Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File:                     KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier:          0e/IIr93qlyXEKUYY/UaUhosziK+ekVv7mKwAECoReM=
Subject key identifier:   75:44:5B:CB:88:75:8D:6C:78:CA:8E:AF:67:37:DA:02:EE:95:48:A2
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer:       /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial:       01962E99BEF0F50ACCA75B9EE4B213668827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: 7sRG4JVUbvbzv9chPKnNhnUOj5opedtLcfOe6Ch4g+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:f0:f5:0a:cc:a7:5b:9e:e4:b2:13:66:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=75445bcb88758d6c78ca8eaf6737da02ee9548a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:98:62:10:16:70:13:e7:06:73:a1:eb:80:
                    87:81:89:0b:36:d1:41:1c:d6:09:b6:a6:7a:6f:72:
                    d4:71:d4:47:45:5a:d9:9c:71:9f:ca:dc:e4:49:d8:
                    5b:51:4e:5f:f9:8e:ec:f8:7f:9a:f9:71:bd:64:d7:
                    05:ae:3f:b8:fc:2d:13:25:ce:36:78:65:2a:b5:6a:
                    bc:65:13:ae:c2:41:fb:b1:df:19:63:f4:d9:70:22:
                    bd:7c:23:6d:e4:f8:8e:3b:6a:0c:e5:1f:47:65:af:
                    a0:18:8a:30:95:f9:1c:71:3c:95:f5:06:53:5d:9d:
                    e1:86:6f:4b:b2:f6:41:68:ef:9a:3f:15:1e:32:a6:
                    b9:31:55:54:79:09:9a:a5:4a:bd:b3:f2:33:ce:8a:
                    6b:0a:1d:e9:05:25:96:c7:cf:74:cb:d6:17:29:e7:
                    7d:61:59:e2:ed:3d:21:3e:16:6f:1d:e7:24:4f:d7:
                    c4:6b:d3:07:70:7e:4a:07:6d:c2:09:13:59:3c:1e:
                    9b:70:cd:03:62:20:8e:08:df:47:32:78:be:ef:73:
                    ba:85:68:e0:d2:81:f1:a1:38:5b:f3:0e:e9:3e:6d:
                    b2:3e:25:45:f9:8e:52:ef:30:ea:aa:1c:ac:62:e9:
                    c5:62:c2:d7:4a:6d:85:ef:c4:61:63:27:97:1a:5d:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:5B:CB:88:75:8D:6C:78:CA:8E:AF:67:37:DA:02:EE:95:48:A2
            X509v3 Authority Key Identifier:
                keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:89:1e:e3:40:42:09:ad:79:ca:b0:52:13:c1:c4:d8:7d:
         6d:dc:b3:38:76:fa:2f:6c:8a:fd:7d:24:d4:ee:ce:af:49:8d:
         7e:5e:dd:e3:9e:cb:0e:34:03:0b:8e:3e:23:59:73:dd:73:13:
         4a:df:56:34:bb:92:e6:f7:76:93:e8:25:3a:5c:74:23:0c:c7:
         a4:6f:17:32:53:99:d8:b7:1e:4d:6f:c8:1c:cd:f9:34:bb:78:
         73:3d:7b:33:40:14:ad:c9:62:71:f6:4f:f3:51:0a:7d:30:c1:
         6b:ba:21:eb:00:0f:ed:6e:69:7f:a3:f9:ce:4e:73:b9:44:52:
         06:43:6b:d8:fc:17:d4:bc:df:eb:7c:2b:de:0b:43:5c:4b:02:
         61:54:fc:a7:fd:49:c9:d5:6c:c6:68:5a:18:1a:ad:b1:06:b3:
         2f:e6:33:8d:3a:49:bf:8b:2f:87:b1:ed:bc:98:e8:cf:1b:e7:
         50:46:aa:5f:c2:74:ec:a9:2c:d6:2c:21:f6:e3:d6:21:39:d2:
         9e:0c:b6:81:c5:dd:ba:1d:98:d1:cb:ea:80:9d:82:9c:aa:34:
         f6:4b:a8:84:f5:f3:31:88:54:a1:11:f2:50:11:f5:04:d5:34:
         58:24:0a:c3:2d:dd:0e:56:80:5b:68:ed:d9:5b:74:ca:19:56:
         1e:d6:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----