Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File:                     KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier:          GlVdrgqH2ros/1Wx21FH5iNNC9ExHgt4cTEl2FM7NrU=
Subject key identifier:   32:B1:D5:3A:23:D1:4F:C3:9F:04:31:C1:42:60:BE:AB:0A:B7:AF:42
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer:       /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial:       01962ECFCDAA3228A19C5B09D519F22786D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: 62tTxOzgxKOaQG8E5Xck83NmIWw4TR51jymYPDXQ+W8=)
                          2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
                          3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cd:aa:32:28:a1:9c:5b:09:d5:19:f2:27:86:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=32b1d53a23d14fc39f0431c14260beab0ab7af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:ca:72:8f:7e:83:ba:e0:73:aa:cd:d2:a1:
                    c1:6e:19:1e:90:79:70:fc:6e:db:4b:5c:e6:c0:71:
                    3f:35:62:54:50:5f:94:72:46:b2:1c:2a:e2:ce:72:
                    2a:fb:e6:0b:95:ba:cc:b7:2b:bb:b2:15:40:a8:a0:
                    72:e6:da:b0:0a:3a:4b:a0:4c:97:e3:9b:2e:3c:d3:
                    84:1d:56:5e:cb:74:4a:45:67:b1:87:d5:68:e6:67:
                    cb:91:d8:ef:bf:14:4b:37:d7:d4:53:fd:aa:33:45:
                    8c:63:bb:ae:1b:bf:f4:93:ce:2c:33:3f:cc:28:e3:
                    e4:98:12:da:9a:b2:8f:0d:ea:6c:61:71:7d:ff:df:
                    fb:2e:69:7f:8f:fa:f0:f2:ba:b1:ca:12:34:87:f6:
                    cc:54:60:5a:6a:e7:b6:c0:49:ff:65:c7:6e:66:b0:
                    d8:c4:1c:35:d0:22:a0:50:43:4c:8c:aa:d8:fd:41:
                    ec:19:d8:a4:9f:0d:c7:5a:f2:13:53:a8:b3:7a:ad:
                    cd:01:f0:0b:d6:8d:1f:2d:04:e1:79:7b:db:dc:ae:
                    cc:c7:a7:af:93:f5:7a:21:12:00:37:d5:c6:cb:7d:
                    68:c3:a6:91:fd:8c:f4:17:a7:8f:39:c8:06:3b:15:
                    00:f3:e9:d4:8c:bc:d8:15:1e:12:fc:c1:63:9b:49:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:D5:3A:23:D1:4F:C3:9F:04:31:C1:42:60:BE:AB:0A:B7:AF:42
            X509v3 Authority Key Identifier:
                keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:56:81:ba:c4:18:c4:0d:36:a3:6c:ce:e9:5a:59:16:5b:22:
         b9:d1:77:43:58:8a:97:1b:1d:84:23:52:a1:dd:d4:e0:9f:13:
         77:24:dd:db:0c:76:de:fd:ed:18:91:b7:58:2f:fa:ee:c7:70:
         f6:89:c7:17:72:9e:34:8a:fc:c2:84:d5:79:e2:33:ea:3d:ff:
         51:b4:50:a6:af:a7:a3:76:90:74:fb:a0:3e:9e:be:2c:66:18:
         7f:ee:73:05:59:2c:34:12:58:5e:83:e6:b3:9d:d8:64:23:45:
         5a:6c:e3:85:2d:0d:30:90:6f:da:e6:27:29:36:f7:ef:1a:0f:
         6d:74:d8:c2:ff:54:cd:0a:5d:c7:cc:8f:4d:6d:47:bc:9f:9a:
         17:f7:7e:b5:12:29:ac:4a:2f:46:4c:d2:c3:0d:ef:72:8f:4c:
         0b:e7:6a:36:96:2d:d5:72:5d:e3:d7:75:eb:ab:4b:ac:d2:46:
         1b:d2:54:63:16:aa:2a:c0:8a:88:11:46:19:99:7a:8b:72:3e:
         8a:06:a9:42:c8:64:ef:e3:ce:95:6c:ad:49:16:6f:48:85:9d:
         06:90:fd:e9:16:22:6d:74:78:f2:15:b0:d5:44:98:e6:45:8e:
         cb:17:f9:c3:77:19:10:3e:1e:24:40:d4:35:3d:b9:33:57:bb:
         97:ee:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----