Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File:                     ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier:          r1kf5Usu9XVfdAloLDtQ/Q48gQ96VNcCyrWaq55TjZ4=
Subject key identifier:   3D:33:37:2C:32:4D:7E:82:57:61:46:BC:34:85:1C:A6:52:FA:C9:A1
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer:       /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial:       01962E99215E675B127D803939BCD9AC4C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number:          0CE7
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: feCjWWseRVi+bOxQq4znVvrSCRZg9hjA/2/+68L9QMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:5e:67:5b:12:7d:80:39:39:bc:d9:ac:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=3d33372c324d7e82576146bc34851ca652fac9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ff:88:6f:d8:42:77:9e:9a:d2:60:be:25:34:
                    2a:4e:fe:d3:90:27:eb:8c:2b:19:29:75:8e:63:77:
                    46:a9:64:4d:62:f0:3a:99:df:40:0f:eb:57:8e:ca:
                    23:14:06:59:d0:25:a7:e8:29:ae:2e:5f:a7:3f:a3:
                    6e:4e:ce:c1:9a:fd:67:d7:83:30:0d:2b:f6:fb:0e:
                    8f:66:f2:79:53:81:a5:86:7a:27:1a:c5:96:ea:6e:
                    97:4d:10:d9:a1:f5:b5:5f:3a:d1:bc:82:4e:0a:65:
                    3a:d0:b7:0d:1d:c0:96:79:73:be:6b:20:d4:c7:58:
                    70:41:f3:d5:01:a7:e7:4b:10:3c:cd:80:2e:88:fb:
                    b7:f3:84:b8:1f:03:b8:6d:f4:a9:6b:2d:de:78:8c:
                    7c:a2:e8:e2:87:25:ef:84:99:70:85:72:bf:e2:a0:
                    6d:a3:0c:47:89:ee:61:1f:ba:13:93:30:0c:87:50:
                    ca:6e:9c:5f:25:85:fc:8c:3c:49:9c:d8:d7:32:9d:
                    80:f0:5d:3b:e0:63:5c:c0:8e:fa:37:97:9e:b7:a5:
                    8a:ef:99:31:62:9b:f0:62:2d:2a:fb:be:3b:04:23:
                    d6:18:39:ec:7e:ba:6b:87:47:6e:ef:97:5a:f6:f5:
                    5e:0e:46:55:5c:89:cb:a6:80:38:0d:15:d6:98:d8:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:33:37:2C:32:4D:7E:82:57:61:46:BC:34:85:1C:A6:52:FA:C9:A1
            X509v3 Authority Key Identifier:
                keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:06:18:97:69:d4:06:62:6d:ea:cb:c1:54:76:5f:38:37:
         39:d2:a5:b4:a7:63:d4:51:75:dc:2c:15:50:3a:07:88:e6:f6:
         82:5f:93:1b:bc:4a:ac:81:25:97:5a:03:d9:98:aa:c6:37:97:
         02:85:77:11:7e:0f:61:e1:13:ff:c6:5f:0f:5a:d4:00:30:2b:
         f0:fb:c7:c5:29:c7:f6:87:ff:cd:4e:cb:9f:0d:ba:f8:87:9a:
         17:4d:d5:4a:25:81:e0:b7:22:18:67:aa:14:31:c9:8b:f7:0e:
         1e:06:e4:e0:01:6d:05:42:1f:29:76:8d:8b:4e:71:6d:3a:fe:
         48:48:18:78:be:2a:fa:72:40:ef:b2:7f:ef:e2:64:4c:94:dc:
         b9:99:d1:52:75:fe:a0:dc:70:ef:8b:d7:07:1b:8b:ab:5a:e8:
         ef:0a:ae:22:72:47:78:1a:42:8b:ab:02:12:6f:aa:91:c2:3f:
         60:72:4f:56:48:db:ee:55:b2:c1:35:20:d6:6c:d0:66:ef:e3:
         24:23:ab:03:30:de:f8:98:8f:49:78:a8:57:37:9d:93:26:bc:
         1f:88:2d:c6:67:94:dc:4e:b8:cd:59:3e:5a:d6:10:d6:e2:e7:
         23:dc:27:b3:d8:a1:9c:7d:8b:36:75:f9:3a:1d:a5:86:37:59:
         e1:86:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----