Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft
File:                     kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft (raw, json)
Hash identifier:          JPAwl3tSluEFp1h1a1XjLsmnyk9iDppklKd8jXXhho0=
Subject key identifier:   9C:23:57:5C:52:C3:34:FE:17:3D:1F:EC:7E:C2:FB:80:5E:3D:27:7E
Authority key identifier: 91:D3:38:37:0E:10:62:7A:4C:D6:31:E3:FD:E1:86:E1:94:89:8C:81
Certificate issuer:       /CN=91d338370e10627a4cd631e3fde186e194898c81
Certificate serial:       01962E61E516ED07ED98C1184501902EFAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft
Manifest number:          0AD5
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.crl (hash: H4AKx85wppe1br9ww0C89IWf3JMAYFvtqam02nxe3FI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:16:ed:07:ed:98:c1:18:45:01:90:2e:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d338370e10627a4cd631e3fde186e194898c81
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=9c23575c52c334fe173d1fec7ec2fb805e3d277e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:87:8f:49:7e:bb:58:ba:3c:8a:35:83:4a:
                    a0:c6:51:5d:ac:53:ff:79:64:56:5c:b5:f5:60:d1:
                    b2:aa:c3:6f:29:f7:f3:7d:47:bb:aa:8c:37:fa:9f:
                    49:07:a3:66:39:97:62:ed:20:55:37:99:12:91:23:
                    54:9d:82:23:70:98:5f:86:0e:40:41:bb:93:d0:7a:
                    43:c0:ba:a5:23:8f:da:88:5f:ca:4d:ce:20:ab:9d:
                    9d:23:3b:16:ba:0c:ce:f7:cb:82:43:da:e0:7e:df:
                    5e:e7:2b:89:1f:52:ee:24:06:b9:bd:f8:54:b6:d8:
                    2a:92:47:a9:74:39:7a:70:b8:7a:07:4b:f7:4c:c4:
                    89:1a:c1:b1:45:8f:a2:42:00:3c:1d:bf:84:02:6b:
                    91:d1:4a:d1:af:7c:5e:92:6d:c1:0d:ac:04:de:0f:
                    62:db:fa:82:53:55:97:e3:83:4e:a6:c1:24:3d:4d:
                    11:b7:90:2c:ed:11:a4:d8:d7:dc:96:ad:55:d9:88:
                    0e:6b:30:97:c1:0a:7f:76:06:92:36:43:f6:d3:fd:
                    0f:fa:9c:eb:db:43:2f:53:82:88:b0:6d:ed:18:24:
                    6d:79:20:1e:c4:8a:c6:6c:97:a2:8f:45:bd:50:19:
                    bc:c2:72:6f:02:2e:2c:fd:9d:02:34:7a:32:a2:ee:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:23:57:5C:52:C3:34:FE:17:3D:1F:EC:7E:C2:FB:80:5E:3D:27:7E
            X509v3 Authority Key Identifier:
                keyid:91:D3:38:37:0E:10:62:7A:4C:D6:31:E3:FD:E1:86:E1:94:89:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/990fda-5905-4e49-a630-15357cd5ece4/1/kdM4Nw4QYnpM1jHj_eGG4ZSJjIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:da:01:71:fa:d0:40:fc:c9:09:87:85:5d:fd:54:77:f4:69:
         67:99:75:a9:f7:b9:c7:14:4d:61:54:27:d8:7e:3e:a2:be:93:
         43:f3:51:90:7a:a5:99:70:f0:41:9f:ce:83:87:c4:2f:39:72:
         2b:07:3e:7d:32:22:45:68:ab:f0:40:ba:12:67:51:00:82:94:
         02:c4:cf:5c:3a:c0:58:6e:58:1f:d0:7d:dc:75:6b:83:58:3c:
         8c:d9:a3:d4:bf:f8:fa:24:ea:b3:04:77:14:29:40:a6:d7:e4:
         5b:94:c6:11:bb:e1:cb:26:bc:81:10:e1:e9:48:77:ad:03:11:
         dc:4a:fb:db:40:ca:3d:78:59:85:02:77:09:5f:f5:00:27:64:
         7b:bf:36:80:b3:f1:d4:05:34:ee:94:0a:75:52:bd:1f:4b:83:
         e0:9e:03:a7:eb:48:c1:8e:04:30:f3:fc:7e:6a:f2:7a:08:1d:
         e6:c3:cd:b4:b3:0f:3e:38:49:6f:22:dc:ff:d9:b1:a4:42:b6:
         80:37:a9:af:9e:f6:41:8d:e6:1a:d7:e9:f0:32:0f:bf:8f:28:
         a6:1c:23:f5:e9:b7:41:3b:f9:31:2d:fc:bc:9c:93:89:ba:e5:
         77:b9:d4:aa:ea:b8:0b:9e:3d:f3:e0:78:c4:a3:fc:16:d3:07:
         16:e3:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----