Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File:                     KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier:          xksY14wdOOGViTKH1QdXdhXhOWxvh+P/uLvjF+F5JEc=
Subject key identifier:   9B:9E:80:9C:4F:2D:64:1D:97:7C:3E:A2:4E:59:DE:06:86:C8:04:37
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer:       /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial:       01962FAB5DA34D44DA3515250F6E673CE339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number:          052D
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
                          2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: E2/fcql4/DXJlLPqrQFrNJ9V9CymB6RSR78IEoIPlCg=)
                          3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:a3:4d:44:da:35:15:25:0f:6e:67:3c:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=9b9e809c4f2d641d977c3ea24e59de0686c80437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:b1:e4:9c:59:4d:97:7f:98:3f:b5:d4:1c:
                    a2:b7:ee:2d:87:b7:72:be:e5:7c:f0:30:76:06:61:
                    6b:1f:b8:77:65:f7:a6:1d:f6:46:d8:82:5a:9f:b7:
                    3a:4a:da:67:06:5f:64:11:9a:6c:8a:33:c5:6c:9c:
                    f3:75:46:74:20:ec:3a:71:8d:7c:a5:c7:50:b8:66:
                    68:6a:7a:c8:72:f1:8d:0f:d7:47:21:33:ad:40:dd:
                    90:56:1b:a1:2c:7a:0e:d3:18:c2:3f:6d:6e:43:f1:
                    3d:41:3f:dd:13:15:9a:51:8b:da:cf:c7:38:e5:8b:
                    61:a9:57:25:ce:83:73:63:1f:2c:26:5b:4a:f1:35:
                    d4:34:9d:52:c5:bd:a0:bb:85:ec:81:cd:48:23:e8:
                    df:a1:d4:be:ed:ac:12:18:05:33:b4:9c:1e:76:da:
                    6d:28:86:3e:35:dc:d9:58:7b:b8:5d:da:5c:dc:93:
                    01:eb:94:57:f2:40:da:1b:9a:e9:7b:e5:00:a8:76:
                    04:42:5f:3d:ab:a5:71:ee:15:8d:a5:4d:41:0c:5e:
                    ff:8d:c7:21:9b:62:d4:70:f6:84:3e:08:ce:c6:eb:
                    53:00:5e:c1:6c:bd:99:b0:c1:32:5d:70:4d:67:17:
                    43:a7:96:c3:30:4d:d5:75:ab:46:7f:da:bc:12:59:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9E:80:9C:4F:2D:64:1D:97:7C:3E:A2:4E:59:DE:06:86:C8:04:37
            X509v3 Authority Key Identifier:
                keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:19:2c:33:ea:17:90:54:fb:56:00:7f:af:6e:76:4d:2a:17:
         af:f6:54:7e:8b:fb:97:86:b0:97:85:5f:10:d5:a1:76:49:d5:
         fd:63:af:a9:a0:cd:9c:07:11:ad:fa:38:f4:1e:31:d7:eb:f4:
         d3:6b:e8:52:76:72:f8:6c:fa:87:98:06:a7:86:88:05:ae:62:
         a2:d8:7a:34:07:b1:68:3c:21:4e:e3:4d:be:fc:a2:63:b7:e4:
         34:30:5b:54:b1:0e:c2:50:70:45:c4:53:e2:c7:d0:77:29:f5:
         89:a6:6c:5e:55:98:e1:1c:62:d6:e3:81:7c:3a:95:33:1a:0c:
         0d:f4:09:e7:d8:e1:89:98:99:80:72:4e:f0:df:39:62:6c:12:
         1a:42:c1:7f:71:62:2b:79:36:69:3c:e7:26:92:dc:24:e3:01:
         52:98:79:49:4b:d0:17:58:7e:35:14:44:fb:0a:94:0f:bc:80:
         3e:09:30:36:27:d3:bb:c2:6e:03:33:4e:0e:91:a4:bd:ef:fe:
         11:28:2b:0c:40:6e:2b:17:73:f3:68:2f:55:65:1a:f1:bd:43:
         9e:be:a8:1a:1a:69:78:9a:1d:85:5b:66:f6:3c:cf:cb:44:b9:
         1b:1e:2f:a2:2d:3d:a1:93:b5:4a:b0:ff:4d:98:5c:84:d1:e1:
         0e:7c:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----