Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File:                     KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier:          BA+6mC5UzmxvauhMyRupVgYpVhLA7v20xFBIsRzIr1Y=
Subject key identifier:   17:63:B9:D8:5D:05:01:7A:71:6B:6C:7E:91:61:B0:46:92:29:CC:DE
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer:       /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial:       01962F3D9467B8CE5512F78B603870D91B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: h1u4DLyegq2rWZu4/3QIkH6Nmu7KhRnJjRWOi0DLLuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:67:b8:ce:55:12:f7:8b:60:38:70:d9:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=1763b9d85d05017a716b6c7e9161b0469229ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:d7:d0:df:09:ba:8c:f8:ca:9f:40:8a:20:
                    78:95:23:69:be:7f:9e:51:6d:7c:c3:82:5e:e5:74:
                    2d:aa:65:bb:13:19:ae:bb:6f:68:a6:8a:de:4a:1c:
                    9b:36:c8:ab:32:c0:3a:92:9d:3a:a0:ff:57:d8:4f:
                    01:db:e7:3c:b5:d2:7f:c8:a6:30:78:34:45:8c:66:
                    bf:fc:4a:02:8f:dd:ef:ca:6c:98:12:e5:6d:25:3c:
                    52:ad:47:d3:5d:50:21:21:db:b1:8a:de:f0:3c:4d:
                    29:d2:02:05:6c:71:00:89:8e:1e:8e:7b:6f:1b:e2:
                    f6:91:4f:30:27:b9:ff:86:8a:fe:c3:b2:07:e9:87:
                    94:d0:6d:f4:de:88:a2:f3:b3:a8:75:bf:d1:8e:cc:
                    a2:65:08:e7:ad:37:9f:20:01:b3:35:c5:aa:ce:84:
                    d9:54:94:14:25:ee:55:11:e7:73:ee:6c:ba:db:c7:
                    20:e4:73:45:22:f0:f3:68:0b:f9:fb:42:e4:f9:93:
                    e2:07:d6:60:2f:92:8b:07:fd:34:86:c1:b4:48:cb:
                    65:32:ef:3d:cf:8c:b5:c6:d9:6a:5e:2a:16:53:df:
                    ed:35:4e:3c:51:e3:4a:5c:54:60:de:d7:6d:31:9c:
                    0b:f2:a1:e2:78:ab:f8:6e:fe:e6:83:28:ec:fb:95:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:63:B9:D8:5D:05:01:7A:71:6B:6C:7E:91:61:B0:46:92:29:CC:DE
            X509v3 Authority Key Identifier:
                keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:ac:c8:d2:57:5d:23:e0:0d:33:e8:db:97:9c:e9:7c:33:
         48:fc:a1:24:6e:79:b6:2c:d2:07:59:0b:40:3f:dc:13:9c:15:
         6e:38:92:ee:21:23:98:7e:0f:a6:40:e7:0a:e0:dd:3e:0e:69:
         b4:fc:8c:95:25:7f:a6:0d:7b:ca:d5:0e:f9:73:28:f1:b7:dd:
         06:e5:49:70:ba:48:60:2f:2a:6c:1a:6f:5a:3f:61:aa:03:9f:
         6e:95:55:fc:67:7d:1a:84:fe:d4:8a:23:39:14:b1:49:dc:f6:
         2c:34:e4:5a:91:10:49:94:64:78:f9:4a:cb:03:b1:cf:40:9d:
         c4:43:66:d9:c0:2f:08:00:82:66:80:40:2e:3d:71:ee:16:ea:
         13:ca:67:f1:25:60:30:a7:d3:83:25:c6:f4:d9:51:97:5d:56:
         fc:40:ae:af:40:00:73:98:2e:f1:55:2f:6e:d0:82:bd:cb:1f:
         6a:44:de:ba:d2:39:45:5f:36:e2:8f:f0:45:74:b8:df:1e:ba:
         3f:29:07:1f:a6:dc:0d:dd:72:eb:ef:96:f5:bb:5b:cd:fc:f4:
         ae:20:2b:eb:87:f8:d2:8e:d0:5a:aa:d0:83:7b:0e:13:2c:42:
         32:f6:8d:96:26:ff:11:23:b4:0a:2e:2e:15:53:0c:06:b5:34:
         5f:3c:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----