Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File:                     KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier:          UBKKdhI6QK8oxMrtdNxipapo/EkTFdfatWZsYJMGZUU=
Subject key identifier:   2C:8F:E0:67:40:DC:DF:33:98:29:7A:EF:FC:8E:A1:3A:E3:4A:7E:A3
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer:       /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial:       01962E995E274F86486896F7DAE32523C7D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number:          11B6
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: nKpJ5xTd2+LKTQCU6jEzIppXKDTSYLlOa+jNj6QFAkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5e:27:4f:86:48:68:96:f7:da:e3:25:23:c7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=2c8fe06740dcdf3398297aeffc8ea13ae34a7ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:4c:f6:72:63:5d:4d:0e:1b:dc:ec:0a:ea:
                    6a:0d:ea:91:80:47:a9:6d:67:67:c5:2e:e9:00:ce:
                    3d:37:31:51:2d:60:5d:25:fd:23:39:b1:99:e1:14:
                    d1:7b:48:ea:6b:d6:aa:a6:6a:42:79:a7:3c:6a:2d:
                    c8:e0:d0:9a:66:7a:1e:53:d7:46:eb:24:40:ca:c1:
                    13:24:ae:f4:d5:3c:4a:c6:ea:b9:f5:2e:da:d8:5d:
                    2f:5e:0f:20:0a:e9:25:99:fe:d9:24:fc:1a:f5:a8:
                    2c:a5:8c:d7:41:4a:ae:d6:ee:99:51:d1:4d:c3:a4:
                    fa:8a:25:31:e7:87:96:55:38:c1:5a:21:ba:60:5c:
                    96:b3:11:7b:59:70:92:cb:51:73:93:63:35:d4:bf:
                    43:c4:dc:2f:f2:d2:85:51:47:26:d6:80:a2:30:59:
                    7a:9d:fc:f5:4c:7d:a3:5d:2e:63:05:ad:93:96:b6:
                    0f:5d:91:10:d9:45:f8:19:00:21:e9:73:29:a7:80:
                    20:2a:62:0c:2b:99:05:60:ae:e3:b1:da:57:8b:64:
                    85:e0:a0:24:fa:bb:dd:29:c3:a2:35:dd:3d:bc:45:
                    15:18:4a:54:a5:bc:51:85:94:a0:14:d4:20:8c:72:
                    83:b2:9a:d6:61:fc:ce:4e:65:c6:7b:cb:e9:a5:05:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:E0:67:40:DC:DF:33:98:29:7A:EF:FC:8E:A1:3A:E3:4A:7E:A3
            X509v3 Authority Key Identifier:
                keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f0:74:89:6a:11:c0:a8:32:40:cf:fa:4b:f1:92:f3:14:dd:
         23:26:ab:27:ce:3d:30:7a:d1:31:19:7f:54:d4:f9:2f:ec:3b:
         7b:cd:d5:25:de:d4:54:ef:be:40:bc:48:95:e5:b4:0f:9f:92:
         bf:e7:0f:b9:5b:c6:db:bc:23:2e:ef:6c:16:df:57:10:1d:28:
         28:30:70:4b:7f:e5:e2:45:fb:70:8b:fd:01:8e:c9:7b:29:8b:
         03:b5:94:4e:a8:05:a8:c7:ea:f0:ad:18:09:67:31:75:e5:f4:
         d8:37:2d:11:ae:66:9e:ec:96:ec:b0:5b:b2:f5:dd:45:be:48:
         74:c7:e0:a7:8e:51:42:2e:f7:aa:ae:20:b0:2e:a8:fc:32:cd:
         b2:38:1c:70:7d:dd:7b:47:f6:38:1f:2b:95:08:73:3d:e4:b0:
         d0:3b:a5:a7:aa:ee:b0:70:1f:bb:85:f1:f9:f1:6c:b6:25:cb:
         7a:91:bc:a5:14:a1:fa:8b:97:a4:ac:49:a5:f0:c5:b4:23:f3:
         cb:79:d5:b0:c1:32:f8:90:5d:fb:f4:bd:c1:9f:de:52:77:db:
         cd:26:3b:c3:ae:a1:6e:66:f6:70:b9:97:fb:5e:e9:80:94:a6:
         41:83:9b:b9:c1:0b:cb:55:3f:e2:04:42:e4:f4:aa:54:62:57:
         ed:45:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----