Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File:                     kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier:          7JLxiWUMWefVjTpJiywwZ7Bir3LvOyBQG/HDn7ITLKo=
Subject key identifier:   89:A7:40:6C:D3:E4:53:06:2E:B7:3D:52:44:DC:D1:3D:33:6A:F0:05
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer:       /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial:       01962E6187128CB062298A40706A91637FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number:          0541
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=)
                          2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: wdMZDUrw3YsVX9tkHBJhRWAJc9xIfhXdDOdvB9O5iK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:87:12:8c:b0:62:29:8a:40:70:6a:91:63:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=89a7406cd3e453062eb73d5244dcd13d336af005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:6b:20:7d:c6:c4:5e:e9:31:f1:a0:c6:3c:
                    de:82:f5:f8:33:18:66:eb:30:f2:20:80:47:b4:59:
                    cf:01:5c:fa:e5:cc:19:b5:e9:82:91:b6:16:78:49:
                    8c:d2:1b:90:1c:27:60:56:6c:c3:e9:3d:92:70:b6:
                    f5:99:48:55:6d:9c:fd:50:0c:4d:50:5e:f3:2f:8e:
                    92:2e:0c:71:ea:84:ee:7f:3d:81:f3:c2:63:2e:4e:
                    66:6a:91:f3:d6:61:10:4c:68:a4:5f:4d:6c:0a:78:
                    bf:55:20:ad:c2:7f:c5:66:18:3e:12:f1:c4:c0:b2:
                    31:d3:67:53:af:28:8c:c2:c5:45:2e:14:69:83:67:
                    2f:18:ec:1e:95:6c:2d:64:39:7e:38:71:5c:dc:a5:
                    49:65:9b:c6:b2:75:15:46:21:48:ff:cc:87:9b:0a:
                    7b:e5:2a:e5:05:43:c2:0c:28:fd:e3:e8:d7:ba:ff:
                    d2:01:6c:6c:c8:9e:57:b3:92:51:43:98:dc:38:a3:
                    fe:6c:4b:1a:aa:99:35:1a:b9:48:70:82:55:0b:f3:
                    9e:a2:91:4d:64:45:6b:83:c7:1b:e1:8f:0c:d2:23:
                    aa:06:ee:a8:a3:b8:0e:f0:51:bc:6d:09:7d:5a:a6:
                    93:c3:33:8c:78:27:bd:0e:eb:27:32:41:2f:ef:ed:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:40:6C:D3:E4:53:06:2E:B7:3D:52:44:DC:D1:3D:33:6A:F0:05
            X509v3 Authority Key Identifier:
                keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:15:a2:cb:8c:c9:b9:75:cd:08:8e:38:f7:61:8a:cf:71:9e:
         7c:b3:7d:4a:98:0c:b7:95:29:66:e6:ef:0c:30:ec:75:49:a4:
         d3:2c:3b:e4:d6:f7:bb:db:0b:40:00:50:05:66:30:69:30:19:
         df:03:ba:c7:6f:7d:6a:4d:ef:69:35:f9:ea:b0:39:93:48:3f:
         fa:0e:ac:a6:6c:57:84:02:c3:05:a1:12:9e:6d:2f:87:b7:cb:
         37:9e:28:fd:ef:fc:a3:81:1a:65:8b:c3:72:6e:62:10:c7:00:
         52:03:c9:6e:16:28:dd:21:ae:29:13:c2:86:f4:3c:0c:86:8f:
         8f:ed:8c:c0:cd:3a:f7:f7:cd:5e:6b:0e:eb:87:13:f4:bb:c0:
         4a:f1:27:39:99:ff:d2:54:c7:e7:30:e4:44:46:49:bc:d2:96:
         ff:f1:70:f2:de:61:ea:28:c1:9d:99:ed:56:be:29:0f:46:70:
         1d:43:f3:62:57:4f:35:86:b2:a6:6c:a1:1f:45:40:0f:a5:72:
         4c:81:bb:64:af:d6:de:88:ee:ef:3c:ed:7e:9e:06:44:cb:02:
         9a:02:f4:c5:f0:42:35:49:4b:d6:33:70:83:a9:ba:15:e6:5f:
         fa:08:36:69:81:fa:98:a4:58:c2:10:23:27:4d:c3:03:50:5e:
         75:ec:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----