:12:d4:87:69:ca:c2:c7:83:b9:45:c9:fd:4c:8a:b8:51:29:
         f5:71:fa:89:21:a1:79:42:dc:2d:13:c8:b2:a0:5d:82:62:00:
         be:1c:7c:a7:62:82:1f:6c:f5:a8:ac:af:ef:78:97:81:91:db:
         5a:6d:f7:64:ca:e7:8a:11:13:e6:ef:a7:35:21:7f:30:34:4b:
         61:8e:5b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJLXdIwMr5deV/3hAiFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0
ZDY0YjEwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EygxZGQyYWNiN2ZkYzQxZmQ4YmVkMDM5ODFlZTk3ZWY2Y2Q1ZGFhMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yG1FWnMHmCNgqImGdBqFBRr572t
6vJ1hlnGlb0/4JCaSt3lTEWvxAc2CuT57EdW1x7pUuGkfQUkQ3rM6hgQ6lV6OFkI
r/zMIxULRpFpPXymStoanaAue4H9QkIOCUfZi2N/80XPSq0cGvQ+o1jgX5LnaUsG
rpQKLRuLrJ30LiaFk8oZbWAoHaL56VsfoeY41zDi9nAYwAdVMWtsTvD6pozYoxj4
gCw4KQcl2R00zp94v543BKZwNDKNoWlmEhLBqBAyBxv9OPQbnGTlfXa/YqirLZAj
xBdF9dQfavp19eKcoVzVuzIU9uYiD1W6dDnkYWPJKAE7bk+21a6uUBwPlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3SrLf9xB/YvtA5ge6X72zV2qEAMB8GA1UdIwQY
MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt
NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4
LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdM/WIjh
vjPguGwO9EA0QwJ+TZYsDuwkrwf2xU9+IgX4evvR2L8i07QCEgajaiBbA4xUSzBW
kTl9UhxPUICpRIvzj9xywUc9u3+P4fJjDIyZ9vJGoIPDAdeV0JS9wavFDCh2wl2E
DaXSNvm17IpAggUslyEMloMDrvB+z8dWRPRS2UY7NOJrwe17kfQNICkGEwYj7NQt
xg00CPIgR19pfG4NXXbWn43IyPJhk42aJsXwbAYJRhLUh2nKwseDuUXJ/UyKuFEp
9XH6iSGheULcLRPIsqBdgmIAvhx8p2KCH2z1qKyv73iXgZHbWm33ZMrnihET5u+n
NSF/MDRLYY5b/Q==
-----END CERTIFICATE-----