Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
File:                     KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json)
Hash identifier:          CMMBD8phX1HnenRseVR3sUv2ch272f0Cod+EvtYF11g=
Subject key identifier:   F1:E5:6D:62:2C:C6:87:2B:B3:89:80:75:71:3D:E7:74:18:9A:2E:3C
Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
Certificate issuer:       /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Certificate serial:       01962E9962165A7673078521E5AF15061236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
Manifest number:          0589
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: yoUdsXRmeRQ68R/b1S2GHDYkkRtgicAtDGUvRUq3cG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:62:16:5a:76:73:07:85:21:e5:af:15:06:12:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=f1e56d622cc6872bb3898075713de774189a2e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:29:ca:51:9b:b0:fd:1f:3f:3c:01:85:bd:
                    72:a5:ca:f6:fe:9c:d0:fb:fb:d6:b1:60:3b:5f:38:
                    a7:c7:93:ed:76:b3:d6:76:4f:ef:6d:18:6d:74:cb:
                    14:d4:78:b9:1f:3e:f2:20:4b:38:eb:38:b7:08:b6:
                    40:f2:88:1c:e7:da:4f:ee:80:36:38:b4:09:71:91:
                    1c:ac:6f:0a:80:15:ad:0c:3d:55:8d:0f:72:ad:ca:
                    63:a7:db:e4:3a:84:d2:b7:bd:a4:7d:6d:1d:cf:e2:
                    d3:ec:fd:38:ee:cb:57:cb:b2:e0:36:b8:5b:1b:fe:
                    22:09:2c:95:fe:a7:ad:6a:33:30:e1:d8:86:7b:8d:
                    31:a0:67:d7:92:bc:e6:79:00:68:4a:f5:79:0e:f2:
                    50:d3:ab:b5:c8:ea:35:b4:ab:9a:af:6d:e7:cd:f5:
                    b5:11:20:49:4c:48:c3:aa:c5:bc:a3:0d:17:f1:48:
                    39:b2:cf:5c:6f:5f:77:06:7a:0b:86:81:15:58:8b:
                    ea:e2:14:d6:24:07:de:b0:ef:9e:52:bd:5d:37:4a:
                    0e:d7:d1:f7:41:f5:e6:cf:61:d1:eb:b0:26:f3:3c:
                    12:05:92:47:60:cf:90:f1:4e:1b:42:24:62:3a:f0:
                    2d:b7:37:6b:b4:71:29:e4:91:91:c0:d8:2c:ab:5d:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:6D:62:2C:C6:87:2B:B3:89:80:75:71:3D:E7:74:18:9A:2E:3C
            X509v3 Authority Key Identifier:
                keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:ea:6f:6d:1c:87:58:e6:b2:a1:a0:36:1b:50:f0:22:a2:
         96:27:fb:fc:e7:85:21:ec:8f:4d:5f:09:69:e2:2b:2b:76:25:
         f0:de:66:59:71:77:15:c0:b6:7d:42:24:20:17:ed:43:24:ae:
         63:ef:81:04:ad:61:15:38:c6:8a:a7:05:b1:cc:48:16:5e:79:
         10:9f:ca:4f:04:c3:27:70:07:91:23:47:4c:23:ae:7e:80:ae:
         65:6a:d7:0a:e6:f4:15:32:3e:33:40:32:32:e8:f1:13:fb:46:
         a2:53:bd:5b:e2:4c:0a:6b:39:03:bb:93:02:b1:6f:5c:29:3b:
         a1:ee:ff:f5:58:7e:62:75:15:04:66:99:37:9c:7d:5c:44:4a:
         70:46:c6:e6:78:36:95:f7:a5:21:8c:7b:0f:e5:12:be:fb:c1:
         78:5b:2d:06:dc:e2:86:ca:0c:eb:47:0e:02:ac:82:36:01:ab:
         7c:54:61:0c:84:0f:0b:b2:71:a9:36:b4:5b:81:27:4b:f5:66:
         71:7f:d3:f3:57:32:b1:72:dc:42:ab:49:4c:27:99:f7:c2:2b:
         c6:e0:8b:34:33:7b:45:0e:26:0a:bd:b5:7f:82:d5:48:70:30:
         34:d7:23:52:c1:ee:ee:19:9c:dd:c1:04:d3:5b:5a:fd:ae:e0:
         31:da:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----