Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File:                     U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier:          Vh9eI5euyZfRnQkoBqMXAiedEftGATwob9ie6JmwFNo=
Subject key identifier:   0D:AF:44:EA:A4:D5:F8:14:66:F0:73:14:E0:E3:1D:7B:9E:DF:51:69
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer:       /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial:       01962FAB713093C8834301334F75C3B1A30A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
                          2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: bfkzQfvM0sC4cYpcfdOGHi+0o9+6iRcORF9P6gF9WOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:71:30:93:c8:83:43:01:33:4f:75:c3:b1:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=0daf44eaa4d5f81466f07314e0e31d7b9edf5169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:b8:6b:d1:0a:1f:a9:5d:65:17:69:74:78:
                    4a:4e:40:79:94:fe:c3:f2:40:b8:45:bd:5e:f5:59:
                    01:94:bb:ae:0a:9b:74:10:85:80:b7:a8:09:26:cf:
                    fd:f4:4f:87:15:10:3a:41:a4:15:06:de:07:a4:67:
                    b4:4a:d4:88:6d:9d:52:ef:58:5f:e1:b5:53:12:b4:
                    6a:32:ea:d3:6e:6c:6b:ee:61:4c:f2:ff:85:47:52:
                    af:14:60:02:a9:ce:e7:af:37:3a:e4:b6:e7:86:93:
                    b9:eb:c7:4d:4a:0c:26:4e:df:98:bb:95:65:23:ec:
                    0e:2d:f6:9b:21:aa:a7:72:e9:43:fe:e6:75:25:f9:
                    91:30:91:61:e4:45:8b:2f:10:12:ef:ae:64:ba:a8:
                    9f:91:5b:9b:38:bc:0f:3f:d3:37:e4:d6:71:1b:26:
                    ff:3b:40:1d:99:22:37:77:5c:07:52:0f:1e:06:e2:
                    d1:20:3a:6c:56:4e:ea:1a:6d:f1:02:39:35:1a:27:
                    0f:07:65:9e:bc:70:28:5a:bd:d0:81:d3:78:d3:ca:
                    c1:15:30:bb:26:16:b3:de:25:0c:a4:0f:dd:d6:f8:
                    3d:26:11:94:a2:5c:9c:26:da:2f:d7:3c:67:78:d0:
                    44:e2:4e:1d:07:ef:50:44:ab:1e:da:75:9a:79:56:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:44:EA:A4:D5:F8:14:66:F0:73:14:E0:E3:1D:7B:9E:DF:51:69
            X509v3 Authority Key Identifier:
                keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:c9:3d:d9:ac:91:a4:54:07:70:5a:15:86:2e:ba:f2:d1:
         1b:f9:7a:20:6a:4d:b8:8a:0e:76:b3:c1:bc:61:4c:79:9e:1e:
         10:54:2a:fb:00:55:fe:2b:0b:5d:b6:0a:2a:88:cd:d4:3b:bb:
         d7:db:73:5d:e1:79:39:24:4d:e0:3c:49:32:48:29:c9:13:1d:
         8c:32:59:5a:20:08:a2:56:83:3f:f5:ff:0f:45:5d:3b:b2:76:
         f5:61:b1:15:7e:ac:2b:ae:59:3c:49:78:05:a0:71:a6:15:24:
         dc:e2:86:5c:2a:cd:79:02:4f:40:a1:ee:31:6f:90:eb:90:b6:
         f6:0a:90:94:76:fa:4b:bf:11:0a:04:33:79:81:2c:79:e3:3e:
         a4:aa:a1:64:0c:b4:f6:65:24:78:12:9b:9a:54:97:73:2d:7e:
         b9:f6:40:e0:f0:eb:ef:14:bb:96:a0:55:e1:5c:37:f2:a2:30:
         50:ac:2e:2b:aa:da:30:d2:e1:bf:0d:26:9c:03:af:b9:4e:69:
         41:32:f3:1d:cd:9e:16:9c:88:74:ee:f7:4d:b7:10:0a:8b:a1:
         32:c8:ab:96:38:d9:92:c6:93:1b:eb:bb:8e:35:0a:b8:b5:7d:
         73:d8:52:16:cd:76:e1:bc:5e:02:a9:78:bc:7c:dd:72:73:a4:
         82:0b:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----