Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File:                     KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier:          gu7dycbpbQr4QeDmwnEO5BjMqXansvv3JR9xPEWXch4=
Subject key identifier:   EB:13:28:E7:FB:18:D3:3C:5A:91:23:16:CF:5D:F8:0E:59:82:C9:0E
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer:       /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial:       01962ECFCB5165662C48A488665FA0B5E20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: qBHYimXxqoKcPsrA1F29pU6j8ETr4P8enH02xYtE+A4=)
                          2: tkt4SudQfK9uwQrgGKvvYflAjl8.roa (hash: dFUnqKo0rasEdebFDefgA9DnqivcqZmMoexL2NOUY5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:51:65:66:2c:48:a4:88:66:5f:a0:b5:e2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=eb1328e7fb18d33c5a912316cf5df80e5982c90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:20:a3:67:07:42:ad:ce:89:cd:59:5e:9b:
                    37:c9:f8:45:27:4d:c4:3d:c4:ae:36:7c:0b:30:78:
                    d0:f8:15:fa:6f:7b:7f:0a:5e:90:2a:06:32:03:80:
                    dd:68:45:c0:81:36:09:58:80:77:d6:74:db:41:35:
                    d2:de:97:23:cb:b6:4f:66:c6:3a:b5:f2:02:c7:ef:
                    07:b9:07:48:8e:bc:82:32:d7:82:15:b2:30:5d:12:
                    ee:0d:5c:41:2b:c9:c0:78:9e:4d:4a:32:00:3d:2d:
                    57:a6:eb:e7:88:ef:cb:e7:fb:2e:8c:21:15:4f:1d:
                    f0:13:e7:f2:bf:1c:2e:83:09:9b:47:85:72:91:50:
                    52:05:6f:75:10:a0:ba:a8:5b:a7:c0:bf:05:e0:ff:
                    0f:ad:d8:4e:f4:16:a6:80:06:cd:49:78:88:e8:99:
                    40:fb:bb:61:6f:69:ea:52:6c:54:34:7c:df:6b:df:
                    21:d6:e6:6c:57:7b:ab:b7:8e:7c:f5:45:89:aa:6a:
                    ca:76:72:31:a7:d1:d6:f7:89:8d:92:eb:8f:f1:a2:
                    e3:02:7d:e3:47:0f:0c:db:77:5e:6d:f4:12:b8:e5:
                    42:20:f9:e3:bb:63:21:1d:27:b0:b9:17:e0:53:a4:
                    3e:64:fe:7f:16:30:57:7a:08:29:78:af:4a:74:2f:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:28:E7:FB:18:D3:3C:5A:91:23:16:CF:5D:F8:0E:59:82:C9:0E
            X509v3 Authority Key Identifier:
                keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6c:61:10:5f:03:0c:68:13:d7:d7:88:ed:b6:10:9e:e3:95:
         8b:d2:85:8c:1f:b0:41:a8:91:2e:af:d5:06:92:66:cc:9a:a2:
         5a:36:e4:a3:d6:c1:1c:6e:75:34:17:b2:99:9d:d5:7e:8a:1b:
         2b:3f:5e:6b:b5:1c:6e:68:8d:c3:cd:e4:14:02:78:67:0e:ad:
         91:6a:47:e5:c2:c4:84:ad:80:82:94:24:bb:b7:cf:4e:4f:db:
         95:44:79:fb:57:3f:b8:de:97:cc:18:83:63:6c:c3:5c:74:f7:
         ed:6b:79:0e:07:f2:1d:fb:7d:c1:10:8e:e3:0d:10:33:35:32:
         37:2b:49:c4:22:d0:75:e9:5b:35:db:a6:0e:8a:d3:c6:ae:5e:
         ca:ab:9f:07:3c:98:8d:c6:0a:14:86:6a:bb:a9:37:b0:20:b1:
         93:7f:ac:a9:8b:f3:d0:65:a2:09:36:4d:09:e8:b2:31:bf:fd:
         b4:33:c9:02:0e:b0:e9:9f:8b:c8:fa:51:b2:44:22:6a:95:c4:
         20:2f:3a:c8:b8:60:61:10:c5:3f:14:4f:bd:11:99:93:3f:6e:
         d9:0e:ae:3c:f1:85:c6:c8:69:62:d8:47:27:ac:d5:80:b0:44:
         f3:ba:36:b2:8c:4a:ed:ce:f4:f0:56:5a:7c:cc:56:ee:92:89:
         aa:b5:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----