Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File:                     KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier:          MkMpNG3aqB01JpZBDMLhO1spUlVJ11dboVMsYJLeoVM=
Subject key identifier:   DD:6C:AD:F0:6A:25:AA:E0:07:DC:8D:0F:37:FC:F9:12:26:A3:86:CE
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer:       /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial:       01962F0731323B18E3C6C21D6AC6468FEAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number:          0E2C
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: pnfy8pCmV5B09J0Ft/kzUef75sWg2YKzCNcPcTVgqPA=)
                          2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:32:3b:18:e3:c6:c2:1d:6a:c6:46:8f:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=dd6cadf06a25aae007dc8d0f37fcf91226a386ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:b8:d5:2d:6b:09:54:fd:9f:45:dc:2e:29:
                    71:25:ce:f3:c4:9b:4c:f1:c1:92:bd:39:69:6c:2f:
                    e4:98:3f:f6:d1:c1:bc:39:4c:c0:9d:f3:ab:a1:51:
                    7f:2f:8d:57:89:80:f5:f5:db:65:55:64:87:df:1c:
                    3f:f6:b3:9f:d9:a9:8d:07:69:16:a9:bd:16:c0:7d:
                    da:6c:86:37:dc:8d:31:7b:c5:71:aa:02:42:ca:3b:
                    30:5d:79:60:7f:78:9d:ad:a8:97:05:3f:18:cd:49:
                    cf:2a:19:00:a1:c5:b9:fe:59:e2:91:fb:df:99:dc:
                    14:de:01:1f:05:c8:5b:26:2b:38:82:27:ca:0a:53:
                    52:b9:7b:c6:0a:e9:26:0e:89:0d:87:eb:6d:56:08:
                    dd:7c:55:82:d7:33:fa:6c:ac:71:d0:aa:2c:bb:fd:
                    8b:66:79:e8:25:72:a0:7b:da:5c:31:3f:c1:44:7f:
                    7b:02:9e:cb:ae:f2:b1:ae:ee:7a:57:7a:ff:3d:da:
                    98:06:4b:81:46:5c:78:b4:b3:67:f0:a9:a2:4d:a2:
                    c5:07:09:7d:bb:8a:a5:94:93:88:48:e0:55:cb:52:
                    23:26:0e:8f:68:a0:bb:b5:a2:2f:88:ed:6f:9f:39:
                    65:d0:c8:ac:3c:0b:cb:16:dc:12:a5:0f:e1:2e:3c:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:AD:F0:6A:25:AA:E0:07:DC:8D:0F:37:FC:F9:12:26:A3:86:CE
            X509v3 Authority Key Identifier:
                keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3f:c0:92:84:3f:1c:5b:09:bf:6f:43:4f:42:23:04:ef:ab:
         a8:6b:45:80:3f:61:08:9d:c9:1e:4d:42:81:ad:68:32:e7:24:
         1d:41:37:c9:cd:f3:26:ca:84:b3:51:66:06:b4:19:e0:c5:94:
         1c:80:f0:26:4b:fa:b6:08:e1:ef:ef:0f:5e:63:2b:e5:be:2b:
         ee:72:9c:da:d8:36:c7:95:14:d5:0f:ec:02:d1:7c:4c:19:d9:
         72:22:2c:ec:02:22:8e:99:d6:1d:0e:a3:db:b7:1b:24:c6:7f:
         11:39:f6:7d:7f:28:d0:fe:ce:38:3e:10:0d:1d:eb:33:55:2a:
         9a:f0:d1:f2:db:a3:bd:2b:32:08:e2:67:37:a3:50:68:75:aa:
         aa:ab:6d:b9:60:26:45:f0:84:4f:29:ad:91:7b:89:bf:d5:fb:
         92:76:87:60:3c:0f:54:2e:3d:6a:b4:cc:e3:f1:6b:51:f0:d3:
         bc:b6:b1:0c:0f:d3:74:d3:b1:a6:85:3c:55:bb:37:52:8d:2c:
         8e:c0:04:d5:5f:e0:7d:ac:8a:4f:61:40:cf:3c:b1:3d:f6:0f:
         67:bf:35:f9:90:83:40:94:70:30:ac:2e:f9:68:a6:63:1c:cf:
         cf:30:67:6f:62:0a:80:22:ce:9b:60:78:46:dc:89:42:18:7a:
         e2:79:23:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----