Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File:                     kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier:          UeYNXzFFRNYh/Yyby4biVgZTdF/2bSH6pMGm6ZQ3z8s=
Subject key identifier:   A9:CA:5A:DE:78:2C:22:54:DF:3A:87:DF:C0:8F:B7:33:53:69:44:99
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer:       /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial:       01962F74CBCB71913CDB31F5159295B1F20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
                          2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: hRqy6JZehdkG3GxiNVR9u8Oj6Am6pZma2AZGKhBRnec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:cb:71:91:3c:db:31:f5:15:92:95:b1:f2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=a9ca5ade782c2254df3a87dfc08fb73353694499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:f1:8c:b5:fc:85:25:97:70:e7:59:48:ef:
                    5c:3f:7e:8e:ab:f0:ae:d0:d8:55:e3:e3:a5:62:1d:
                    09:34:51:0e:13:21:cc:98:d6:4b:44:ff:bf:fc:28:
                    78:c1:12:97:ab:f2:b7:30:9e:a2:5d:87:0e:ec:71:
                    9a:f5:f5:bb:35:0c:ba:5d:be:ed:1e:e1:9c:76:a7:
                    07:b6:92:30:f3:56:32:b0:c1:bd:7b:bb:6f:0b:ce:
                    44:c5:41:ce:4d:29:0c:c8:6c:73:bf:c6:c9:e9:32:
                    17:bc:32:a0:4e:36:dd:de:3a:ac:4e:cd:b5:dd:3e:
                    03:9e:3d:4c:2b:4f:70:45:37:95:24:85:92:4e:25:
                    91:73:b5:91:d4:a2:67:b9:59:66:38:4b:93:15:e9:
                    f1:82:79:cb:9c:de:64:39:df:5e:ac:ff:c3:c7:89:
                    92:33:ab:6e:11:ff:1c:78:dd:9b:37:23:09:ab:8d:
                    74:2e:61:ff:93:da:e5:ca:9a:47:50:89:4a:83:db:
                    7a:9d:02:a2:b5:b6:21:1f:ef:d1:ab:35:78:67:66:
                    56:06:73:d5:06:fa:53:81:f4:c7:23:f9:71:0e:43:
                    3f:b5:e7:ee:9e:66:7c:c6:9f:78:7a:57:87:a6:0a:
                    8d:7f:d7:f9:d6:3d:7b:44:6b:c9:79:cc:a4:e2:57:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:5A:DE:78:2C:22:54:DF:3A:87:DF:C0:8F:B7:33:53:69:44:99
            X509v3 Authority Key Identifier:
                keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:4a:40:d8:ae:3f:f6:59:55:00:38:22:c3:84:02:41:9b:
         98:63:ef:3b:7f:37:7c:f9:cf:ae:23:78:57:68:3a:4e:fb:bc:
         3e:dd:08:27:c8:b5:e0:27:4d:91:f4:98:04:10:50:af:2a:ab:
         74:88:49:be:b1:f9:e7:8a:17:ce:c9:ce:3a:00:c7:d6:85:ad:
         d9:61:9d:ec:a2:19:24:09:10:09:cc:db:48:08:69:f9:e4:f8:
         d3:2a:05:93:6f:3e:0a:ef:80:46:03:c7:d8:7b:5f:54:09:bb:
         63:41:21:3d:43:34:c3:48:ec:0a:ad:40:53:df:bd:44:14:a4:
         8a:84:f4:4f:eb:5b:68:c5:fb:a7:ba:f5:6c:bb:c9:39:fa:9b:
         97:6a:fa:89:7d:0a:9a:35:f4:d5:46:21:02:a6:cf:09:3f:40:
         97:99:a4:7e:b3:48:e4:33:33:0a:aa:ba:ab:6c:5a:71:36:f8:
         c8:e8:0d:b3:f3:ed:78:60:ff:16:98:9b:0c:c2:ad:49:56:f8:
         81:f9:e1:95:d8:26:72:f3:ab:de:83:d1:9b:38:2c:c1:8c:2c:
         43:76:7b:a1:0d:18:23:b1:c0:ec:ad:8b:65:a9:e7:d1:ce:58:
         b6:d4:0e:31:87:ad:ae:5b:f3:31:b2:b5:ad:f9:c7:b0:a7:db:
         2c:b2:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----