Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File:                     KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier:          Uo+ojAR3+nSyfF1nngZENEF9MT7/3cn5zA2MavceCBs=
Subject key identifier:   24:91:46:48:BB:C6:DD:F0:6E:72:CD:18:6F:87:D1:4B:78:F8:DD:F5
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer:       /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial:       01962FAB2BD8B5F152974148BE98BB3EE2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number:          05E8
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: 39XgUaUVbbViQu6vrRdDm4TvmY3gN0YuUeNe9GNTFFA=)
                          2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:d8:b5:f1:52:97:41:48:be:98:bb:3e:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=24914648bbc6ddf06e72cd186f87d14b78f8ddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:ac:aa:45:5d:ef:64:07:43:02:03:76:2b:
                    93:5a:2b:90:b4:77:81:f2:1d:d7:67:89:f5:0d:b6:
                    f8:8f:46:34:8a:e0:5c:f0:9d:d6:7f:91:66:34:a8:
                    ac:9f:f5:8a:40:26:83:2a:2a:2f:d5:ac:c0:18:38:
                    bc:77:a4:b7:a1:7b:06:a3:28:15:23:73:ad:d2:97:
                    9f:e1:71:cc:35:49:74:ec:05:92:ef:b1:7b:98:02:
                    51:24:33:4b:26:ea:26:e1:b0:ae:57:07:b0:9e:5f:
                    37:0b:bb:76:a1:d7:c3:80:c0:fc:6a:30:65:12:03:
                    99:8e:dd:e9:19:86:a4:a5:bc:d6:a0:82:5e:f8:b1:
                    80:61:9c:e3:5f:40:d8:57:e8:96:12:33:39:77:80:
                    78:63:60:63:94:81:d4:d1:1c:27:d8:1c:86:67:f4:
                    09:33:35:47:3b:01:94:37:f0:c1:98:37:b3:4e:33:
                    40:57:84:a3:92:ca:56:52:3a:7b:e7:2c:39:7b:1e:
                    05:4d:a3:7f:f8:33:bf:5f:c4:0e:70:ef:f9:e1:18:
                    bb:db:81:54:78:c8:06:c2:bc:4f:f8:34:68:9a:13:
                    39:5d:53:d2:d1:b6:f0:c7:af:c5:66:58:15:20:9d:
                    58:f1:b4:e3:51:66:22:07:60:d1:d4:83:c6:97:ab:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:91:46:48:BB:C6:DD:F0:6E:72:CD:18:6F:87:D1:4B:78:F8:DD:F5
            X509v3 Authority Key Identifier:
                keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:34:f4:84:bf:ac:dc:13:3a:b1:93:ff:e5:ca:43:9e:e6:
         57:69:9a:13:41:44:35:51:47:80:1e:e8:1f:58:21:08:9d:e0:
         a4:c8:d3:3e:29:b1:4d:19:47:9c:b9:c5:94:de:11:74:89:83:
         51:be:c1:3e:fb:01:d7:b7:ba:ab:c9:63:06:c3:e0:19:de:b0:
         dc:ee:25:f6:89:fc:3e:6f:5a:79:9f:ca:6f:b3:60:8d:ad:ef:
         eb:63:5a:00:5f:a6:a0:40:c0:f8:9b:44:1b:c3:e5:36:1f:f4:
         20:10:cc:5f:35:07:3d:59:63:14:e3:2c:48:6a:3c:c3:56:cf:
         dd:a0:aa:3d:f2:ac:dd:6d:31:e4:5d:11:bc:01:e7:db:43:fb:
         6c:0f:ec:72:5a:99:41:32:d6:80:a8:bc:16:67:8f:f8:79:48:
         09:01:b7:28:9a:21:3e:5e:39:5b:f0:0f:8f:68:17:f2:45:70:
         36:17:25:d6:6c:ad:05:d0:c9:cb:a3:0a:33:2a:80:ca:b6:a5:
         d4:e1:f3:4e:45:79:c1:79:c1:a0:ed:fb:13:ee:83:be:c0:15:
         db:28:c0:5c:67:db:29:3c:66:1d:85:40:8c:61:db:5b:88:62:
         25:0a:de:19:60:03:d9:6a:37:0f:d0:03:4e:bf:5a:85:5a:9a:
         c7:11:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----