Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File:                     KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier:          pO/7dz4RfDRfSGI0FvSoYjNc2V4glo0SrHUcl0fZAX0=
Subject key identifier:   19:05:E6:7E:48:2D:75:0D:A4:93:26:4A:CC:C8:4E:DA:18:7C:7B:B5
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer:       /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial:       01962E9940DA013E4CABB566AA7AF5D4B605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: oCpVjgVhmEUL/esqCh+9MU7O2bkrWH228au66ISu7ZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:da:01:3e:4c:ab:b5:66:aa:7a:f5:d4:b6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=1905e67e482d750da493264accc84eda187c7bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:ae:a4:0a:43:f7:d0:4b:27:e1:32:bc:2f:
                    f5:60:5f:bd:6b:bb:d3:d9:2a:92:91:d3:bc:d5:3d:
                    22:5e:a9:80:99:96:f0:d9:b8:a2:1f:5a:e4:d7:ac:
                    e3:8a:47:50:4b:e9:28:2a:f0:dc:2f:82:99:46:97:
                    6a:e1:47:61:0f:4b:92:62:23:bc:43:5e:26:ca:c6:
                    c3:5f:a8:10:71:68:a8:b6:e6:2b:e1:cb:ef:eb:7a:
                    a5:85:5c:3a:f5:65:db:90:a0:44:91:5a:fd:a1:b5:
                    c0:38:50:ea:bf:7e:91:a4:33:b9:49:4f:dd:a4:64:
                    c9:be:27:1b:c0:8e:53:d3:ad:d9:06:95:de:e6:07:
                    6b:ef:92:b7:1d:af:15:02:70:5c:9a:a4:41:18:b9:
                    15:eb:ba:13:a6:b9:1a:09:6d:85:95:d5:9d:63:85:
                    f9:d9:e8:96:8f:2c:c6:6a:0a:6c:bf:68:ef:75:70:
                    0c:5e:78:7d:12:f9:51:f7:6f:d8:10:b5:00:26:30:
                    03:da:93:f8:99:e8:84:77:52:f4:14:87:44:05:62:
                    58:a8:54:f5:78:af:0b:1d:cd:a8:44:4e:60:02:26:
                    e6:51:80:12:94:54:8b:67:8c:50:fd:8b:df:cd:07:
                    ce:e5:9a:c1:22:bf:a3:e6:ca:7a:cd:07:4e:38:2d:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:E6:7E:48:2D:75:0D:A4:93:26:4A:CC:C8:4E:DA:18:7C:7B:B5
            X509v3 Authority Key Identifier:
                keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6e:d2:a6:23:81:0d:17:84:dc:1b:2c:15:33:cc:d9:4f:10:
         5f:1d:ab:a6:e9:00:cb:a2:35:72:6d:51:0e:81:b6:08:f0:71:
         cc:d6:0d:1d:fe:64:e0:6b:09:d6:b4:43:d8:a9:2c:34:22:04:
         f8:ea:85:44:60:2b:6a:a3:3d:52:91:f2:84:4e:ab:75:96:8c:
         79:21:ad:d3:4d:f9:47:8b:a2:7d:90:e4:2c:13:a0:81:ea:bb:
         e8:3a:d9:ed:b0:d7:d0:18:f2:77:fc:ce:a1:c8:a8:8a:38:fa:
         23:b6:f3:56:16:53:5c:08:cb:86:f9:3a:dd:67:0b:9c:29:6c:
         ec:7b:dc:d5:99:4e:20:4f:9d:45:c8:9a:fb:a0:06:85:21:8d:
         50:b5:f4:b3:7d:4c:1e:16:81:a2:73:17:1b:5e:18:3a:df:e1:
         43:fd:15:25:e4:7c:38:75:89:c9:e7:ca:b8:e8:62:51:a9:b4:
         67:82:b4:d9:38:e5:2b:c9:ec:ed:fc:40:02:db:b6:fd:93:f0:
         38:e3:23:54:8d:24:dd:9c:06:b4:7d:ab:b7:86:d8:6e:83:b4:
         76:61:0b:84:f3:ee:f0:69:42:08:0e:bc:28:24:1d:d5:f4:1d:
         82:af:90:c9:b0:be:91:02:71:00:fd:bf:2f:e3:c9:db:cf:46:
         16:3d:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----