Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          zxK+504wNFNidFfUIlwR1hzf0lpG/i8Zg0Koe6gqLi0=
Subject key identifier:   CB:E2:29:C2:05:7E:76:78:D5:11:DC:C6:7B:7D:8E:FC:55:91:10:13
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       01962E2AD6F7845C6B052D822E4E4AAF3604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          03D4
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: YWnBxgrbkbqX1eio8gBQ01LHJ7JpGHyDGB18hFU/5H4=)
                          2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:f7:84:5c:6b:05:2d:82:2e:4e:4a:af:36:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=cbe229c2057e7678d511dcc67b7d8efc55911013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:a9:7a:ba:dc:02:82:50:44:9c:34:8c:a9:
                    7a:e7:b7:7e:b7:90:a3:41:5c:a7:a2:b4:8f:32:db:
                    ef:fe:6d:43:86:13:3c:eb:a2:69:4b:69:7e:1a:73:
                    0a:bb:a5:5f:ca:ff:38:2a:4d:4f:b8:91:55:3f:51:
                    8d:6a:f2:9f:65:4a:73:ef:ad:5a:08:3b:61:2a:ee:
                    ba:e6:2e:4d:54:53:3e:d4:ca:3c:12:d6:ab:52:57:
                    dd:21:42:c6:1f:e2:23:25:1d:9f:0d:db:c0:4a:6f:
                    fa:b8:51:50:51:3d:f7:58:02:66:6d:4c:c6:64:22:
                    51:0d:6e:db:f2:29:e7:44:da:7b:5e:9a:bc:15:05:
                    2f:bc:68:71:c7:62:87:14:1a:8d:8f:de:80:d5:9b:
                    0b:2c:44:05:6d:ed:07:eb:91:bc:41:30:77:d4:4e:
                    26:bd:36:4e:ad:79:5d:62:ae:ae:b7:2a:db:2c:64:
                    a3:19:98:58:69:0a:4f:fe:0a:52:d9:d2:68:05:a5:
                    bb:08:a7:b4:5a:1b:62:a3:65:44:4c:1c:65:3d:e3:
                    f0:e0:ee:f3:60:e3:17:3f:eb:68:e9:d5:6f:e8:df:
                    58:ff:10:5e:c0:8a:e8:f5:29:5c:61:18:cf:09:c4:
                    b5:9c:47:83:35:d6:3f:b1:32:5d:36:ba:24:64:34:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:29:C2:05:7E:76:78:D5:11:DC:C6:7B:7D:8E:FC:55:91:10:13
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:d5:51:91:0d:af:fa:a6:bd:c6:7a:47:3d:00:42:fa:22:
         fb:19:64:33:96:eb:d2:cd:54:5a:f9:0a:8d:43:ec:fb:35:fa:
         a2:e9:d7:ae:ad:41:20:98:c9:16:18:03:2c:5e:00:31:12:7e:
         bd:85:61:01:9b:f7:90:ea:f7:df:ea:72:d8:bc:80:0f:ee:5a:
         43:15:d6:b6:6e:23:45:7c:d1:47:7a:5f:f1:13:f9:0e:fd:42:
         5f:fb:73:6c:9a:17:cd:45:0e:b7:ed:27:25:3c:25:69:45:6a:
         1b:16:93:21:a7:ba:64:53:69:ae:29:4c:b3:83:07:b4:92:f1:
         f0:8a:dc:fd:00:3b:cc:9f:2e:f9:9f:2a:6e:8b:0d:2d:56:0b:
         7f:e2:21:12:ba:66:9c:95:01:2a:08:dd:8b:23:44:97:71:b7:
         16:53:9d:43:92:16:e2:cd:73:35:16:d5:6e:18:c4:f9:d0:0a:
         be:aa:5a:45:6b:b4:80:5e:21:06:3a:90:67:75:be:1c:22:df:
         8b:fa:0c:15:af:e4:ca:1e:c0:bc:5f:f8:fe:7d:15:ad:2d:79:
         5f:5d:17:56:8d:cf:e4:35:17:dd:9f:71:88:3e:87:09:65:69:
         ac:39:ac:68:7a:ed:8c:84:fd:1a:31:59:81:82:bd:91:25:a0:
         01:78:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----