Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File:                     KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier:          47lwO/pDe+FYe8reOfKs4y5lrq2li7I20BUB1qnzgV0=
Subject key identifier:   45:29:2E:05:05:2D:C4:CA:FE:39:06:BF:B2:E9:10:F7:B2:AB:A1:DD
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer:       /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial:       01962F0704D9D6C85C205DF7F325D624CD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number:          0A85
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: +AgwB7lHfoEVRQ/I5NNDuPThPB94+g3S+sLnrA1DTTI=)
                          2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:d9:d6:c8:5c:20:5d:f7:f3:25:d6:24:cd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=45292e05052dc4cafe3906bfb2e910f7b2aba1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:49:dc:4f:fb:20:6e:25:37:ef:75:35:83:
                    26:63:ce:2e:bb:0e:d3:47:e3:8e:cf:bf:00:9b:17:
                    ec:cb:2c:47:64:77:36:7a:46:0d:17:04:1d:bb:26:
                    96:1e:e1:15:45:dc:c8:78:73:f5:4e:e6:cf:d5:26:
                    29:cd:03:44:37:d7:14:37:8a:56:e4:6f:31:58:a1:
                    d5:c3:44:9b:0e:2f:9f:ff:20:7e:fa:6a:83:21:cc:
                    60:f0:91:88:0b:9b:e5:f7:ce:8f:8a:d5:2b:6d:af:
                    99:b8:fd:d7:24:66:f0:7f:06:ca:c5:45:c0:00:94:
                    93:bd:3a:57:4b:da:6c:47:7b:20:bc:0d:63:00:f4:
                    ad:21:4a:f7:9a:57:4e:d4:9d:1a:97:c6:7e:6e:47:
                    56:6d:97:7a:ae:9e:0b:6e:81:97:4e:ab:42:b8:19:
                    69:4d:94:83:57:6c:d3:3c:1d:b1:c2:93:47:8e:7e:
                    02:a0:39:f7:c7:19:ea:13:e2:70:ec:3d:14:f4:8d:
                    3f:cc:34:d2:c2:11:7d:66:b8:07:cf:14:79:7d:26:
                    b9:75:78:aa:df:44:9e:0c:bc:fb:ce:df:89:85:d2:
                    ca:e5:78:03:6b:c4:fe:84:85:c5:68:e0:8b:4f:75:
                    3f:d0:94:a4:47:b5:7c:be:3e:fe:3d:f8:a3:47:1f:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:29:2E:05:05:2D:C4:CA:FE:39:06:BF:B2:E9:10:F7:B2:AB:A1:DD
            X509v3 Authority Key Identifier:
                keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:52:51:c6:e7:d4:f8:91:35:0d:bd:34:60:0c:8d:35:0b:00:
         7b:9c:87:07:78:93:98:8b:a4:90:73:07:06:06:d1:9b:a5:d4:
         d8:79:5a:e1:ae:d3:b7:9f:2b:cf:7e:50:15:c8:cf:51:10:8a:
         dd:ad:a8:05:08:1a:45:cc:5c:06:e4:71:51:30:f3:c8:0c:a0:
         cd:95:10:8f:b7:0a:7e:a5:64:83:52:70:ce:f6:43:aa:bb:c2:
         43:52:ab:1e:24:32:a7:8c:f3:b9:c4:40:9b:46:ec:23:75:1f:
         2e:13:ff:9d:a1:99:c7:86:61:95:2f:a0:cf:29:da:b9:d5:35:
         f5:03:17:12:d8:d5:56:4c:01:b2:c4:3b:c1:9c:40:c0:26:a8:
         34:fb:c9:08:0c:fa:45:b2:64:2c:d1:84:f6:15:c6:8c:fe:12:
         ae:74:d6:81:36:9b:99:5b:a3:45:ce:78:c5:7b:fd:0f:c0:f9:
         4b:da:29:69:95:2b:0a:28:c2:57:28:c8:84:32:32:db:44:7e:
         c5:49:27:79:5a:0a:89:93:3b:7a:25:92:d4:04:b3:0b:4d:19:
         35:77:39:4d:90:d7:63:1a:fa:e4:b8:15:9f:3c:02:a0:57:83:
         ea:c1:c1:a5:43:ef:ce:2b:9a:b6:d5:1b:b7:66:02:f9:85:ef:
         e8:ed:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----