Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File:                     KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier:          wWnJphZPq8dpfygi35w5HN9PxYK9iwJBSaht1jiAQB8=
Subject key identifier:   62:45:D5:F9:CB:89:E2:8F:60:2C:D3:68:E1:DF:88:E3:98:AB:68:07
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer:       /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial:       01962F06E88426E1E3FAFD0F09CED73DAB56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number:          146D
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: IEwGUEyz4NxHTImksicg0cKWhz07+ocSeFTaAJJWSqU=)
                          2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e8:84:26:e1:e3:fa:fd:0f:09:ce:d7:3d:ab:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=6245d5f9cb89e28f602cd368e1df88e398ab6807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:2b:80:7a:cc:ec:22:43:5b:da:e0:2d:39:
                    e3:93:ce:e3:00:6b:5d:a9:ac:c6:de:e4:f1:86:2d:
                    9d:b7:f3:8d:58:27:66:48:5c:e9:83:b3:3d:ee:38:
                    b7:2a:64:ec:7d:a3:15:dc:eb:03:64:30:ba:96:df:
                    8c:51:a0:2e:b3:68:5f:4a:9a:51:69:94:95:bf:e4:
                    dd:3a:b1:93:2c:0f:c6:b4:32:f7:b8:9d:55:07:09:
                    b8:4f:16:70:88:08:27:64:1b:f9:0e:66:33:9a:a7:
                    c3:78:0d:d8:cc:76:6b:eb:3f:ed:1a:79:2b:35:38:
                    fe:49:b3:ca:b9:7c:5d:cb:0e:df:7a:c8:e4:3f:d3:
                    ea:ba:94:29:03:23:68:f1:50:94:d9:84:9c:a0:8b:
                    1b:6c:3f:aa:a2:49:f7:cf:f0:be:e5:f1:27:39:9f:
                    b1:fb:d8:9b:83:1b:8d:f6:5b:19:84:af:6c:2c:61:
                    99:8b:f7:8b:6d:22:f3:09:d7:cd:f6:79:f0:9b:13:
                    51:63:a9:bf:57:09:cc:bc:9e:8d:dc:e2:55:17:76:
                    c7:82:87:b4:43:a2:75:a4:5f:de:34:cd:72:f0:c2:
                    0f:20:d2:e3:b9:25:c2:b3:92:3d:47:ab:55:52:31:
                    77:a2:bc:4d:87:11:15:4f:96:4d:6a:53:b2:f5:c0:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:D5:F9:CB:89:E2:8F:60:2C:D3:68:E1:DF:88:E3:98:AB:68:07
            X509v3 Authority Key Identifier:
                keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:b6:9d:53:2d:81:a0:5f:34:e6:c1:3a:f9:06:37:c3:8b:
         40:34:4d:94:7d:60:a3:05:3b:43:d3:9f:36:c7:1b:f7:0c:60:
         b4:72:fc:1e:38:cd:97:0d:25:5d:e0:3c:2e:f7:00:5a:dd:25:
         49:2f:9e:57:4a:49:54:cd:a4:3d:f8:19:09:10:73:07:f7:ee:
         f0:5e:0a:75:a1:31:91:e4:5d:c1:4f:f4:4b:a2:bf:cf:24:c4:
         0a:db:b4:d4:2e:7a:f6:9b:45:38:42:5e:30:74:41:21:3b:6c:
         61:8d:b0:52:cb:bb:96:44:b5:16:a3:62:fa:65:11:f2:60:6a:
         38:7c:5b:2a:34:70:36:a8:ab:9c:8a:e2:9e:50:e9:fc:5c:de:
         c2:99:65:9c:25:1a:00:2e:41:8a:89:fd:c7:cf:21:2c:2b:06:
         c9:85:79:36:12:4b:80:9a:43:52:88:f3:de:38:f0:04:81:46:
         1f:9c:57:ff:fc:93:84:48:b5:26:13:72:d0:ed:05:2e:af:74:
         9b:bd:c9:00:ff:3d:5d:b3:f2:10:d3:32:8a:92:23:85:bb:21:
         a9:a3:b5:67:e9:4e:6d:fc:4d:65:1e:6d:22:57:be:f2:02:26:
         93:0f:64:f9:e6:73:8d:f9:36:8b:91:7e:86:2f:1b:05:31:55:
         5e:38:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----