Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File:                     kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier:          BpBNslaPRwhvPQnnscC8U5Qom9bsFyi0nwDrKzP64BQ=
Subject key identifier:   86:D6:BD:54:DE:75:EF:4F:E0:F2:DA:85:BB:4A:19:1D:87:D8:18:FE
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer:       /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial:       01962E987D838DACA8397438936FCA2B3005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number:          1359
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
                          2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
                          3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: jicdOJF+kZI1SaSTYG44vcUiN5wCypXhcS3pkSuyeCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7d:83:8d:ac:a8:39:74:38:93:6f:ca:2b:30:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=86d6bd54de75ef4fe0f2da85bb4a191d87d818fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:44:1f:e9:2d:f3:45:03:ff:49:cb:e7:ed:
                    27:d0:ed:08:cb:60:6a:ba:67:73:33:93:d8:54:0e:
                    91:d3:11:24:fa:f1:ef:b4:61:45:3e:3f:af:9f:0e:
                    96:74:17:d3:ec:9c:f2:ab:48:9d:72:ae:5c:ec:af:
                    8e:ec:6c:af:bb:4c:a7:5b:53:92:53:f2:34:14:dd:
                    38:13:4b:24:d4:b6:31:d4:b6:56:89:17:64:6b:fe:
                    be:4e:c8:aa:17:97:a6:f7:5e:ab:c4:9e:0f:0b:61:
                    7e:43:86:d7:6a:f4:3b:b0:b5:80:64:f7:f9:e9:45:
                    e3:05:28:65:7d:8c:4f:56:fc:05:48:66:8b:c0:22:
                    0a:60:3e:3a:dd:55:a2:a8:5a:8c:8c:f6:12:49:c2:
                    cb:0a:9f:80:2a:02:96:1f:e1:36:6c:b9:5a:6a:7b:
                    10:90:22:f2:56:42:1e:66:35:d0:52:45:ad:c5:44:
                    65:3c:41:3a:3f:41:84:58:50:19:ac:15:0c:55:3b:
                    d0:39:00:91:fa:7d:4a:d8:71:f2:f6:9c:d0:9f:5f:
                    dd:ba:e7:07:b3:35:4e:67:2b:e9:46:2b:05:8b:5d:
                    a8:9f:7f:57:b6:5d:79:0e:b2:b6:b5:e4:27:36:33:
                    79:37:79:e2:ce:09:d1:db:8e:90:59:a3:61:59:25:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:BD:54:DE:75:EF:4F:E0:F2:DA:85:BB:4A:19:1D:87:D8:18:FE
            X509v3 Authority Key Identifier:
                keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:d9:05:c4:f3:8f:72:37:97:37:70:5f:38:a6:d6:01:65:
         ea:7f:79:a7:95:55:07:66:6d:d9:a8:a0:36:f9:13:b3:8f:09:
         8d:17:78:bc:66:4b:f4:dc:8a:9f:76:48:2c:a8:ba:91:e8:72:
         2d:f5:62:1d:90:2a:8a:be:7f:f9:e0:6b:1b:61:fa:31:79:ee:
         c0:52:a3:3f:1e:b5:07:5e:e7:ea:54:7d:d2:48:94:c3:49:07:
         8d:aa:66:47:ed:0a:68:0d:7a:a7:ba:4a:9a:82:ea:c8:06:bd:
         0c:34:15:5b:ec:89:d5:98:88:8c:38:3a:45:93:2f:db:27:a3:
         bf:bd:87:ae:ef:6e:e7:18:cd:76:09:d6:2f:58:0a:5d:af:53:
         a1:9f:c1:eb:62:ad:a3:d9:7a:e0:81:1f:a0:34:8c:04:e7:6a:
         6a:ae:d0:d1:46:10:d1:30:81:75:6c:c4:80:da:76:88:f4:a0:
         bc:f5:97:f4:d4:fe:49:1b:bb:be:f9:93:42:6e:11:f5:e3:24:
         4c:d9:a8:72:64:c3:86:cb:f1:c7:91:76:a5:42:29:33:e5:d0:
         f3:4f:03:af:56:20:30:6c:a3:e6:35:b0:24:10:af:29:d3:a6:
         f9:99:d1:ff:8b:d4:7a:3f:7a:0f:68:aa:02:d9:d1:b1:8d:dc:
         af:59:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----