Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File:                     1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier:          pqXk3YYKiBUASz8yE0Dvp4FwllayWMaoz41D44jsDPs=
Subject key identifier:   65:7D:9A:EA:58:39:7D:A1:AB:03:F4:D8:5A:AC:39:5B:DA:C1:F6:DB
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer:       /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial:       01962E98C371D515F2D07D2F2BADF0835FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number:          0600
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: C59jg3q5vScUqBlaXfoehhetpIpy6YhRMo5McDCj9QE=)
                          2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c3:71:d5:15:f2:d0:7d:2f:2b:ad:f0:83:5f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=657d9aea58397da1ab03f4d85aac395bdac1f6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:13:fd:31:74:29:b8:60:ac:59:68:3a:74:
                    f9:b8:01:40:4c:dd:8c:07:b2:58:4e:42:04:b5:c2:
                    fb:dd:0f:78:ac:9d:57:7a:86:e8:45:1f:06:5e:ce:
                    fe:30:06:50:6e:1f:3d:6d:37:34:23:d4:cc:80:e2:
                    3a:7e:8e:53:5c:16:96:a2:cd:00:93:20:f2:1a:b2:
                    bd:0c:f3:5e:ea:a5:18:0a:14:40:16:e7:af:b1:a4:
                    dd:93:de:df:39:52:ba:61:2e:db:5a:6c:b6:6a:09:
                    d4:71:53:13:ac:da:31:af:aa:db:ae:47:01:81:60:
                    ca:fe:09:99:32:dc:84:02:a4:f1:75:e5:8c:76:02:
                    ba:df:9b:a0:90:60:33:ea:ed:9a:3e:8a:19:6b:f7:
                    09:e2:50:20:ef:d7:01:47:06:99:49:df:fa:80:d6:
                    51:a3:d5:11:3f:15:03:b1:a8:f8:2c:4a:db:87:f5:
                    03:33:90:04:59:2c:d3:15:7b:7d:b0:70:f2:57:46:
                    b5:1e:4e:69:c9:dc:ca:fb:ec:25:f5:19:88:c6:ab:
                    be:cd:1c:4d:d1:a5:4b:bc:92:83:42:e0:4d:a6:00:
                    d3:95:3f:e5:a1:f6:0a:c7:1f:fc:1e:56:51:34:a9:
                    a2:7b:e5:a3:92:d8:8b:3b:06:11:eb:74:f7:54:7e:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:9A:EA:58:39:7D:A1:AB:03:F4:D8:5A:AC:39:5B:DA:C1:F6:DB
            X509v3 Authority Key Identifier:
                keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:84:59:8b:16:29:0e:70:b9:98:31:63:42:70:52:af:d1:
         29:86:f5:4a:8f:40:44:7c:46:e8:e9:fa:a7:64:91:b9:1d:78:
         43:4d:39:1d:69:53:3d:43:e8:c4:6c:58:ca:58:e2:c4:29:1e:
         9e:2a:bf:89:ef:5e:bb:6e:03:a2:7c:81:44:2d:78:e0:11:da:
         d8:3c:72:68:83:7d:b6:bf:f8:a7:aa:04:03:d6:68:c6:a5:85:
         27:ef:4d:c6:d9:3a:34:a6:ce:69:fb:67:35:73:1f:82:eb:0a:
         98:32:d2:f4:bb:6c:37:8e:8b:ed:9e:19:98:19:39:e6:41:b0:
         87:13:a5:2e:17:88:8c:75:2d:df:88:35:3a:f8:33:3d:28:83:
         4a:4d:84:b6:c5:cd:14:dd:16:66:3d:96:d1:ad:54:12:37:e7:
         78:de:d7:5a:1b:2d:37:d9:9b:c8:b8:0a:28:03:46:df:28:63:
         2a:ad:96:33:4e:8c:33:82:e2:f6:06:df:9e:8b:72:c8:9d:4e:
         16:f0:f3:77:26:ec:dc:62:75:20:5a:d2:a8:e6:08:3c:75:c2:
         1c:66:45:0c:3b:53:b9:e1:38:e9:7b:1b:ef:77:a8:a0:68:1e:
         1a:38:bc:cf:13:90:90:d9:c2:0a:ab:0b:59:07:73:f9:01:02:
         ec:d6:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----