Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File:                     kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier:          6Cm+Fkjogy6IVWgImC+vC+HvPIl8I4g4pOrBCDBRXQE=
Subject key identifier:   22:57:A5:72:07:01:D8:68:7E:E8:77:70:1B:BE:77:17:AC:A1:32:8A
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer:       /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial:       01962E98C383AFC1F069EA17E5A2ADD884F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number:          11A7
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
                          2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: q5wzbyfbvgHkoATSUny1to3ZbwncNV2PnViv7nrm7FE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c3:83:af:c1:f0:69:ea:17:e5:a2:ad:d8:84:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=2257a5720701d8687ee877701bbe7717aca1328a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:78:d3:56:cd:46:3f:7b:a8:ea:53:e6:9d:
                    04:b0:e2:6e:4a:47:ee:6b:ed:8a:17:04:83:07:e4:
                    2e:13:db:5d:7c:3c:37:28:be:13:0e:44:97:1d:1d:
                    e4:76:6f:fd:6a:32:8d:17:07:05:df:11:3d:3b:97:
                    5a:fd:d0:9f:2d:e4:8b:1f:2b:c1:e3:a8:d1:7b:39:
                    59:09:a0:1b:5a:43:40:29:f7:4e:c0:ef:1b:ea:2a:
                    4e:a9:67:ad:43:6b:72:ab:55:fa:e3:0a:03:36:0a:
                    76:46:0a:e7:c3:0f:56:41:8e:11:d6:5c:22:70:42:
                    fa:93:d4:59:63:b5:41:30:21:2c:01:74:43:a5:6e:
                    d6:de:24:20:df:7c:06:46:57:dd:2a:ed:69:da:df:
                    81:f1:b0:0e:bb:dc:53:34:ce:e1:6a:bc:e4:73:9b:
                    e1:ce:9a:b1:0d:2a:60:de:75:98:f7:a2:31:2d:d8:
                    25:8c:28:f9:c2:d4:45:8d:2a:0b:43:ee:c3:6d:c5:
                    77:cc:8a:c9:b5:be:f6:ac:fa:79:38:81:eb:41:c5:
                    82:91:0e:2a:2e:aa:9b:18:93:f2:5c:2c:ba:89:d9:
                    93:c6:af:2e:95:e2:7f:11:96:2d:54:9e:36:f4:c2:
                    d9:77:46:a3:9c:05:14:31:20:44:e0:17:53:28:e2:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:57:A5:72:07:01:D8:68:7E:E8:77:70:1B:BE:77:17:AC:A1:32:8A
            X509v3 Authority Key Identifier:
                keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:08:43:a5:09:fa:da:38:3d:58:42:ce:6f:82:eb:a2:09:d1:
         ef:dc:d4:c6:59:74:5e:1e:87:60:ce:56:c1:c7:49:0b:3f:e3:
         fa:73:ba:ca:f8:00:b1:ef:bf:7a:76:88:64:04:f8:b0:91:77:
         bf:57:8e:66:c7:af:ed:aa:11:20:40:39:16:23:2b:c5:2c:2d:
         09:3a:1f:da:0f:c1:88:e3:2c:9f:62:0d:e2:1c:b5:35:a0:d0:
         87:9a:8c:89:2a:57:19:b5:1c:93:79:50:fd:3e:a9:5f:45:b6:
         c6:e2:63:54:a9:d9:81:d1:70:e0:74:10:1c:43:79:48:02:94:
         e5:8e:67:d4:76:7d:c4:73:77:68:a0:3f:73:e5:4e:0d:30:aa:
         b0:37:91:36:06:62:d6:1a:65:35:c1:dc:f7:cf:03:21:cb:9b:
         ab:ee:2d:24:17:b2:c3:ed:0c:87:70:5d:0b:bb:fa:a3:57:47:
         35:89:fc:83:e7:4f:6b:4f:7e:12:2b:f6:e9:df:02:76:a3:6b:
         95:d1:e7:a9:04:70:f9:28:7e:4d:49:fc:6d:a9:30:e9:43:41:
         53:17:13:18:fc:8c:5c:20:a2:c9:e7:e6:ec:6e:b4:fe:1a:21:
         12:b8:2f:ca:70:65:ec:04:97:80:eb:51:88:ae:60:69:de:02:
         81:c8:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----