Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File:                     kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier:          k8eTfjnSawNnJd1VOP5DXMrWIZZxoiwLfIWX7U3KZ5I=
Subject key identifier:   22:74:94:A6:00:E0:A5:FB:CB:AC:32:CE:14:F2:C9:DB:2D:43:96:18
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer:       /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial:       01962F06586C6158C76D6CADCB96862DFAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: E21BD9T6fVrxXfcVC8S15NBH6uqmftZ+T4Cu8TwGIoQ=)
                          2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:6c:61:58:c7:6d:6c:ad:cb:96:86:2d:fa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92479cae284765d628044119009880d28a7560b1
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=227494a600e0a5fbcbac32ce14f2c9db2d439618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:3a:89:41:f5:f0:c2:81:ff:66:c5:f3:01:
                    05:f3:2a:59:17:fa:76:09:97:dd:07:45:a1:e4:66:
                    69:07:91:14:8d:56:7e:be:0d:5e:0a:c7:9a:b6:2d:
                    b2:f9:1e:70:3b:c4:2e:79:47:f5:88:31:e3:de:cc:
                    99:a4:3b:1f:70:43:0d:13:1a:a9:06:5a:65:64:f0:
                    23:87:ad:dd:bc:39:15:96:79:b4:91:42:35:49:70:
                    2c:66:ce:b9:ef:4c:c3:fc:b2:4c:07:27:82:34:06:
                    f1:bd:04:b8:fd:2b:48:ce:05:e4:e8:4c:c2:b3:2b:
                    d3:3f:76:59:77:5f:02:04:4e:b6:55:09:5e:69:46:
                    ab:93:04:3f:87:24:44:b8:a1:eb:2c:1d:f4:fd:6d:
                    76:b4:4f:ce:87:d7:98:2a:8a:23:35:ec:33:3a:a4:
                    a4:b6:e9:5a:bd:d1:6c:0e:74:b3:b9:7b:67:10:46:
                    c9:b0:cb:9a:d8:91:e6:ea:09:99:c5:4e:d6:8e:80:
                    af:b4:a0:c5:d6:d7:e8:ee:47:a2:4b:8b:66:91:21:
                    89:46:50:f2:e3:d9:e6:9c:3f:b8:65:6c:96:4f:4c:
                    b3:78:7d:25:dc:00:d7:b5:95:47:4f:84:2d:3a:56:
                    c3:ea:69:d8:aa:22:6c:fd:08:85:aa:a0:b3:0f:40:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:94:A6:00:E0:A5:FB:CB:AC:32:CE:14:F2:C9:DB:2D:43:96:18
            X509v3 Authority Key Identifier:
                keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:da:64:0b:ee:4a:4a:b5:25:9e:87:f0:3d:82:22:f0:30:
         53:cc:a3:18:3c:1e:a1:24:6f:0e:aa:08:43:25:18:09:08:f3:
         f4:a9:db:53:be:e6:e8:d2:f0:1f:7b:1c:28:8c:bd:b4:ba:b2:
         2c:98:6d:4e:f9:f5:b0:6c:5c:8f:28:b8:75:16:39:0f:a9:4e:
         65:24:14:37:28:59:41:78:63:49:9f:f9:2a:91:81:31:ad:79:
         b0:d8:8f:bf:c8:f0:49:d2:fc:c7:10:d6:24:fa:5e:a5:81:7e:
         3e:56:6a:c9:9b:1e:8e:79:5e:7a:b7:68:bf:5d:01:56:d9:8b:
         f7:6b:b5:eb:fd:e1:4e:fa:51:0d:d5:02:55:0b:92:93:41:bc:
         19:f0:f7:c1:db:d6:02:6d:33:80:a6:98:de:f8:82:c0:8d:b7:
         99:22:7d:26:4b:0a:62:b4:d0:b7:44:bf:fb:1a:fa:f0:3f:73:
         ea:42:ce:89:26:4c:3f:ab:eb:d3:32:5a:b4:94:6b:0f:a1:14:
         66:d0:94:25:89:9a:fe:70:e4:85:f0:83:56:63:47:ef:df:2a:
         f6:8c:b1:0b:a1:94:c4:01:c7:a4:f2:f6:46:ef:a1:9f:61:17:
         79:03:0f:fe:5d:67:28:f9:df:25:d9:4a:88:ff:88:ee:64:92:
         cd:06:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----