Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File:                     K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier:          LB7nmOV2MqLAkbOMpiKbOLpplyw4VJpVO1/0tzyfvZs=
Subject key identifier:   ED:A5:CE:2C:C6:72:E7:50:30:4F:AE:7E:E7:12:51:B1:23:9F:E0:1B
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer:       /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial:       01962F06AF460BB95F17272250C225C0C46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number:          04FB
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: 4F3ZRA04F7MXKgaVzTATeqV4/sZMWWYS0FAjsojpLoo=)
                          2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:46:0b:b9:5f:17:27:22:50:c2:25:c0:c4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=eda5ce2cc672e750304fae7ee71251b1239fe01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:74:32:54:00:b7:a3:7e:b2:2b:49:8d:b7:
                    b8:ed:af:95:8d:06:86:87:da:43:4f:0e:30:2c:97:
                    ff:7b:28:1b:60:df:4c:24:24:63:f0:13:98:3a:1a:
                    8e:5d:0b:c9:6c:57:7a:b1:7a:0f:47:32:bd:c6:90:
                    ed:92:83:cb:5b:a6:e6:4a:2e:f8:5a:25:fb:0b:3a:
                    87:ee:11:72:43:da:88:47:d0:f9:85:3f:61:82:91:
                    3b:48:21:94:3b:54:05:58:97:d7:b6:dc:29:f6:da:
                    71:4f:39:f2:76:cd:ea:06:ea:0b:fc:14:25:98:5d:
                    aa:86:7a:9d:fb:d8:1c:e3:b4:e7:63:88:a4:e7:85:
                    93:6a:7f:5a:44:a5:28:47:09:ba:7f:ea:09:38:14:
                    72:65:a7:c9:81:3d:45:7d:a8:59:a8:9b:ff:83:24:
                    df:ed:57:f3:0b:f1:d3:49:51:5e:eb:9d:08:5c:b6:
                    34:a1:90:ea:fd:e7:b0:38:ca:a5:e9:fb:a8:f8:fa:
                    49:0f:c6:8d:e0:7e:ec:94:2d:4c:32:67:de:7d:bb:
                    0f:1d:89:b4:4f:96:d4:14:75:5c:9d:51:c8:e3:89:
                    fe:06:da:66:b1:3a:c7:c4:96:fd:65:ce:38:6d:59:
                    d9:79:fb:b2:cf:2e:7b:6e:6b:ac:6f:29:e7:0b:6d:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:CE:2C:C6:72:E7:50:30:4F:AE:7E:E7:12:51:B1:23:9F:E0:1B
            X509v3 Authority Key Identifier:
                keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:83:13:b5:69:bc:de:b4:35:21:75:09:d8:e7:f0:30:e3:
         6a:82:4e:cf:9c:d0:03:0c:df:30:de:35:0e:4a:90:93:18:d9:
         32:7a:36:0f:21:d7:e5:9f:92:4b:95:80:a5:7e:4d:16:2e:36:
         f9:a1:f1:37:dd:84:e3:61:4c:25:45:6a:2c:92:d3:23:1c:36:
         8a:6f:51:9d:e5:17:98:ca:3b:ee:fc:c7:b8:48:63:b4:b1:4e:
         32:4a:2c:fd:47:ed:da:9a:18:48:19:67:ed:2b:e8:d6:bf:3c:
         35:0a:22:51:32:10:bb:94:ce:45:21:1e:41:70:11:37:6c:77:
         19:00:8c:23:40:74:b0:52:63:46:9e:a2:26:01:f1:d9:15:cd:
         32:f6:34:ea:1b:cb:fd:71:1c:83:78:10:87:53:c1:8d:ca:7d:
         87:13:85:36:cb:ff:3f:fd:69:18:5c:6a:09:d7:08:34:e5:46:
         6b:51:6f:84:c5:b4:df:f3:62:db:ac:2b:8c:4c:21:71:b7:6d:
         4c:28:42:13:2e:f5:08:6c:b2:b8:9c:aa:90:06:c3:5a:40:dc:
         84:7c:2f:8b:30:c8:24:f8:91:b6:b4:62:74:b1:08:b3:9c:83:
         e6:47:58:8f:d8:65:bb:4d:2f:6f:5e:a7:b1:3e:c5:c6:0b:f6:
         e8:fe:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----