Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File:                     KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier:          5XNSjDzFhaOem9m4P6r5wyF+dfZ9my7/uPNg+GWlUcI=
Subject key identifier:   48:FD:6E:4B:7F:B1:61:72:41:AD:27:91:55:31:BD:41:6B:15:C5:13
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer:       /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial:       0195E00FC2AEED8F674413523F800DFF0206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number:          07F9
Signing time:             Sat 29 Mar 2025 04:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:24 +0000
Files and hashes:         1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: gkOFbO80f/yzXJ1MRmM7wvMnH04KMjX3Qlw1hdW/+Ok=)
                          2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c2:ae:ed:8f:67:44:13:52:3f:80:0d:ff:02:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
        Validity
            Not Before: Mar 29 04:01:24 2025 GMT
            Not After : Mar 30 04:01:24 2025 GMT
        Subject: CN=48fd6e4b7fb1617241ad27915531bd416b15c513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:cc:0f:e4:54:52:30:a6:9a:2b:83:8a:35:
                    8f:4f:c4:92:02:e0:98:22:a0:19:67:cd:a9:39:3a:
                    7b:e3:43:f3:e9:63:ee:44:ad:fb:75:5e:6a:fa:58:
                    28:b1:8a:d0:23:0d:dc:b6:57:98:56:2b:08:8e:4b:
                    d1:35:24:43:4e:ce:a9:7c:e0:77:e2:e4:fa:b4:9e:
                    89:62:a4:74:3c:63:b8:bb:37:25:39:3b:8b:0b:30:
                    0a:c4:69:f1:7e:93:1a:1a:06:f0:b6:25:2a:98:45:
                    a9:cc:e1:5a:78:fd:99:62:5f:42:b4:55:bc:7c:e0:
                    b4:66:90:13:08:1e:01:29:95:3c:05:4b:d1:42:6d:
                    15:20:fa:ac:8c:e9:47:36:25:6a:9b:0b:14:8b:90:
                    5b:a1:1d:25:42:d5:b5:61:92:4e:5a:85:9b:f1:c6:
                    25:81:10:0d:44:46:bc:a1:8e:ac:1b:3e:9c:0e:17:
                    81:cd:9f:3f:83:ff:64:3e:38:84:0f:e0:10:cd:a6:
                    c9:e9:83:69:2f:9f:ff:f8:8e:a7:52:d5:c2:b3:de:
                    c7:d4:61:b2:15:a5:4e:dc:67:26:31:b7:ba:87:6c:
                    02:77:56:2a:fc:39:57:ab:97:dd:19:b2:06:d3:d4:
                    b1:e9:ff:6c:b7:35:81:96:2b:17:13:ac:fb:18:af:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:6E:4B:7F:B1:61:72:41:AD:27:91:55:31:BD:41:6B:15:C5:13
            X509v3 Authority Key Identifier:
                keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:2d:2c:0a:76:27:81:1d:9f:f4:53:4c:ae:e6:03:e2:19:
         58:fe:a7:29:fd:ee:89:82:e2:2f:a8:1c:02:5b:53:6d:2e:c1:
         ea:4a:b8:3d:80:2a:12:79:a9:d3:25:c6:de:f4:f4:1b:24:c8:
         d6:95:ae:11:71:0e:68:68:dd:a7:36:9e:bf:47:3a:a4:bb:af:
         13:24:17:a1:4e:db:9c:b6:bd:61:1a:57:d2:29:a3:76:7d:52:
         b2:ef:5c:77:21:6c:6c:d1:9b:ef:5a:c6:9b:69:81:fb:d5:c7:
         c2:48:57:35:a4:e5:4f:17:cd:b7:33:ab:91:f7:ad:85:c5:0f:
         8a:b0:87:3e:29:f8:95:9a:5a:f5:90:89:2f:bd:4a:90:30:83:
         95:c2:30:31:88:ea:17:05:c2:97:ab:c1:b0:b9:1d:f3:1e:2c:
         f0:4d:a6:c1:27:7f:a3:a0:7f:fe:b8:11:21:ba:c2:0c:32:c0:
         15:be:76:25:4a:91:bf:3c:10:f3:b0:61:17:3d:8d:c2:64:0d:
         0a:28:73:2a:91:66:cf:88:13:2c:89:ba:ee:33:6c:1e:5b:5c:
         27:41:fa:23:72:a5:ed:ab:d4:0f:db:60:6b:32:6d:42:7e:ca:
         f7:a5:11:7c:30:ac:83:ee:23:70:6b:af:03:39:e4:82:c2:5a:
         dd:30:e3:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD8Ku7Y9nRBNSP4AN/wIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmFjMTg1YjgzZjZkZTM5YWJhZGNmZjNkZmU0ODczZDg4
M2M0ODgwHhcNMjUwMzI5MDQwMTI0WhcNMjUwMzMwMDQwMTI0WjAzMTEwLwYDVQQD
Eyg0OGZkNmU0YjdmYjE2MTcyNDFhZDI3OTE1NTMxYmQ0MTZiMTVjNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywfMD+RUUjCmmiuDijWPT8SSAuCY
IqAZZ82pOTp740Pz6WPuRK37dV5q+lgosYrQIw3ctleYVisIjkvRNSRDTs6pfOB3
4uT6tJ6JYqR0PGO4uzclOTuLCzAKxGnxfpMaGgbwtiUqmEWpzOFaeP2ZYl9CtFW8
fOC0ZpATCB4BKZU8BUvRQm0VIPqsjOlHNiVqmwsUi5BboR0lQtW1YZJOWoWb8cYl
gRANREa8oY6sGz6cDheBzZ8/g/9kPjiED+AQzabJ6YNpL5//+I6nUtXCs97H1GGy
FaVO3GcmMbe6h2wCd1Yq/DlXq5fdGbIG09Sx6f9stzWBlisXE6z7GK/YswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEj9bkt/sWFyQa0nkVUxvUFrFcUTMB8GA1UdIwQY
MBaAFCi6wYW4P23jmrrc/z3+SHPYg8SIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWIt
ZjNiMTZlZDZjMDYxLzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mYjk0NjEtMmRiNy00MDllLWFiZWItZjNiMTZlZDZjMDYx
LzEvS0xyQmhiZ19iZU9hdXR6X1BmNUljOWlEeElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvEtLAp2
J4Edn/RTTK7mA+IZWP6nKf3uiYLiL6gcAltTbS7B6kq4PYAqEnmp0yXG3vT0GyTI
1pWuEXEOaGjdpzaev0c6pLuvEyQXoU7bnLa9YRpX0imjdn1Ssu9cdyFsbNGb71rG
m2mB+9XHwkhXNaTlTxfNtzOrkfethcUPirCHPin4lZpa9ZCJL71KkDCDlcIwMYjq
FwXCl6vBsLkd8x4s8E2mwSd/o6B//rgRIbrCDDLAFb52JUqRvzwQ87BhFz2NwmQN
CihzKpFmz4gTLIm67jNsHltcJ0H6I3Kl7avUD9tgazJtQn7K96URfDCsg+4jcGuv
AznkgsJa3TDjag==
-----END CERTIFICATE-----