Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File:                     krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier:          YPawoQSUP6E2SvKNd3aiEwtjzhwNdAZsd1yudq7gC/A=
Subject key identifier:   8F:B9:03:4F:67:0E:E1:A9:88:85:A3:A5:87:38:98:72:EE:B5:D9:38
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer:       /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial:       01962E2AC8F2D59C9B011AC6BA2003DD0E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number:          0CB2
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: UvrxbOvqtvyXGby9kKqs2uuCqTU7n1HgC1Xvz5lCWF8=)
                          2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:f2:d5:9c:9b:01:1a:c6:ba:20:03:dd:0e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=8fb9034f670ee1a98885a3a587389872eeb5d938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e6:53:d9:0d:13:5f:a0:85:73:57:c9:f1:2c:
                    5a:f5:00:8f:e2:6b:25:01:3b:30:79:12:12:ee:fd:
                    45:a2:86:12:91:3d:ad:0a:82:e4:d9:e6:3b:99:9b:
                    e1:fb:80:d8:09:d3:01:1d:8d:a3:6d:fd:d2:65:db:
                    dd:44:5f:9c:1b:54:fd:26:d5:48:2f:d7:10:67:f4:
                    ad:53:a8:5a:66:43:f0:21:ee:11:d4:54:cd:c7:ff:
                    88:62:2f:0e:35:60:15:39:87:5f:47:24:96:f9:f8:
                    17:21:15:d8:24:5c:d2:6b:54:ed:8b:2e:62:e3:36:
                    b9:ee:0e:06:05:a1:05:ff:f5:ad:3c:e3:c4:2b:e5:
                    b3:66:d5:db:58:ec:ed:01:d2:8f:1f:15:24:27:ca:
                    16:e2:8b:03:76:77:29:2e:a2:28:dd:1b:6e:8f:64:
                    c6:fc:95:73:0e:3c:71:b2:19:53:ac:6d:98:f7:27:
                    1d:79:10:83:09:3a:9b:4c:5f:f7:4f:e5:3d:ec:da:
                    37:10:1e:1a:33:8d:85:f8:b8:ea:30:80:4b:d1:81:
                    aa:b3:c7:21:dd:75:8e:f5:66:55:be:46:98:f4:11:
                    0f:54:d5:99:b4:2c:ef:57:3f:b9:1c:19:3e:95:48:
                    f2:cd:dc:7d:2d:8a:16:d8:26:c3:d4:e8:46:be:46:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:03:4F:67:0E:E1:A9:88:85:A3:A5:87:38:98:72:EE:B5:D9:38
            X509v3 Authority Key Identifier:
                keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:02:e5:a8:a7:6a:b6:a5:d8:7c:d8:ac:40:f8:fa:46:87:
         8e:08:83:b6:3c:43:ad:5a:1a:f6:1a:ce:c1:db:ef:3f:11:4b:
         41:ea:90:a6:e7:19:8b:28:83:c7:11:ac:2f:44:c2:a7:f9:04:
         aa:22:59:86:f6:13:f4:8f:13:99:e7:1c:b2:77:fd:ea:a2:61:
         56:39:38:5a:1e:d7:9b:65:fb:8a:bb:83:7c:86:ec:e1:19:5f:
         8d:fc:ca:22:21:68:94:b0:ae:af:d3:4b:99:6e:ca:2a:87:9b:
         4c:2d:47:7f:14:c2:af:a8:9e:cc:32:14:d1:43:01:33:69:71:
         b6:fd:69:53:80:ac:c2:df:a3:75:b4:2d:20:3e:33:ca:c8:08:
         a8:85:17:24:a9:e9:be:f2:40:a3:39:37:a7:01:b0:bd:19:e0:
         f9:15:39:35:eb:d4:97:a5:89:a4:f5:21:37:53:7b:3e:9a:ac:
         d9:5a:53:b2:ba:c3:75:1f:13:94:4b:cd:b6:ee:d9:5a:39:c2:
         2c:04:42:58:3a:7d:f1:2d:7a:65:bf:35:ed:05:b5:0b:7c:52:
         a4:ee:4a:c7:c8:9e:ab:d1:1b:04:33:ba:cd:4b:c6:31:20:01:
         6d:5f:88:8e:31:5b:12:8c:59:d1:2f:48:c1:c4:94:72:b8:b5:
         c6:31:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----