Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File:                     KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier:          AvNjCmEeQrVwWUULZVxXhZTfd+j+rXtfEfKgZSipj98=
Subject key identifier:   FB:1D:B1:80:E8:54:FC:76:86:1E:46:DB:39:B8:AE:FB:42:1F:16:23
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer:       /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial:       01962ECF5C7EECABD8AAEBAB040B68363F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:03 +0000
Files and hashes:         1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: yhg2yYD1MNgcacNK8vP7IHvzVw9AFH7qHutaGeZr0m0=)
                          2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5c:7e:ec:ab:d8:aa:eb:ab:04:0b:68:36:3f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
        Validity
            Not Before: Apr 13 11:01:03 2025 GMT
            Not After : Apr 14 11:01:03 2025 GMT
        Subject: CN=fb1db180e854fc76861e46db39b8aefb421f1623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:02:82:fb:54:15:c7:2f:18:c3:fe:41:4c:
                    58:84:ae:77:fb:ee:bd:f4:15:eb:49:c1:2a:d2:a4:
                    49:32:58:e7:fe:37:3d:ae:08:4d:cc:1e:c4:ce:cb:
                    02:47:cd:46:83:a5:72:33:28:ec:c2:4a:0a:24:8f:
                    b7:30:21:52:cd:c2:42:b6:26:a0:d3:d8:33:6d:cf:
                    26:ea:b9:3f:c5:b0:c1:58:42:fc:18:da:3d:96:fd:
                    67:02:81:7b:d0:1c:05:8e:b7:93:18:4e:62:99:4a:
                    39:02:86:7a:21:5d:d3:e0:c2:d0:36:d4:13:18:5f:
                    ed:56:08:ff:44:2d:83:9c:1e:21:b0:19:38:88:6b:
                    5c:bc:3d:61:a4:f5:9e:ed:cc:1c:d5:07:4f:90:55:
                    f3:6c:5f:56:08:d1:19:9e:a2:d6:c7:5f:d4:9f:a0:
                    b8:8b:d8:51:95:65:c2:83:ee:cd:c8:79:7d:d5:cd:
                    20:d0:5e:ac:e2:64:28:7e:1e:e7:8d:2d:4d:44:00:
                    11:13:b6:f1:67:df:94:12:a4:ff:f1:86:89:88:0e:
                    03:2c:1d:c0:4d:4d:e4:82:c2:5e:13:d2:f4:15:c5:
                    e2:55:5f:74:41:a6:bc:e4:c2:ab:5b:1b:cf:06:71:
                    cf:b5:e5:19:48:14:90:ea:26:90:20:ce:7c:d2:a7:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1D:B1:80:E8:54:FC:76:86:1E:46:DB:39:B8:AE:FB:42:1F:16:23
            X509v3 Authority Key Identifier:
                keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ff:d1:98:21:f8:0e:75:b6:70:45:07:df:c7:e8:34:ee:37:
         1a:24:53:e3:1a:34:56:59:cd:4e:87:86:a2:4e:34:5f:e8:69:
         c6:2f:57:1b:6c:f2:2c:21:3a:d4:92:85:bf:90:2a:40:93:07:
         7f:7a:5d:45:56:fd:2d:95:e6:60:25:c1:06:76:b1:da:f3:84:
         9b:8b:cf:a5:3c:95:72:f4:8e:bf:2b:42:10:f0:5f:d4:db:72:
         06:92:5c:fa:00:79:bb:70:e5:3d:c1:ad:6c:1f:d1:02:06:78:
         83:02:05:f3:75:ff:2f:2a:f9:e1:bc:b1:19:38:b3:b1:79:bc:
         1e:d2:8d:26:0f:ac:68:e5:2c:51:96:f4:88:f1:79:57:ad:6e:
         93:e5:b8:7c:5c:fe:1e:e4:86:c2:c5:e2:7a:ea:f0:e9:5a:fa:
         1a:5e:28:a1:3d:99:1c:e9:9b:09:a8:e5:53:e9:01:ce:01:b1:
         ed:c4:13:bb:3e:67:c7:6c:ca:ac:bc:ae:1d:4c:a0:fa:ed:26:
         9e:c6:8b:22:e3:65:79:e8:19:c2:f8:ec:f8:5c:2c:3f:d7:e0:
         4c:44:22:bc:51:d1:9b:de:93:d3:ab:c4:83:38:f5:2e:84:7b:
         32:95:cd:c5:48:99:47:bb:cf:94:f1:b1:a9:22:6a:34:5f:46:
         a0:90:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----