Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File:                     KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier:          GunranVAYrPqUEBrZLZ9aQifWZ4KHJ80uHOLa/egWmI=
Subject key identifier:   B7:8E:97:18:B7:F1:EF:54:66:57:8D:D0:92:D9:44:31:0B:BA:25:D9
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer:       /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial:       01962E2B0A0D6E8995B3849CF23705045169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
                          2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: x5GfzqKbFTMulYPbkiW0nN9nxlt3LtFaogWsrcfcqzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:0d:6e:89:95:b3:84:9c:f2:37:05:04:51:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=b78e9718b7f1ef5466578dd092d944310bba25d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:25:bb:eb:e9:de:b6:6f:2e:15:02:62:37:
                    0b:be:fa:e4:6a:49:11:16:98:7c:47:f1:a2:02:48:
                    97:07:9c:ea:d6:2c:38:99:cf:8b:20:d3:a0:45:0a:
                    54:8f:10:52:9f:e1:a7:2d:a2:87:97:9d:6f:db:c3:
                    63:5c:35:60:66:59:5c:84:d6:8f:f7:78:74:b5:36:
                    bb:6e:ed:54:95:ee:16:a5:bd:fb:de:f1:75:a2:fa:
                    3a:3c:fc:75:30:e6:80:c4:8e:73:2d:86:22:77:56:
                    64:bb:99:03:bb:f0:ee:6f:e0:79:00:c0:aa:02:91:
                    5f:80:75:3b:02:41:f0:0f:e7:71:0f:34:d7:74:a4:
                    64:a5:e9:79:cd:28:91:15:13:4b:49:c0:fd:58:07:
                    6f:0e:fd:6e:a2:f6:5d:c8:0a:66:7a:9f:92:46:21:
                    54:15:ca:bd:81:3c:6e:50:c9:20:80:42:d7:89:eb:
                    e6:d5:52:eb:cc:d2:c0:f4:f6:33:10:e0:ba:86:d6:
                    40:35:09:ad:05:3e:49:56:31:69:67:57:df:08:78:
                    a4:e7:54:ad:99:bf:56:ea:6e:d5:cd:e6:ce:a5:67:
                    8b:c2:f8:0d:71:27:46:59:56:2a:ee:b4:26:98:47:
                    84:77:eb:2e:06:16:36:da:9b:02:49:dc:7e:ab:ee:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:97:18:B7:F1:EF:54:66:57:8D:D0:92:D9:44:31:0B:BA:25:D9
            X509v3 Authority Key Identifier:
                keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:4f:f3:13:36:1e:f7:f0:40:7d:85:ad:41:71:36:4a:d2:
         c0:f0:cd:0a:52:5f:00:9f:b9:c6:95:9c:f1:9c:f4:5c:76:7d:
         88:0f:7c:79:c1:a9:8d:02:0d:f7:f9:f7:ff:60:fa:a0:db:43:
         4c:e4:65:09:95:5c:f3:30:e2:94:68:1e:ec:cf:b7:3a:1b:bf:
         84:6d:e1:e2:8c:42:de:72:94:cb:d3:32:6b:dc:c6:b5:52:4d:
         1d:17:cd:b2:48:97:17:85:72:c4:2d:e0:a7:8f:b8:af:05:b8:
         37:5c:8a:dd:9e:2b:ba:b9:61:e9:9a:08:3f:3d:d2:72:33:99:
         65:35:9e:25:d9:be:dd:58:e2:91:06:1f:8d:1a:73:aa:2e:a6:
         7a:b9:1e:57:ed:3d:80:a1:a6:92:d6:25:e4:93:41:0b:f2:73:
         37:5c:9a:8b:ca:d2:b3:cc:13:1b:ed:eb:e4:d0:94:35:d9:0a:
         bf:42:e7:ac:f1:da:0f:29:d8:3c:29:19:71:f8:75:96:d0:7f:
         d9:77:37:53:98:f6:c2:d0:43:74:24:06:fe:15:51:22:47:7d:
         3e:55:fc:f3:42:fb:77:a6:7e:41:e4:fd:ed:ab:81:9d:8f:b6:
         4b:7a:9a:f5:e3:ee:52:1b:01:68:e5:5d:3d:f1:ec:cb:05:e5:
         50:5f:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----