Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          j2N28oLMvw5puPMFgtiLMgTJ3nVZiA8wTTjpxFWAaYg=
Subject key identifier:   0D:C2:65:69:A0:54:C2:00:96:F7:BF:E9:81:D3:52:36:E4:E1:08:8D
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       01962F06FEC5596D76E9D5A231AD6B5B6619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          0298
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: +YYCXO17vOokHFdgRKYMeIX+/jyKs97dFIcsTsOj6Ls=)
                          2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fe:c5:59:6d:76:e9:d5:a2:31:ad:6b:5b:66:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=0dc26569a054c20096f7bfe981d35236e4e1088d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:0b:8d:79:ad:97:83:5a:de:f8:f7:ca:2d:
                    e0:8e:8f:08:b9:1b:85:b7:80:5b:27:b3:ba:0a:c3:
                    3d:80:7c:60:97:05:2f:5f:e1:07:3d:0c:13:32:89:
                    6d:18:81:11:a6:75:3a:a6:d5:8d:b1:e8:84:9f:fd:
                    44:0c:f3:40:39:4a:3c:10:22:02:76:2d:eb:67:d1:
                    1f:ff:eb:05:32:b6:50:9e:97:e6:6b:79:41:57:32:
                    b6:af:7e:55:60:95:01:54:ed:b7:8e:cb:39:b3:4e:
                    6d:8d:81:24:3b:77:ea:74:ce:3c:17:08:96:4f:9b:
                    fd:7c:84:f8:e0:59:75:0c:b9:f7:fa:fc:91:46:75:
                    f5:bf:69:b1:d1:9a:a4:6c:f2:6a:34:6b:65:c6:5a:
                    c1:c0:18:e3:61:b7:f6:88:03:ef:0e:10:62:54:df:
                    09:44:70:a4:99:83:89:82:df:9f:62:42:56:d4:86:
                    c4:b2:c7:6a:72:10:92:c9:3d:3a:7d:7f:46:0a:b2:
                    5b:1c:77:3d:f0:cb:7d:a5:46:c9:71:f2:aa:3e:62:
                    a0:c2:61:01:3f:ff:0d:f5:bd:85:8d:53:4e:15:88:
                    24:e8:cf:58:89:18:a6:b6:43:75:5f:f9:63:d2:57:
                    34:e7:91:18:cf:fc:5f:38:06:e3:2a:b3:75:91:e5:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:65:69:A0:54:C2:00:96:F7:BF:E9:81:D3:52:36:E4:E1:08:8D
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:5c:98:9b:bd:b2:94:75:af:e2:8d:32:18:7c:1c:05:ee:
         94:42:95:a8:1d:9f:37:70:e1:eb:de:5f:cb:42:ae:d3:b3:4d:
         23:8c:9b:19:bd:1d:5f:6c:aa:9b:95:b3:d1:35:85:ab:95:5e:
         a8:11:98:e5:9b:bc:e1:46:b0:38:8d:39:9a:e3:59:24:6f:23:
         f7:07:f4:57:b9:c4:7e:c3:42:f6:18:f5:c4:ac:29:f7:d9:8c:
         f2:11:6c:eb:06:58:51:1b:56:d6:e7:75:c6:4a:83:80:3c:00:
         07:06:e8:3e:db:8b:2f:1b:7f:45:76:2d:98:84:5c:ac:8f:eb:
         3f:b8:34:00:7b:b2:1d:95:e6:5d:3f:4a:77:63:62:35:25:c1:
         3d:2e:25:15:52:4d:de:f0:e5:81:de:0c:46:58:5f:47:32:47:
         19:9c:41:ba:74:06:e1:d8:cc:50:cb:6a:fd:75:22:a6:f3:fb:
         2f:a5:5c:a5:fd:2c:9e:6e:46:b0:18:3a:cc:23:be:b8:00:97:
         68:52:d2:90:54:46:9f:48:41:f5:a5:2a:0e:12:81:63:c9:37:
         50:03:5d:6b:95:b7:ac:18:e9:ee:80:e9:08:8c:51:23:fa:40:
         79:63:71:2b:0f:4c:cf:27:1f:eb:10:ff:ad:39:07:44:9f:1d:
         43:a5:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----