Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
File:                     klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json)
Hash identifier:          xjFftXOdgxcp0e8LUl1XuhwejV9Td+N2XqH805YOODU=
Subject key identifier:   39:83:BD:34:06:EB:8B:F6:DA:D1:D5:30:EA:45:88:12:8D:29:3A:E3
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Certificate issuer:       /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial:       01962E2AEBEB8C2F48364848AD9D8F1E3E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
Manifest number:          0C4D
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=)
                          2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: 02Hwu4NEQZKef61Amct1WgqUy9I6yBZIJKK0sl/DkJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:eb:eb:8c:2f:48:36:48:48:ad:9d:8f:1e:3e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=3983bd3406eb8bf6dad1d530ea4588128d293ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:0b:74:eb:1b:6d:f3:ba:ba:2c:7e:9f:62:
                    1f:fb:97:31:f8:1b:53:71:74:18:29:1d:f6:cb:3b:
                    97:ab:9f:86:13:24:cf:29:73:ae:cf:f1:e6:cc:0f:
                    02:6c:72:ad:41:8c:88:ea:bf:ec:b5:35:ce:ca:36:
                    91:78:c2:21:d2:ea:68:4a:92:9c:67:ec:cf:c6:f6:
                    4b:4a:2a:de:40:56:6b:b0:93:e2:f7:6d:6c:01:98:
                    17:ae:72:5d:a8:84:36:19:d7:c6:a5:8c:79:19:6e:
                    c0:6e:33:03:16:36:7f:c6:ec:87:c1:2d:69:51:fd:
                    99:22:d8:be:f0:83:49:22:45:7c:cd:1e:15:84:fa:
                    bd:6a:ed:44:6d:c9:fb:9a:25:4e:89:2e:c2:8a:18:
                    52:51:45:cb:dc:a5:e7:d3:cd:3d:c7:78:2d:ab:2e:
                    5b:ac:ee:4a:f8:38:d6:80:be:bc:cf:05:22:45:33:
                    09:d5:90:b2:63:1f:74:7c:d9:5d:9d:9a:fc:c2:c6:
                    f2:32:b4:2e:8d:08:2b:2e:18:a4:9c:a7:1d:6a:57:
                    5a:9f:b6:0d:4e:77:cd:42:37:cb:10:6f:da:e5:a8:
                    c9:d4:27:da:a4:79:fd:e6:d7:50:60:41:80:3a:50:
                    27:45:1a:b5:ab:70:ca:7f:09:36:78:bf:15:2a:1e:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:BD:34:06:EB:8B:F6:DA:D1:D5:30:EA:45:88:12:8D:29:3A:E3
            X509v3 Authority Key Identifier:
                keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5b:19:69:4a:a6:e0:08:ce:b0:29:c3:c0:6a:04:bd:b8:b8:
         d1:b5:20:ae:98:92:1d:32:4e:27:b3:79:6b:77:49:5f:11:d2:
         7b:bd:fc:93:65:76:7a:0a:00:36:a4:09:50:8e:f8:0c:24:47:
         66:97:b9:3f:bd:36:10:1d:de:53:f1:e7:90:cb:3d:88:81:58:
         dd:e2:35:92:52:0c:b2:2e:de:29:49:e9:7b:af:75:08:73:96:
         41:48:16:06:2d:7c:3f:bf:f0:97:bc:49:11:70:4b:03:bd:bd:
         6c:df:2d:8c:80:c5:93:4d:dd:e4:06:2a:fb:f8:4e:0e:1f:39:
         7b:e2:99:86:a1:c2:4f:79:a4:44:b7:c8:63:d5:dc:ab:c6:40:
         88:73:c3:b0:5d:75:28:74:1f:af:80:7a:d4:64:a3:64:ab:f1:
         84:10:eb:93:25:38:ba:d7:d2:e2:f8:ae:cf:63:74:6b:39:eb:
         31:72:0a:b6:4d:05:e0:5c:fe:af:00:be:5e:2b:2e:73:8e:36:
         26:50:ba:dd:1a:40:08:cd:51:98:3c:44:47:74:6f:10:cc:72:
         07:fa:20:c8:ed:9f:eb:d1:cd:04:50:8b:76:7d:26:a2:ce:f1:
         df:f4:36:0c:d0:c7:e2:f6:ab:11:17:41:c5:3f:e8:c9:84:8d:
         c4:88:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----