Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File:                     K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier:          x67BarnycsxoMkvZ+/EHSkSt0MHDwN4Ik41OpUnN0nw=
Subject key identifier:   93:1A:DB:03:1D:0F:36:58:BB:F3:14:BE:E8:1B:C7:D6:04:BC:84:2D
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer:       /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial:       01962DF3C5B323B6384D6464103732509FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number:          065F
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: pF3Y6VH9xq3+DadPM6XTu0P80nEZByYVSm8G62Wu1zU=)
                          2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:b3:23:b6:38:4d:64:64:10:37:32:50:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=931adb031d0f3658bbf314bee81bc7d604bc842d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:c3:0c:b2:cf:1e:08:8f:7e:a9:56:d1:5f:
                    92:2c:ee:48:56:a7:a2:dc:38:64:88:2f:70:30:31:
                    f8:c3:7f:fa:aa:44:ad:d6:09:d1:e8:aa:9f:db:15:
                    39:17:7f:5f:3b:af:8d:00:90:6c:60:26:86:19:86:
                    f3:51:b6:54:9c:9b:2b:f6:8a:32:22:a7:f4:92:6a:
                    5c:ca:aa:81:da:88:84:76:df:5d:06:53:f3:bd:cd:
                    be:08:2f:b0:73:8e:ec:56:cb:b8:43:a5:b8:20:60:
                    bb:7d:b9:87:85:de:39:13:86:ad:5b:c0:c0:9a:f8:
                    ec:06:02:fe:35:88:1b:e7:83:63:c0:df:56:bf:9a:
                    be:a3:9a:e1:21:09:d1:b3:db:5a:17:5a:50:38:93:
                    d0:19:72:7f:67:ab:97:73:43:d8:ec:1b:5e:ae:f2:
                    40:41:5f:a9:78:9d:f3:55:63:c8:a7:51:50:19:8b:
                    4f:cb:00:4e:48:c3:f1:bc:06:26:db:64:c2:b5:55:
                    03:b3:a5:60:04:4f:31:34:b4:56:ec:0d:4f:4b:bf:
                    bf:f6:6a:7c:55:a6:2c:f4:54:02:63:41:ff:c1:06:
                    73:99:e6:38:5a:54:52:fe:0f:f0:88:cb:13:dc:3a:
                    e2:ee:0f:b6:97:c4:4c:92:dd:e8:f4:22:80:7f:64:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:DB:03:1D:0F:36:58:BB:F3:14:BE:E8:1B:C7:D6:04:BC:84:2D
            X509v3 Authority Key Identifier:
                keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:8e:8b:0d:d2:74:d1:53:d9:72:59:30:18:46:c2:21:f9:
         15:97:39:8c:94:8b:88:d2:28:29:2a:73:83:44:03:77:09:21:
         26:af:f2:c2:46:37:a2:c2:40:e5:ba:56:d1:ec:7c:bb:ff:53:
         f8:71:fa:bb:fd:a0:6e:64:98:26:99:92:68:70:bc:33:63:63:
         e2:dd:b1:8e:b0:ae:3f:5b:a6:80:01:84:b6:c0:ad:1b:a4:00:
         fb:cf:71:f9:2e:2d:98:c1:8e:38:71:1a:f3:cd:46:3f:18:d6:
         ac:77:e4:4c:5f:40:ae:0f:12:11:5f:15:3a:ea:91:b6:1c:2e:
         ab:88:01:9d:11:87:14:d1:1c:8f:56:af:f4:4c:ef:6d:39:59:
         b6:05:ab:19:56:13:26:77:ff:e6:bd:4d:22:88:fe:ca:07:da:
         9a:96:ae:a8:86:a5:0e:0e:23:94:39:c5:05:1c:bc:92:fc:62:
         5d:ae:d8:ea:f6:55:5e:d2:f7:9b:d3:64:a6:a4:c1:a5:90:df:
         7f:42:38:3c:0b:c4:3c:55:48:a5:7c:f5:cc:e7:e1:1c:4d:a9:
         2a:4f:b8:8d:2b:e1:f4:ec:ed:5f:cb:65:a7:61:ea:82:8e:87:
         09:57:79:bb:12:98:fb:80:7c:7c:68:03:db:9c:88:eb:41:d8:
         42:5b:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----