Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File:                     KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier:          AWbqsTuvYg1twIowcrPSR2+IuXsJrkQV+ej9qNwXaIE=
Subject key identifier:   1A:77:DE:B4:B8:7D:05:2E:3A:41:B0:61:A3:87:D5:2F:5A:C7:63:50
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer:       /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial:       01962DF416996A5079D3D2F0CC93AD1A69D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: uBCax1ze5NwoofFJ2f3UmaFFiC9hu2BN3tdn4y8O7bw=)
                          2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:16:99:6a:50:79:d3:d2:f0:cc:93:ad:1a:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=1a77deb4b87d052e3a41b061a387d52f5ac76350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:0d:48:89:e8:25:df:b0:3c:53:23:0d:c4:
                    3f:75:4f:e0:00:39:28:bf:72:d9:57:c6:6b:91:5c:
                    22:5d:4b:5d:b4:09:df:fb:58:5b:29:b4:af:db:38:
                    bb:4c:51:90:33:a8:2f:bf:bd:84:ba:8d:43:11:3e:
                    4f:df:46:1b:34:21:78:dc:88:d4:30:ed:a9:1c:83:
                    ac:0c:2b:c8:80:78:2e:ca:25:b5:78:7c:84:fb:1d:
                    46:36:03:c6:28:d3:ab:39:9f:8f:45:0c:83:6c:c1:
                    0f:34:df:f6:69:d6:fd:85:02:65:aa:34:48:d1:e8:
                    2d:63:ec:48:70:3b:b4:03:1b:38:30:db:3a:b1:d5:
                    4a:5b:26:03:2b:84:7c:28:c6:4a:ac:04:ac:f4:bf:
                    1b:5b:00:84:13:c1:16:30:b8:d6:8f:d4:8d:83:f6:
                    2d:18:0b:32:3d:0a:1b:80:1b:77:69:85:b8:5d:5c:
                    e1:49:4b:04:7e:b6:0f:32:31:55:2a:f5:c1:f7:68:
                    37:83:6e:8b:a3:ad:6e:d9:54:eb:3f:b2:a7:ab:1c:
                    a8:13:39:66:7e:b9:bf:e5:89:97:ee:41:80:c5:19:
                    93:69:c6:8b:9b:01:dd:a5:4d:3d:a9:62:38:bf:5a:
                    f7:5f:73:1e:06:d9:52:c0:37:42:43:82:a6:fd:cc:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:DE:B4:B8:7D:05:2E:3A:41:B0:61:A3:87:D5:2F:5A:C7:63:50
            X509v3 Authority Key Identifier:
                keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:8b:cc:23:3c:f2:ea:a8:63:57:60:fc:e0:0c:50:db:0f:
         7f:fb:b7:1c:a7:a2:7e:05:d7:b5:ab:bc:3a:62:48:11:63:64:
         2d:91:96:9a:fe:1a:f3:a7:4b:7e:71:8c:62:b1:6f:7c:3b:8a:
         b9:18:ed:fe:11:7c:fb:79:a6:d4:45:4c:c7:db:a8:5a:65:ee:
         65:41:b0:99:89:c6:c2:bc:24:50:5c:d1:50:4d:44:d2:44:cb:
         2f:a3:42:cf:51:9c:25:0a:25:fd:1d:69:53:db:df:82:57:d7:
         8c:65:9f:75:37:bb:88:68:d3:bd:72:eb:a0:ff:45:72:16:68:
         e6:37:47:4d:33:5f:44:8f:92:0c:04:41:50:68:38:b2:ef:44:
         4d:06:ff:9d:d0:89:1c:f5:10:44:e9:f8:f5:83:dd:6c:87:98:
         9c:62:3f:bd:14:af:86:c0:8f:a9:d6:cb:c2:80:ad:a2:1f:8d:
         5e:63:1e:ff:fc:21:a5:5b:d8:23:9a:a7:34:a7:77:e8:66:72:
         4b:16:89:f4:bf:55:50:a1:c1:0d:cf:69:d1:71:47:7d:a6:a4:
         c7:19:f1:96:22:a0:23:3c:3d:a1:d5:ea:ce:18:99:81:c0:da:
         29:f8:55:cc:31:de:2d:07:9d:d3:a0:97:3a:d9:d2:84:09:6b:
         e2:a3:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----