Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          z6xIaDQqklCr9JcI4mcIlwhRPCp0bQmlwoY2HaE/foI=
Subject key identifier:   F1:51:AA:77:2B:99:18:4D:A7:DA:46:46:8D:B9:DF:8F:ED:84:F3:20
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       01962ECFD590DACD57ADB4FEBEB090FF96DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          1321
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: Wy9jNQz5cqGARYePuENczZXDiaHJKObA0QySkGhVbf0=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:90:da:cd:57:ad:b4:fe:be:b0:90:ff:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=f151aa772b99184da7da46468db9df8fed84f320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e3:2e:bb:45:ca:55:b4:84:b3:52:96:c6:93:
                    cb:c8:ab:9e:c6:cd:96:69:a1:7d:ca:ff:12:07:09:
                    73:b7:3f:2f:d7:b8:50:d0:24:84:31:3a:d8:30:a4:
                    9b:59:b2:bf:8b:3f:3d:8e:f0:c2:9c:78:8d:26:4d:
                    3a:61:ac:83:33:76:84:bc:9d:07:22:10:02:70:46:
                    d8:c7:4e:32:c6:0b:2d:ee:52:93:d1:af:5d:f0:67:
                    b6:5b:0f:0f:f9:bc:45:b9:b7:ec:5c:47:79:33:d6:
                    ac:ed:23:14:a7:71:7d:6d:de:98:79:81:f9:d9:4c:
                    4d:2c:45:dd:a5:02:f7:51:a9:bc:78:63:2c:63:20:
                    8f:2d:a3:78:a6:59:a2:5c:51:f3:c0:14:11:5e:c1:
                    40:65:96:ae:e2:9b:b4:df:a8:77:76:1a:66:eb:07:
                    2e:c2:72:d1:fa:16:7e:97:6c:66:7c:11:f5:16:79:
                    3e:9c:26:6d:30:4a:77:0e:43:43:67:3c:6d:f4:5c:
                    da:e6:bd:b5:56:a7:81:aa:a5:12:05:a6:fe:bd:14:
                    4a:a2:cc:00:f6:93:7f:45:81:9e:3b:f7:42:7f:41:
                    ad:b0:b2:7d:9e:da:c3:a3:b3:60:8a:3d:de:b1:d2:
                    78:45:06:c5:bd:f4:94:99:15:f0:67:20:72:42:4d:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:AA:77:2B:99:18:4D:A7:DA:46:46:8D:B9:DF:8F:ED:84:F3:20
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:58:ff:45:94:8f:cd:c5:16:53:b0:69:5c:2d:87:57:1d:91:
         89:16:be:84:68:7a:02:a5:da:05:e9:8d:03:b8:c5:b9:02:80:
         c8:cf:37:e7:da:77:ae:56:40:b7:81:27:c1:e5:13:d0:6e:60:
         54:89:a1:fa:95:73:b0:83:a2:5b:3c:23:62:fd:e6:52:35:e6:
         7f:2d:0c:c6:3c:d2:eb:eb:b4:21:91:e6:ee:26:b2:f1:7a:65:
         b4:09:0a:7f:08:78:c5:0e:89:a5:09:7a:d8:24:9a:d3:b4:28:
         44:57:7d:83:ed:87:62:04:be:b8:dd:42:70:de:0e:9b:58:ab:
         2b:27:a5:9b:52:b8:d4:21:46:3b:26:69:61:b4:dd:67:0a:9b:
         64:b8:40:99:4f:15:20:12:a3:91:eb:84:a8:90:6e:3a:22:bb:
         28:60:bf:59:50:d3:0d:42:96:02:66:4d:3a:47:77:ea:43:f6:
         47:0a:40:06:a8:3c:af:1b:09:5b:e4:0c:ec:ae:be:32:84:b3:
         36:88:e8:9b:8e:2b:d3:67:fd:1f:b2:54:b5:e9:13:51:a8:bb:
         36:9a:08:a1:0d:39:77:85:af:4c:64:1e:9f:c4:8a:b4:f5:a4:
         72:1b:57:7d:21:87:cf:0e:b5:f8:b2:64:fa:c8:98:13:91:16:
         05:9a:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----