Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
File:                     KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft (raw, json)
Hash identifier:          1QD6TlREaEz9cO6Rt1go/AT1AqBj2lHymExO4I0dUbQ=
Subject key identifier:   53:7C:C9:B7:3C:A7:E7:9B:57:65:05:14:A0:46:F3:FC:1C:10:CA:65
Authority key identifier: 29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46
Certificate issuer:       /CN=29774467cc9f1ed9d957b83aa17a090b1df76946
Certificate serial:       01962E61BF5FC5FB845B3EA5E2B37194BD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft
Manifest number:          0D86
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl (hash: OXssqnGTYcgm85yDyRQAA2ZEAdvPc1cJWh+38YBH6s4=)
                          2: b64Uii9JYXCMSIcDqVfd-guKolk.roa (hash: zu1QMl+md4/UwiMRhp2koQ5VJ3r3EhScu5BVA2+NzSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bf:5f:c5:fb:84:5b:3e:a5:e2:b3:71:94:bd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29774467cc9f1ed9d957b83aa17a090b1df76946
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=537cc9b73ca7e79b57650514a046f3fc1c10ca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:86:0e:1b:cd:74:25:bf:a2:2c:02:33:24:
                    14:29:f9:b5:81:5b:3d:a4:fc:d4:e4:f6:a9:c8:2a:
                    ea:8e:c5:41:8c:88:f2:d8:29:7a:ad:da:93:e4:5d:
                    d7:3f:c7:8a:b2:e0:88:a2:73:c3:70:a7:df:57:1d:
                    9c:21:c1:fa:ea:5e:af:b4:61:af:2e:85:52:6b:23:
                    2a:e7:92:d8:33:23:49:93:dd:cb:86:8a:94:ac:b7:
                    53:d1:92:36:cf:18:a4:cf:ed:4c:b9:f7:f7:e3:2a:
                    6c:4d:3e:1d:aa:36:35:3b:9d:a8:93:18:0f:b8:c8:
                    03:bc:54:cd:be:b4:ad:ca:91:5f:6a:d4:4d:28:3d:
                    76:ee:f3:a5:31:3b:a5:f5:00:78:bd:5f:e5:57:a5:
                    58:6e:bb:2d:f0:aa:f7:59:a8:ef:dc:a2:2a:e1:66:
                    13:ad:eb:11:7a:bb:80:3f:f5:e1:4e:08:29:b0:05:
                    e8:49:3d:8a:08:14:15:76:1b:d0:9a:81:55:b0:43:
                    38:54:81:ba:cc:58:bd:87:c4:23:62:22:5f:4d:42:
                    a4:52:fa:aa:7f:78:c6:9a:15:6d:bb:34:aa:f2:3b:
                    9a:9e:54:3d:b4:f5:e3:89:a9:57:7b:19:fd:68:4f:
                    59:4a:fc:cd:d1:cd:a8:3a:7a:db:8d:bc:93:0c:7d:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:C9:B7:3C:A7:E7:9B:57:65:05:14:A0:46:F3:FC:1C:10:CA:65
            X509v3 Authority Key Identifier:
                keyid:29:77:44:67:CC:9F:1E:D9:D9:57:B8:3A:A1:7A:09:0B:1D:F7:69:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXdEZ8yfHtnZV7g6oXoJCx33aUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9dc08c-e1b6-4259-a5db-d55e38868a52/1/KXdEZ8yfHtnZV7g6oXoJCx33aUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:52:41:54:cd:13:a6:f8:a2:06:5c:e6:30:e9:d8:b4:84:
         bb:50:7f:40:e8:ed:12:81:ed:40:1f:bd:52:2a:6e:bd:26:fe:
         e8:80:71:ff:09:a0:69:b4:3b:72:fe:7a:41:ae:d2:87:1b:73:
         57:ee:19:76:86:4f:1e:9b:66:8c:6d:7e:e5:49:0f:0a:fa:6f:
         52:2c:4c:aa:74:bc:2f:1f:36:c0:13:6b:1b:dc:ee:0d:2b:54:
         f2:fd:d2:8f:d5:34:26:fd:06:52:18:cd:ac:6a:14:6f:2e:cf:
         3d:35:75:1c:76:92:3c:7f:79:ad:2c:70:14:de:bc:6e:e6:42:
         43:51:85:32:8c:27:75:8b:37:29:a5:1c:87:fc:e1:5f:c8:41:
         4a:bc:25:10:0a:3a:5c:61:21:5a:8c:c9:fc:0c:dc:42:09:16:
         db:47:3e:b1:ae:fa:b3:81:90:58:ed:12:a6:fc:41:b3:b5:2b:
         20:33:e6:06:fb:46:17:22:40:53:eb:3d:55:56:e6:dc:2a:2f:
         27:13:b8:e6:e4:89:81:54:34:31:93:b9:65:00:9e:b0:1b:52:
         20:ae:cd:30:9b:ef:d9:d4:31:c7:8c:82:65:53:c3:8d:ce:68:
         32:e2:a7:7b:3d:72:5a:7e:c2:b9:62:48:d8:55:4e:bf:51:34:
         97:6b:aa:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb9fxfuEWz6l4rNxlL0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Nzc0NDY3Y2M5ZjFlZDlkOTU3YjgzYWExN2EwOTBiMWRm
NzY5NDYwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
Eyg1MzdjYzliNzNjYTdlNzliNTc2NTA1MTRhMDQ2ZjNmYzFjMTBjYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDeGDhvNdCW/oiwCMyQUKfm1gVs9
pPzU5PapyCrqjsVBjIjy2Cl6rdqT5F3XP8eKsuCIonPDcKffVx2cIcH66l6vtGGv
LoVSayMq55LYMyNJk93LhoqUrLdT0ZI2zxikz+1Muff34ypsTT4dqjY1O52okxgP
uMgDvFTNvrStypFfatRNKD127vOlMTul9QB4vV/lV6VYbrst8Kr3Wajv3KIq4WYT
resReruAP/XhTggpsAXoST2KCBQVdhvQmoFVsEM4VIG6zFi9h8QjYiJfTUKkUvqq
f3jGmhVtuzSq8juanlQ9tPXjialXexn9aE9ZSvzN0c2oOnrbjbyTDH2pFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN8ybc8p+ebV2UFFKBG8/wcEMplMB8GA1UdIwQY
MBaAFCl3RGfMnx7Z2Ve4OqF6CQsd92lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGIt
ZDU1ZTM4ODY4YTUyLzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85ZGMwOGMtZTFiNi00MjU5LWE1ZGItZDU1ZTM4ODY4YTUy
LzEvS1hkRVo4eWZIdG5aVjdnNm9Yb0pDeDMzYVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHstSQVTN
E6b4ogZc5jDp2LSEu1B/QOjtEoHtQB+9UipuvSb+6IBx/wmgabQ7cv56Qa7Shxtz
V+4ZdoZPHptmjG1+5UkPCvpvUixMqnS8Lx82wBNrG9zuDStU8v3Sj9U0Jv0GUhjN
rGoUby7PPTV1HHaSPH95rSxwFN68buZCQ1GFMowndYs3KaUch/zhX8hBSrwlEAo6
XGEhWozJ/AzcQgkW20c+sa76s4GQWO0SpvxBs7UrIDPmBvtGFyJAU+s9VVbm3Cov
JxO45uSJgVQ0MZO5ZQCesBtSIK7NMJvv2dQxx4yCZVPDjc5oMuKnez1yWn7CuWJI
2FVOv1E0l2uqaw==
-----END CERTIFICATE-----