Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/KqHGzNCF7hD6v5keJisLlDL2pvk.mft
File:                     KqHGzNCF7hD6v5keJisLlDL2pvk.mft (raw, json)
Hash identifier:          vVu1i63qzJvOZ2VfxDIuwkcyZUWAzTxmAPacxzJxN+8=
Subject key identifier:   BF:FC:8A:61:7A:76:0E:3A:F8:C4:17:FA:E6:B8:8A:97:BA:16:67:27
Authority key identifier: 2A:A1:C6:CC:D0:85:EE:10:FA:BF:99:1E:26:2B:0B:94:32:F6:A6:F9
Certificate issuer:       /CN=2aa1c6ccd085ee10fabf991e262b0b9432f6a6f9
Certificate serial:       019292A1442834C814893B0AEC5E9EA899C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqHGzNCF7hD6v5keJisLlDL2pvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/KqHGzNCF7hD6v5keJisLlDL2pvk.mft
Manifest number:          130D
Signing time:             Wed 16 Oct 2024 00:01:34 +0000
Manifest this update:     Wed 16 Oct 2024 00:01:34 +0000
Manifest next update:     Thu 17 Oct 2024 00:01:34 +0000
Files and hashes:         1: KqHGzNCF7hD6v5keJisLlDL2pvk.crl (hash: 8tJG3uuGJdj5ODTh7K3+1B4ncL4iW+DI2XHDjpyDAxw=)
                          2: yaej5_9hGeYiiAxpKHSoVJjkBO0.roa (hash: eDz2VY+ncQm8VP19EPNgrOlLvcm26cuNcWkJXb0Tg4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:92:a1:44:28:34:c8:14:89:3b:0a:ec:5e:9e:a8:99:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa1c6ccd085ee10fabf991e262b0b9432f6a6f9
        Validity
            Not Before: Oct 16 00:01:34 2024 GMT
            Not After : Oct 17 00:01:34 2024 GMT
        Subject: CN=bffc8a617a760e3af8c417fae6b88a97ba166727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:8d:b4:1e:e8:c1:9f:0f:c2:2e:fd:ea:7c:
                    95:f6:f3:bf:5c:5f:d5:65:ca:d0:59:0c:70:72:82:
                    65:86:a7:08:40:a9:5b:01:15:ee:6d:ac:e2:03:f2:
                    ba:de:bc:01:74:25:82:7a:c3:19:57:16:12:e1:d5:
                    ee:07:c7:16:a4:38:84:96:40:e2:78:6a:26:4f:c4:
                    49:a3:e4:4e:8e:a3:3d:a1:74:72:6f:2c:cc:84:16:
                    ef:61:7b:0b:a8:06:c0:40:35:45:cb:ce:18:57:56:
                    e2:02:ca:6a:62:0d:2f:23:3e:12:52:68:e5:dc:18:
                    92:35:e1:97:0c:10:77:7b:36:7b:36:08:76:69:c5:
                    43:ba:03:12:ba:88:a8:73:ee:32:17:20:65:11:ae:
                    89:82:9f:9a:62:8d:be:2b:99:66:8d:4a:fb:66:a5:
                    86:ad:6d:63:63:60:02:4c:fd:40:73:2f:a3:25:4e:
                    2f:7f:32:86:3c:7d:08:eb:62:97:6a:8e:ba:c6:49:
                    4f:63:5a:f9:c8:31:39:f6:5a:49:f4:58:3a:57:96:
                    08:64:6b:9c:e8:77:7f:03:5c:19:bb:7c:d2:19:46:
                    18:8a:1b:07:19:05:8f:b8:21:6d:2a:ca:07:24:26:
                    1c:81:33:75:90:42:a4:b5:5f:94:05:9e:ec:1b:8c:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:8A:61:7A:76:0E:3A:F8:C4:17:FA:E6:B8:8A:97:BA:16:67:27
            X509v3 Authority Key Identifier:
                keyid:2A:A1:C6:CC:D0:85:EE:10:FA:BF:99:1E:26:2B:0B:94:32:F6:A6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqHGzNCF7hD6v5keJisLlDL2pvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/KqHGzNCF7hD6v5keJisLlDL2pvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/beba9b-b316-4cde-b17e-1f9ad861d074/1/KqHGzNCF7hD6v5keJisLlDL2pvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:06:ea:28:9a:7b:02:f2:d8:0c:64:ff:d9:72:78:6d:9b:
         1b:86:96:e9:6d:0b:c6:5d:ae:92:8b:08:66:15:6a:e3:77:e3:
         56:39:7e:11:2f:27:e8:cf:fd:d0:a8:b2:35:2e:c9:1b:0f:ba:
         ad:e2:80:e0:d9:e2:54:0d:bf:d0:0c:80:b1:f5:99:8e:bd:a1:
         54:99:15:8d:22:e8:60:a4:a0:a3:96:e3:8e:2c:06:00:2f:e0:
         19:88:86:81:ce:4c:c3:ca:dd:a0:bf:15:4c:35:46:8d:8c:16:
         6e:6c:fe:f1:d7:25:67:af:02:7f:17:79:7e:36:1b:01:b0:98:
         5c:88:28:35:19:e5:6d:ff:69:88:f6:57:9a:e1:be:55:e3:f4:
         bf:4b:1a:e5:f3:c9:08:c1:ef:1f:ec:d9:ac:cd:ef:3d:b2:50:
         b5:17:55:b8:1d:26:78:f1:48:dd:1e:ae:82:ee:c3:d6:d2:16:
         0f:18:e7:57:cc:e5:ff:bf:23:ac:ac:ee:a4:ed:1e:fd:87:2b:
         c9:0b:9c:99:a9:55:d8:58:c2:bf:96:64:01:11:67:75:df:f6:
         24:82:90:22:25:27:aa:e9:e4:85:af:91:92:d0:ba:a4:a6:fd:
         5d:eb:e6:47:20:55:3f:82:8d:6f:88:e3:3b:ae:41:77:cd:a4:
         ad:7a:5b:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKSoUQoNMgUiTsK7F6eqJnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTFjNmNjZDA4NWVlMTBmYWJmOTkxZTI2MmIwYjk0MzJm
NmE2ZjkwHhcNMjQxMDE2MDAwMTM0WhcNMjQxMDE3MDAwMTM0WjAzMTEwLwYDVQQD
EyhiZmZjOGE2MTdhNzYwZTNhZjhjNDE3ZmFlNmI4OGE5N2JhMTY2NzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L6NtB7owZ8Pwi796nyV9vO/XF/V
ZcrQWQxwcoJlhqcIQKlbARXubaziA/K63rwBdCWCesMZVxYS4dXuB8cWpDiElkDi
eGomT8RJo+ROjqM9oXRybyzMhBbvYXsLqAbAQDVFy84YV1biAspqYg0vIz4SUmjl
3BiSNeGXDBB3ezZ7Ngh2acVDugMSuoioc+4yFyBlEa6Jgp+aYo2+K5lmjUr7ZqWG
rW1jY2ACTP1Acy+jJU4vfzKGPH0I62KXao66xklPY1r5yDE59lpJ9Fg6V5YIZGuc
6Hd/A1wZu3zSGUYYihsHGQWPuCFtKsoHJCYcgTN1kEKktV+UBZ7sG4wprwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/8imF6dg46+MQX+ua4ipe6FmcnMB8GA1UdIwQY
MBaAFCqhxszQhe4Q+r+ZHiYrC5Qy9qb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FIR3pOQ0Y3aEQ2djVrZUppc0xsREwycHZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iZWJhOWItYjMxNi00Y2RlLWIxN2Ut
MWY5YWQ4NjFkMDc0LzEvS3FIR3pOQ0Y3aEQ2djVrZUppc0xsREwycHZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iZWJhOWItYjMxNi00Y2RlLWIxN2UtMWY5YWQ4NjFkMDc0
LzEvS3FIR3pOQ0Y3aEQ2djVrZUppc0xsREwycHZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbkG6iia
ewLy2Axk/9lyeG2bG4aW6W0Lxl2ukosIZhVq43fjVjl+ES8n6M/90KiyNS7JGw+6
reKA4NniVA2/0AyAsfWZjr2hVJkVjSLoYKSgo5bjjiwGAC/gGYiGgc5Mw8rdoL8V
TDVGjYwWbmz+8dclZ68Cfxd5fjYbAbCYXIgoNRnlbf9piPZXmuG+VeP0v0sa5fPJ
CMHvH+zZrM3vPbJQtRdVuB0mePFI3R6ugu7D1tIWDxjnV8zl/78jrKzupO0e/Ycr
yQucmalV2FjCv5ZkARFndd/2JIKQIiUnqunkha+RktC6pKb9XevmRyBVP4KNb4jj
O65Bd82krXpbtQ==
-----END CERTIFICATE-----