Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File:                     KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier:          ekeJPlkF/3KXKK41warjw+cAcYX5gULWsRWFjct4eho=
Subject key identifier:   0F:E4:63:49:5E:24:85:E8:4B:EC:D9:E4:20:31:50:37:78:53:78:46
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer:       /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial:       01962F7485976CF199BF29B59512D597AABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number:          1438
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: nHQcvoI5VbZdPUEdI2buvo494f4pR63HFWeaATxyV7I=)
                          2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:85:97:6c:f1:99:bf:29:b5:95:12:d5:97:aa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=0fe463495e2485e84becd9e42031503778537846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:e6:93:24:59:5e:a1:04:e8:79:47:cc:d0:
                    d5:fd:ba:f9:b4:67:a3:54:9a:f2:8d:6c:2b:cc:5c:
                    36:73:8c:9d:6c:e1:02:a7:d9:fd:17:58:fa:c9:c6:
                    0a:c6:4a:d6:f8:59:37:db:2b:71:d0:98:67:e4:3b:
                    52:8d:56:4c:a6:fb:6b:5e:56:98:eb:8f:b6:80:b3:
                    f1:bb:a2:74:93:81:b5:d4:c7:5e:85:39:97:1d:2a:
                    85:35:75:1f:f2:13:a2:44:a7:97:b2:82:2c:38:f3:
                    ea:14:a2:13:54:14:c9:89:9f:f4:50:76:af:d1:55:
                    e7:dd:ae:77:91:3b:b2:9c:20:bf:8f:75:d4:69:8d:
                    f1:6a:b3:43:4b:69:7d:57:43:36:8f:84:4b:5e:c2:
                    f1:dc:a4:85:7b:4f:69:d7:56:5c:36:56:77:74:b0:
                    49:ad:bb:08:7f:ef:45:7b:e4:43:c4:23:fc:af:3c:
                    bd:e9:4d:6c:13:0b:e3:37:4e:8a:cf:79:bc:5a:54:
                    03:33:8a:00:94:89:73:4d:4e:f6:dd:ab:22:2b:b1:
                    4d:d4:dd:e1:2c:84:cb:3a:eb:66:b4:25:86:62:e2:
                    bb:ab:f1:e1:75:85:8b:f0:05:12:5d:e8:5e:5a:b1:
                    33:19:e2:52:8d:d7:35:fe:1a:76:20:77:b2:59:fe:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:63:49:5E:24:85:E8:4B:EC:D9:E4:20:31:50:37:78:53:78:46
            X509v3 Authority Key Identifier:
                keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:58:63:03:03:72:8b:4a:b0:a7:a3:d7:c8:28:82:ea:db:
         d1:a9:ed:8c:14:73:3d:69:04:87:fa:63:61:04:2b:e3:4e:50:
         f2:bb:80:25:5f:0b:d7:58:36:a4:e2:12:20:a2:16:2f:7f:07:
         d1:80:e6:33:67:ea:f9:37:8b:a5:3c:56:58:94:47:78:4b:b9:
         21:89:67:29:1f:d5:61:b8:95:c7:73:91:d3:f7:c8:12:c9:06:
         09:ac:f3:54:97:af:17:c8:55:fa:76:e9:62:10:30:2a:ba:71:
         32:a1:da:79:32:98:ea:03:0c:0c:a8:94:08:9c:f3:9f:60:33:
         47:4a:ab:5b:02:0b:a1:01:3e:4b:1b:aa:da:28:74:81:38:a2:
         f8:8d:d0:98:b5:c5:9b:1a:7e:8d:d2:12:1b:98:9b:d4:20:33:
         b1:7a:77:85:5a:1c:6e:46:8d:3e:b5:ab:94:cd:ca:d8:14:7a:
         f4:b3:e3:76:f1:d9:ed:3d:0c:38:c6:15:19:f2:7c:21:e1:c2:
         f3:9e:47:56:11:4c:a6:f0:88:6c:df:a9:ac:9c:33:54:c1:7c:
         39:d9:44:8c:2b:e5:50:b1:eb:e7:5a:e2:36:d5:36:ce:a5:20:
         ef:13:bc:8d:ab:d0:51:6d:bf:03:6a:6d:57:a6:a2:6b:f3:45:
         31:38:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----