Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
File:                     KHtQElUXlEJ0oUa7rNZOaRog-gY.mft (raw, json)
Hash identifier:          0TYE/vK8C0rfoB1id65lQ6iyYpO0xFHzCz1bO1raR5c=
Subject key identifier:   6E:51:8E:71:9A:57:4A:AD:14:5D:5D:6A:98:F9:82:97:38:07:CD:80
Authority key identifier: 28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06
Certificate issuer:       /CN=287b50125517944274a146bbacd64e691a20fa06
Certificate serial:       01962E98820FF0433BE576AC54C81B12B444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft
Manifest number:          0D94
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: KHtQElUXlEJ0oUa7rNZOaRog-gY.crl (hash: +N3oP/FSB9mb4fyLyNXuxIUNGpxN3KGN6gVt6w6sHjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:0f:f0:43:3b:e5:76:ac:54:c8:1b:12:b4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=287b50125517944274a146bbacd64e691a20fa06
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=6e518e719a574aad145d5d6a98f982973807cd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:0e:2b:0e:8b:6a:ac:99:bd:62:f6:ef:f1:
                    2b:c5:ef:3a:2d:2b:ad:8a:0c:6d:53:cf:88:ee:67:
                    9c:e1:09:06:c3:22:fb:3a:6b:df:f7:69:cc:71:18:
                    fb:e4:75:19:5c:d5:e8:ef:67:55:c1:0a:ab:71:68:
                    67:20:5c:5c:58:c8:f1:30:02:eb:77:1f:ff:e5:a0:
                    fa:93:52:55:27:82:37:8d:51:16:14:f4:f5:4d:3c:
                    ca:eb:50:61:68:a1:dc:57:86:34:bd:4f:9f:70:df:
                    e7:90:33:52:a1:60:87:e7:40:a2:8c:bd:25:46:f1:
                    b0:66:59:05:77:8f:76:25:94:16:98:dc:a0:a9:e0:
                    86:1a:3c:67:62:f3:20:eb:b5:4b:7e:0e:91:c8:72:
                    5a:5a:c2:0f:64:57:39:e3:7b:2a:7c:31:4d:09:5d:
                    53:bd:a1:b0:0b:8b:0c:7e:f7:1b:ea:2a:41:75:73:
                    ce:96:e6:23:84:b7:5e:95:fc:68:80:ac:ed:b7:8d:
                    3d:44:a3:6b:2b:7b:b8:60:fe:32:96:a3:09:72:f3:
                    61:63:74:ea:0c:69:f4:aa:aa:ad:35:72:16:dd:f1:
                    c7:54:bb:f7:49:5c:a6:d8:12:73:61:cc:8e:de:5b:
                    97:35:a6:83:10:60:32:31:00:c0:4e:b7:06:93:98:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:8E:71:9A:57:4A:AD:14:5D:5D:6A:98:F9:82:97:38:07:CD:80
            X509v3 Authority Key Identifier:
                keyid:28:7B:50:12:55:17:94:42:74:A1:46:BB:AC:D6:4E:69:1A:20:FA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHtQElUXlEJ0oUa7rNZOaRog-gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/41a443-ee2b-4646-ba68-aab6c8ba5bd4/1/KHtQElUXlEJ0oUa7rNZOaRog-gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:44:eb:b3:b9:5f:2d:18:96:19:38:52:b3:29:40:5a:e8:a2:
         d3:4b:4d:2b:a2:7c:32:82:6d:0f:87:61:98:4f:d2:27:20:3d:
         6e:ff:c4:e3:38:e1:9e:ce:57:ea:77:bb:94:c3:a6:11:b6:9b:
         36:ff:b8:a9:95:0f:25:a7:02:28:0d:06:0b:86:6d:7b:24:0e:
         9b:cd:c8:6e:58:8c:c8:ca:70:76:35:2e:c8:f7:97:ea:b7:45:
         f4:4d:f4:6f:05:01:6f:eb:77:66:8d:3d:19:58:0c:25:da:fa:
         f2:f8:dc:81:6b:df:66:ed:51:2c:0c:96:86:bd:19:51:ad:da:
         76:db:cf:3f:9b:c0:3a:2a:46:68:71:9b:49:e6:2f:43:c5:c2:
         de:d9:be:4f:a9:5c:2a:27:76:78:c0:58:70:6f:40:57:bd:4e:
         09:9f:6c:79:86:f8:56:0c:72:c6:91:17:4d:07:39:96:b0:90:
         7a:24:00:6d:08:2f:47:05:37:85:24:df:c1:33:3a:33:b8:f5:
         dc:f1:93:19:02:da:24:02:39:f9:ae:71:87:9a:3e:66:8e:cd:
         3b:aa:12:32:b0:1b:d7:9c:fb:d1:78:ca:fe:05:90:1e:73:9c:
         8c:c3:29:e1:19:ac:59:f5:0a:cf:f3:b8:25:cb:0f:23:e1:d8:
         8a:72:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----