Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File:                     K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier:          MrKenoeKjMaAd+uNLGKRW/kYC82z4lHoIIkIxnOha00=
Subject key identifier:   DD:4E:AC:75:D6:00:98:3A:28:64:D7:72:C4:9C:AF:DB:24:96:3E:85
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer:       /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial:       01962E98903E0DFCCF56B4A2F686C74E5F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number:          13C3
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: XhehAbVXv9Lg5BRClie2QE41C+15mY7obTxV9f8vOlU=)
                          2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:90:3e:0d:fc:cf:56:b4:a2:f6:86:c7:4e:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=dd4eac75d600983a2864d772c49cafdb24963e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:40:77:c7:89:5d:6f:6d:84:25:46:3b:c5:
                    83:6d:c6:50:e3:63:4c:83:3b:bd:02:0c:f0:b7:ff:
                    c0:e4:0a:32:7c:b5:ad:a2:63:0f:28:fb:ed:0f:6f:
                    c1:0d:c5:f7:90:e9:3c:76:c9:6f:60:05:0f:58:df:
                    88:8f:57:31:4e:02:83:03:e2:28:0f:40:dc:2b:8a:
                    29:2a:2f:05:bc:7a:e4:cc:69:5b:15:b4:f3:f8:b9:
                    82:9f:16:dd:2c:00:26:07:a7:8b:16:1e:1d:15:5b:
                    54:cc:a0:46:be:56:75:68:d7:9e:a2:3f:2f:fd:fb:
                    04:77:ac:80:bc:f9:75:44:42:3a:45:3b:29:47:ed:
                    bc:fa:5d:75:d8:be:4b:0e:0b:32:b4:8a:0c:81:99:
                    20:fc:cc:a8:96:ce:28:41:41:d4:c8:5e:fe:12:1d:
                    af:a3:cf:1a:df:60:ea:9d:7d:a0:37:8f:75:f0:4c:
                    e3:e1:58:c3:0f:a6:8f:cb:1f:18:71:ac:b7:35:89:
                    2e:df:52:08:15:16:8d:aa:e6:d7:39:a0:f5:ad:cd:
                    b8:a6:4a:97:21:a6:71:f9:7a:4a:ce:00:74:7f:7d:
                    e9:95:19:e8:de:2b:ca:e3:a4:07:34:96:c2:21:87:
                    1b:b1:e4:3e:9f:41:20:5a:4b:f6:63:f6:7b:84:51:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:AC:75:D6:00:98:3A:28:64:D7:72:C4:9C:AF:DB:24:96:3E:85
            X509v3 Authority Key Identifier:
                keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:78:be:f3:f0:cd:92:3a:c8:6f:e7:a2:5e:d7:dd:a0:f6:
         ba:e6:d5:b0:e6:e6:77:b9:75:83:86:5f:66:e1:aa:90:24:f7:
         69:ad:f5:d5:68:93:51:3a:81:b4:c3:8c:7d:97:cc:4f:4b:0b:
         4f:4b:51:5a:49:cf:aa:d7:54:67:6c:18:8d:1c:12:d0:e3:db:
         5d:42:35:b4:0a:99:b6:3c:27:25:b4:1d:ef:31:bf:2d:2b:de:
         cf:3d:ba:2e:f3:65:d4:e0:25:49:8c:cb:d8:b6:a3:de:85:20:
         41:64:9c:7f:6e:cf:f4:db:05:44:46:e5:96:fe:e3:19:ce:d8:
         31:17:df:3b:5c:f1:72:8c:0e:c5:7a:b5:46:93:40:2d:a8:a8:
         b5:bf:70:c0:c1:bd:81:a2:74:5e:5e:f8:4f:9c:f1:01:af:0b:
         4a:16:83:43:aa:d6:5d:d6:2b:c8:36:94:89:02:1b:79:70:6d:
         a5:8e:32:31:75:d5:72:30:da:42:88:88:81:ab:aa:c4:28:77:
         f5:7f:7d:56:37:58:23:f7:21:e9:7d:7b:b4:7d:7c:79:e8:9a:
         45:33:5c:e8:d5:97:65:52:e4:c0:74:9c:36:97:bb:3c:1d:f1:
         1b:49:01:9e:00:2f:3c:0d:56:2d:cc:3e:e0:21:2f:4a:92:62:
         db:40:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----