Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File:                     kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier:          0pWkTdpAMEQwuO231hpuHrg119FyFIylgkiuFUVrRIE=
Subject key identifier:   0C:95:2A:02:41:ED:4C:A9:96:29:1C:2A:F7:ED:4A:BE:20:55:E8:9D
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer:       /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial:       01962E999C42D724BF1E85EB3C73440DDC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
                          2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: Fimf5ezHMVxkZYfPozXHz3cx3PDpGgnXkU2wP+09ZNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9c:42:d7:24:bf:1e:85:eb:3c:73:44:0d:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=0c952a0241ed4ca996291c2af7ed4abe2055e89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:d8:f7:9b:46:13:47:2c:e1:36:77:88:c0:
                    92:35:07:0f:0c:1d:25:e6:a1:b1:13:ab:4b:af:a5:
                    19:14:2d:1c:cb:f5:cf:60:64:e2:c4:f1:bb:ae:c1:
                    7e:13:9f:cc:ed:d6:0c:bb:32:7d:2d:1c:2d:bb:b6:
                    27:a2:a7:50:f6:f9:43:b7:50:e1:06:7f:51:ba:84:
                    35:41:33:a0:3c:00:c2:2c:16:cd:d7:af:fd:bc:bb:
                    3d:c7:8c:75:7f:6c:ee:f7:48:30:6e:2f:5d:24:bb:
                    55:48:fe:26:51:89:12:77:38:e6:c9:9a:41:c4:35:
                    c1:f7:3f:bd:74:c9:ab:27:18:f1:01:ce:ef:18:a3:
                    59:db:c9:37:81:42:f3:fb:5b:7a:0f:30:ac:c4:29:
                    2e:e7:b9:ce:66:e7:cf:e5:fe:fe:8d:f4:37:75:9c:
                    45:ea:21:03:be:96:1b:1e:15:46:e2:a6:d7:f0:21:
                    9f:00:12:42:6d:77:db:f5:4b:09:52:32:a5:98:c3:
                    4a:78:14:fb:e4:5c:d9:b1:ad:46:c3:17:7f:55:f0:
                    e0:90:7b:1e:cb:07:e5:7f:02:a5:64:b5:cd:54:41:
                    78:e1:76:93:df:d3:40:16:99:7c:9c:34:a4:d9:31:
                    2c:d4:17:81:03:fe:97:eb:52:59:89:94:2b:10:29:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:2A:02:41:ED:4C:A9:96:29:1C:2A:F7:ED:4A:BE:20:55:E8:9D
            X509v3 Authority Key Identifier:
                keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:80:57:3c:c1:e7:f4:90:71:19:95:73:da:e4:ba:7c:69:8a:
         9c:d7:16:97:cd:45:7e:8f:71:25:13:1f:7b:e4:56:83:73:b8:
         e6:a8:56:c9:0e:c6:e1:86:0d:2a:b5:cf:6b:ba:99:e5:9b:3f:
         f3:bf:a8:c9:ed:fc:66:dd:b1:87:7c:56:3a:62:20:b2:89:48:
         b7:3d:76:82:57:b3:0b:fb:76:94:e1:53:2f:2c:65:d8:fe:c1:
         58:63:06:72:3e:11:87:60:d1:39:6e:2a:7a:f3:1a:07:70:54:
         78:61:b5:5f:e8:e0:68:44:76:ad:94:46:e3:a5:d2:5a:32:2b:
         3a:6c:f4:9c:ce:d9:31:23:a0:ca:81:e6:51:da:e5:ae:8c:f0:
         22:6d:ab:48:ee:e9:5f:97:0a:25:9e:17:4a:32:2a:5f:b7:43:
         1e:ec:d7:8b:2e:b8:90:31:91:db:cc:e8:6b:72:11:82:4c:d1:
         c1:b3:de:47:a8:59:2b:47:99:6e:fa:e6:c2:e9:68:d6:75:1b:
         6a:e5:01:48:94:22:b1:6b:4a:75:7a:d9:5f:66:ef:1b:f6:05:
         e6:0a:05:b8:7b:f8:dc:93:b5:06:dc:34:cb:66:21:29:5d:30:
         de:f1:61:e2:1a:71:3e:92:a9:cc:95:ec:4a:e3:ab:82:66:39:
         35:3e:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----