Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File:                     K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier:          0t/b0zU1p4GQOij4ukaDxMKbAQRRdafdO6KRtlmL5yI=
Subject key identifier:   93:2C:2F:C0:12:81:90:6E:18:44:91:26:4D:15:CC:85:49:12:12:18
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer:       /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial:       01962E2B1F6D0DA1629DD80344A254CE48DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number:          1090
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
                          2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: MJaOKbILj902vlwuWW01r80M60OcPkJY+FHFUYQKnHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:6d:0d:a1:62:9d:d8:03:44:a2:54:ce:48:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=932c2fc01281906e184491264d15cc8549121218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:4b:a9:dd:c5:a6:46:6b:b8:4b:c0:35:6f:
                    77:ea:60:a0:d0:db:34:49:2a:36:91:57:de:a2:c0:
                    14:2c:b7:69:cb:07:a2:4f:37:a5:e7:80:90:6c:3e:
                    ca:ef:36:c5:56:ca:08:1e:65:d3:16:51:87:f3:a1:
                    ca:41:79:18:c2:b4:65:1c:42:34:fc:b4:9b:27:70:
                    7c:11:0b:35:45:fb:a0:27:43:4b:88:e2:cf:cc:5a:
                    2c:35:36:6c:91:60:28:61:b0:ec:ae:34:cd:24:46:
                    0e:84:ff:bd:ed:1c:6d:04:fe:e1:45:16:37:ac:9c:
                    c8:2f:33:b8:b3:60:03:9c:11:aa:9f:64:05:46:f2:
                    52:c3:a8:50:dc:e9:ee:90:6d:eb:80:25:7e:6b:96:
                    aa:75:1b:ee:e7:36:d7:df:b4:49:b0:05:cd:2f:8b:
                    87:14:0a:c9:fe:81:7e:57:b4:82:e4:de:06:79:40:
                    fe:2e:ab:2d:74:d0:56:91:0a:e5:3a:3f:fe:46:f6:
                    41:cd:2b:34:f9:dd:0b:fe:e3:bd:02:49:8d:95:f5:
                    c2:8f:d3:ae:bb:fd:62:7f:06:cc:0d:66:04:ea:fc:
                    c9:47:17:cb:6e:66:48:68:2d:b3:06:f1:d7:46:24:
                    b2:19:5f:df:f6:56:4f:e7:10:1c:2d:bf:2a:93:c4:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:2F:C0:12:81:90:6E:18:44:91:26:4D:15:CC:85:49:12:12:18
            X509v3 Authority Key Identifier:
                keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:04:98:92:a2:83:a0:9a:90:41:ac:52:e3:4a:5a:5d:d1:
         34:ce:7f:5f:c5:d2:52:70:74:3a:c2:0a:0d:fa:7c:90:d5:fb:
         7d:1e:fa:37:1e:91:3f:0f:76:49:71:cf:32:e6:93:cd:07:c5:
         70:87:50:80:af:0b:ac:88:bf:00:06:2e:a9:cd:32:05:84:63:
         af:c9:c5:3c:eb:88:ea:5f:d1:49:bb:32:b2:36:7f:94:98:47:
         75:79:1e:e9:ca:15:c7:df:97:d3:11:9b:95:67:96:fb:af:04:
         44:44:47:95:5d:ba:ad:b8:fc:de:c8:80:a3:13:4d:c1:10:cb:
         c9:bc:1e:e8:25:c9:3c:9e:d3:f3:6e:6d:a0:78:75:66:ee:d5:
         2f:b8:98:17:1b:bf:37:3c:ee:1f:1b:20:23:c7:08:84:64:c4:
         b9:66:7e:41:bb:05:34:01:4a:32:6d:bc:1b:28:42:27:ba:ac:
         8c:46:be:c9:f4:46:11:e0:79:e2:e9:e4:06:14:d4:36:8f:ad:
         9c:31:2a:f0:8d:eb:4a:c4:9a:57:00:b9:c7:b6:22:ed:81:a1:
         81:d7:98:97:5d:ef:66:5f:5d:04:27:11:bb:30:e0:58:17:05:
         e4:e8:b1:73:9a:18:c6:1b:b3:65:ca:54:d4:96:30:a0:d3:89:
         fa:ce:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----