Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File:                     KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier:          czDTi7v0QShhrLfpTpNJ++GLNmLjF1CMItu4FVxtm8Q=
Subject key identifier:   1D:36:B3:17:72:86:C8:7A:83:A9:A4:88:38:A1:EE:9E:0C:13:E6:93
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer:       /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial:       01962DF3B40BBA4340D2F6C05FA16EDB21A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number:          0DF8
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: xq4VnX5VUQby/1wO6ktFUykCmWgyYv83Acug4Svz6ao=)
                          2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:0b:ba:43:40:d2:f6:c0:5f:a1:6e:db:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=1d36b3177286c87a83a9a48838a1ee9e0c13e693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:af:34:3a:d2:57:56:6f:15:be:c0:9e:e5:
                    c1:1b:94:5b:98:49:f8:b4:68:64:61:de:94:f1:26:
                    b3:d5:8a:97:a5:a3:b5:d7:b0:60:fc:aa:0a:69:79:
                    70:ff:f8:7e:d6:4c:ae:a3:97:1b:38:e6:db:5d:a3:
                    48:2a:7c:27:fd:0f:26:18:46:11:78:56:b5:95:a4:
                    db:02:72:f6:90:21:fa:49:b9:28:c6:ab:5a:7f:06:
                    24:d4:6e:1f:c4:9d:ed:60:fc:e3:78:3d:84:59:c0:
                    d2:82:9e:7c:5e:40:58:3f:1a:e7:e4:4b:d8:58:36:
                    46:d9:35:b5:f7:51:ff:93:d6:ba:e3:53:3f:a6:01:
                    b3:9f:fe:2c:f4:90:c6:9d:02:44:37:37:cd:87:7a:
                    0a:bc:76:5d:31:b7:97:7c:83:0b:0a:4f:f2:aa:e2:
                    ae:31:4b:17:7d:51:d8:41:1e:65:2c:73:3f:04:f6:
                    28:88:59:82:84:53:95:43:2c:a2:f3:b0:82:b2:eb:
                    7e:6e:52:77:1b:b0:5e:06:11:99:d6:8f:cc:5b:89:
                    31:01:08:58:e7:b5:2f:ab:58:a2:4f:08:f4:16:db:
                    e0:5c:94:e3:16:1f:54:75:94:e0:58:4d:a4:03:3c:
                    12:af:dd:ef:36:3b:5a:69:67:df:f4:43:d0:1d:42:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:B3:17:72:86:C8:7A:83:A9:A4:88:38:A1:EE:9E:0C:13:E6:93
            X509v3 Authority Key Identifier:
                keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:6a:b8:af:ad:91:76:f6:a0:87:1e:52:6d:79:95:88:7e:
         e3:54:c1:41:43:84:ac:8a:9e:e4:2b:ae:0b:6a:1a:59:68:75:
         cf:a2:54:a2:85:17:fc:79:f1:1c:a2:29:42:57:ad:08:22:e9:
         49:49:53:5b:6b:a3:4c:8f:41:e9:1d:e1:e4:e7:f3:1a:33:31:
         ef:ec:6f:f3:41:de:d7:3c:17:9d:6c:17:32:33:f0:9a:34:bb:
         e3:8b:11:55:24:fc:ab:97:b8:47:cc:e3:05:aa:58:51:46:75:
         4c:d9:b6:31:c5:cd:b5:79:a0:3b:af:a0:f0:2c:cc:dc:ce:a4:
         23:8e:ea:26:25:0b:45:cc:e4:da:ad:f9:66:94:e3:2b:9b:33:
         81:2c:58:de:74:ea:6e:b2:b9:c8:25:de:25:93:40:23:e4:04:
         9f:29:d3:fe:d3:dc:d4:28:f5:c2:a3:82:2b:01:77:40:b6:9f:
         0e:a4:f0:eb:38:f6:ae:62:87:9a:c2:3c:1f:66:72:f6:31:92:
         20:87:94:b2:70:1f:39:68:e2:e6:96:9b:38:90:17:61:26:9d:
         f7:64:e9:3c:05:00:20:1d:fd:2a:e3:83:e7:c7:35:87:d6:39:
         89:14:8b:12:1b:c6:6c:cf:83:24:bb:a4:35:22:b7:47:1f:6c:
         77:40:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----