Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File:                     Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier:          xyEYwa4JY7sjRVWUK9hJ3MOkvshVxye+PVmJhjV5oL0=
Subject key identifier:   34:B1:3A:F0:99:85:02:9B:A5:E8:9C:45:C0:60:9E:95:3D:A6:0F:49
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer:       /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial:       01962DF3FB75ED79C7CC1913809ADAF6C737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number:          058A
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: RmJodE9gWOu7ZNBiGgyIyPj/JO1iOZbB+g9Gf4B2Anw=)
                          2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:75:ed:79:c7:cc:19:13:80:9a:da:f6:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=34b13af09985029ba5e89c45c0609e953da60f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:d8:35:94:2a:a3:a5:0c:f7:7a:78:c1:b7:
                    03:ba:64:5a:9c:82:4d:ac:a9:e2:ca:c6:36:07:37:
                    8f:f7:14:98:ef:c0:ef:77:16:6d:f7:be:77:75:be:
                    19:fd:f1:2a:8e:92:af:ce:87:4e:1c:3f:2c:bc:ae:
                    47:0e:53:a5:36:67:72:ec:30:64:95:02:f6:b2:55:
                    48:d8:a3:bb:04:d5:ec:9c:89:d2:9e:2e:02:83:b0:
                    dc:9c:59:b2:e0:a1:b3:bb:e4:1a:4c:f3:2e:da:67:
                    ba:90:79:fc:27:86:4e:d3:c9:48:67:b9:7d:ec:8c:
                    aa:b8:d0:44:62:01:a8:66:80:d2:1d:f6:dd:90:9f:
                    eb:7c:c0:bd:88:17:25:ad:6c:67:71:ac:6a:78:8f:
                    c9:5d:c2:e3:2c:44:30:19:b8:8d:db:0f:76:1c:f3:
                    d2:ad:fc:72:50:49:ba:38:a4:8a:76:4d:ac:93:7d:
                    f0:f6:e5:bd:45:c4:e5:36:cd:d4:f5:63:ec:8d:ac:
                    05:a8:50:08:cc:b4:b4:2f:93:c8:e0:06:ee:c4:fe:
                    f7:0c:4d:dc:46:8e:80:8d:62:19:8a:c6:64:28:8f:
                    38:6d:76:8c:5f:95:86:c8:c3:0b:94:09:3d:91:54:
                    bc:8c:f8:68:66:42:82:d4:c4:4a:2f:7f:ae:d7:b9:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B1:3A:F0:99:85:02:9B:A5:E8:9C:45:C0:60:9E:95:3D:A6:0F:49
            X509v3 Authority Key Identifier:
                keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:bd:61:59:f2:89:cd:2a:51:fe:db:7e:ac:d9:08:53:7c:
         34:fb:51:78:22:57:9e:67:3c:56:72:9f:d3:55:d9:6f:af:37:
         f9:42:2f:14:fe:92:73:47:19:4f:01:4b:ec:78:67:81:db:2d:
         02:3a:65:f4:02:e6:44:58:ae:0e:7a:e1:9b:30:11:32:09:73:
         b6:7f:d3:e1:55:db:7e:58:73:ac:45:bf:1a:db:dc:db:74:04:
         b8:53:0c:98:6c:7b:76:77:32:9e:f7:1e:b0:c5:96:48:5a:fa:
         2c:b5:0b:8d:4e:86:f8:63:f1:1f:60:ba:09:2c:70:1a:98:28:
         84:ae:e0:08:95:9f:69:4b:67:0e:ea:6a:11:44:9f:9b:2b:1c:
         81:c8:49:d8:a0:12:ba:b2:b3:c1:6d:16:ef:f8:b6:17:2a:76:
         10:a1:3f:5d:0c:a6:96:a1:b2:a2:98:5d:11:0d:81:14:61:04:
         19:e5:cd:4d:f5:ff:58:13:17:c0:cc:25:f8:a4:59:e5:e3:59:
         46:1d:23:d0:16:94:6d:e5:2a:12:37:d7:f7:62:8b:f5:be:94:
         f2:06:d3:1a:e7:a6:ba:7b:f5:e4:8b:22:29:15:a7:f8:a1:6f:
         7e:b9:83:d8:d9:63:32:5a:2c:6b:af:f0:a4:7e:9a:a8:fd:d8:
         d3:85:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----