Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
File:                     Kc_ykaA7rauF42R6ojUPE8XyZmE.mft (raw, json)
Hash identifier:          0TvmSHp+wc6cUu510sMpSkufBiD4RIjt3xxhvSjWZ34=
Subject key identifier:   2D:D3:22:5C:20:EF:B7:12:E1:D2:34:21:24:94:F1:52:25:76:11:97
Authority key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Certificate issuer:       /CN=29cff291a03badab85e3647aa2350f13c5f26661
Certificate serial:       018F24CBA5DFCB49619D71929D33083DE7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
Manifest number:          08B3
Signing time:             Sun 28 Apr 2024 13:01:17 +0000
Manifest this update:     Sun 28 Apr 2024 13:01:17 +0000
Manifest next update:     Mon 29 Apr 2024 13:01:17 +0000
Files and hashes:         1: Kc_ykaA7rauF42R6ojUPE8XyZmE.crl (hash: 3fRdy0tLp3LzABZeeZzvujcS/Dy1ytA4die6b52ZWpc=)
                          2: hAbDwQMe7AG_oAVNR_K1jf0SonQ.roa (hash: V6PTvmXBIziZIqlaCcdK8R9S3RQBNBNJYz0Bso0O5Zs=)
                          3: kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa (hash: qCqQOQZXzu8ejM+/5QA8UQFdplXH2ShWmWJnT/PtPyk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cb:a5:df:cb:49:61:9d:71:92:9d:33:08:3d:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cff291a03badab85e3647aa2350f13c5f26661
        Validity
            Not Before: Apr 28 13:01:17 2024 GMT
            Not After : Apr 29 13:01:17 2024 GMT
        Subject: CN=2dd3225c20efb712e1d234212494f15225761197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:e0:8a:c5:77:ab:15:36:a8:d5:6c:3d:c4:
                    b8:99:42:46:26:7a:1e:51:f7:74:55:99:9a:03:e4:
                    1e:0f:1a:05:4c:ab:86:74:0d:52:1a:09:8a:e6:a8:
                    15:9e:c1:12:a6:bd:14:4b:30:af:2f:48:69:45:17:
                    99:57:b0:16:fb:62:08:bc:c1:b6:d7:46:34:fb:7a:
                    27:67:48:68:f2:5f:cf:52:f2:20:b3:7b:29:0a:b0:
                    3d:e1:29:72:2e:04:f4:d7:1f:e9:3e:f7:2d:64:9b:
                    47:0a:4d:74:25:46:a9:a5:9d:79:e7:00:50:0e:fc:
                    b7:1e:a2:78:14:b7:30:b9:59:1c:92:e4:e1:e6:18:
                    da:59:3a:2c:b9:50:33:b6:58:2f:be:91:2e:39:c5:
                    6f:51:a2:83:71:89:e7:42:01:84:53:3a:68:6a:66:
                    ca:f8:80:b9:f2:58:18:91:5c:af:53:89:02:02:66:
                    d9:f1:ec:f0:20:07:a7:b5:49:65:f6:a4:c2:14:27:
                    c8:e6:aa:6e:0d:f3:2d:f9:66:cd:26:88:af:49:4a:
                    9d:52:c5:20:63:c4:c2:bc:ef:47:82:a6:ff:67:f5:
                    ed:ca:b7:86:8e:85:fa:2e:9c:1b:0f:38:3e:9c:70:
                    e2:f7:1c:00:47:84:a0:58:91:90:00:c3:d3:53:92:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:22:5C:20:EF:B7:12:E1:D2:34:21:24:94:F1:52:25:76:11:97
            X509v3 Authority Key Identifier:
                keyid:29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:95:62:7b:bf:b3:41:a4:92:4f:b1:a2:07:95:e5:ea:ca:b4:
         1a:bf:71:69:d2:1e:a5:0b:3e:c6:00:3c:df:6c:29:29:ba:37:
         8c:9a:a7:fd:ed:ff:ab:a7:0a:af:72:65:85:81:2d:10:9d:c0:
         03:07:ae:4a:05:04:db:55:c9:58:6b:c2:a2:17:b8:66:5c:5a:
         84:84:92:1f:fa:45:22:46:98:02:2c:31:17:f8:79:35:28:b7:
         5c:ec:72:0a:69:9c:fd:2c:6f:42:33:42:77:3c:dc:65:f2:25:
         b1:d9:be:1c:f2:09:64:db:9c:9d:6a:35:c7:25:fc:44:c5:dc:
         4c:b7:79:01:fd:38:68:31:71:18:61:ec:02:93:62:92:02:69:
         5e:de:9a:95:46:1e:ac:72:ce:9f:fb:f3:b2:63:5b:ce:b8:ae:
         fd:af:59:83:5a:28:86:e3:99:0c:75:28:f4:fb:c9:a0:49:28:
         78:2e:0e:39:fd:8b:ee:32:53:f9:56:46:bd:09:35:cb:a3:e4:
         b8:65:bb:62:d9:f9:84:fb:ce:46:99:0d:c5:5f:d4:c4:71:83:
         0f:f2:29:4a:71:71:23:03:f7:07:fa:0e:b9:70:ac:90:48:27:
         f4:b1:33:1c:21:66:83:13:ce:df:50:f0:f8:40:bb:0d:81:16:
         51:bd:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----