Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File:                     KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier:          z7zqPJGyASnSeOkMnFSdLLtRg2xBIsRBWA6YRR2Nzso=
Subject key identifier:   CA:00:D1:80:E3:02:46:24:03:B2:11:12:35:F6:6B:0F:9D:EA:82:21
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer:       /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial:       01962E2AF2F66B562B1AC2761D89114D3AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number:          04DC
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
                          2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: k+bN3eV6Twf0l8ctbEVfce9N8kLjCN6xnBEUF4yrFCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:f6:6b:56:2b:1a:c2:76:1d:89:11:4d:3a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=ca00d180e302462403b2111235f66b0f9dea8221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:b7:33:9b:b0:dc:2f:c7:cb:81:79:0b:ff:
                    a1:37:80:04:50:d4:c6:4c:be:8b:b9:00:07:61:98:
                    f8:84:58:b3:83:5a:24:6a:48:2f:a3:a8:a8:5b:e6:
                    6c:5d:1a:3a:3b:62:7e:e6:a2:f8:8a:04:2e:75:42:
                    17:5a:a8:cb:08:88:72:88:c3:22:79:63:0e:e9:4b:
                    c3:fc:4c:9b:53:d2:13:3e:60:05:f7:8c:68:08:38:
                    5d:3c:b2:c9:73:10:22:71:cf:cf:64:aa:22:56:89:
                    95:b7:69:42:6a:cf:04:f8:03:7a:5a:ac:a3:3d:93:
                    90:5e:f8:5a:97:84:12:0f:9e:67:24:e2:d7:f1:e6:
                    2c:96:b8:40:e0:e7:7a:f4:04:e8:8a:34:7e:04:f1:
                    27:55:2b:e0:74:15:38:00:5b:5c:91:d6:54:a1:5e:
                    cd:84:38:72:ce:46:c0:d4:cb:f7:bb:f1:f1:61:d7:
                    0d:b8:ef:35:96:da:98:1c:af:83:9f:8e:27:d2:80:
                    ac:73:f6:25:70:90:6d:c9:e1:4b:c1:fb:e3:cd:67:
                    b0:79:4e:e1:4d:e9:55:f2:b1:60:50:72:cb:02:80:
                    9f:eb:2c:95:31:c7:0d:c2:76:4a:1b:92:54:52:49:
                    14:33:83:ba:88:f6:ca:7d:b8:91:32:ae:cc:f9:e1:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:00:D1:80:E3:02:46:24:03:B2:11:12:35:F6:6B:0F:9D:EA:82:21
            X509v3 Authority Key Identifier:
                keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:45:db:54:50:b8:52:ed:e2:d9:a5:af:5c:e7:0a:6f:57:
         3a:57:4f:6a:7e:a6:b4:d4:ef:f9:cf:d6:eb:11:84:f9:57:b4:
         c7:5f:f4:b4:0a:01:01:07:e8:29:aa:50:70:d1:4f:74:1e:00:
         67:af:30:93:97:34:01:36:c3:89:b3:d3:80:49:e1:fa:a8:88:
         e0:12:b2:ad:66:6a:2c:82:aa:5c:3f:3c:3b:14:2f:5d:d6:8b:
         f2:47:88:4e:58:55:4c:23:ec:b9:36:e0:75:64:00:20:cd:cb:
         a1:da:8e:cc:64:2b:75:19:5a:0e:53:91:43:6c:23:8a:6d:e3:
         0f:f1:35:df:20:8d:e9:d7:50:68:d8:97:2e:5f:de:96:36:75:
         3c:48:a4:6c:1d:69:5a:c8:ae:b9:fe:97:96:ed:64:a2:91:56:
         08:10:8f:8f:3b:e5:fa:f8:4c:f7:20:3a:30:22:52:ef:70:bc:
         ba:5d:93:aa:7f:77:89:97:74:a6:ab:78:11:9d:5a:c8:c1:80:
         33:a4:02:53:35:09:24:45:85:58:9d:03:a5:20:c2:eb:ae:79:
         c1:ea:af:32:60:8b:68:14:6a:f3:86:c9:59:9c:33:7c:b7:b2:
         c2:78:0c:6f:c2:26:b5:36:a1:f8:be:da:97:97:8a:80:5e:8f:
         f8:40:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----