Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File:                     kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier:          fZKje6EWFazpcXpBINcPHMdYO73krf4is4hu+ofIEyU=
Subject key identifier:   1C:C0:BC:C2:5A:D1:B9:C2:97:B2:D9:D8:8E:82:20:3B:F1:C9:7B:38
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer:       /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial:       01962FAB7DCD653EADF436DB7F89C1ECA13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number:          106D
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
                          2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: 1cDFsjxEAj8zl8PTkLIsV9YNfyDBgJ4pBp57lE2/z44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7d:cd:65:3e:ad:f4:36:db:7f:89:c1:ec:a1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=1cc0bcc25ad1b9c297b2d9d88e82203bf1c97b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:f4:cc:5f:de:09:f8:04:54:bf:f0:09:cc:
                    44:00:07:ae:6b:03:cb:68:5b:ec:c1:44:f1:e7:2d:
                    63:f0:12:51:d6:c5:9d:82:26:f6:39:17:e9:14:8b:
                    ee:38:20:9c:5f:7c:7b:7a:fb:98:4c:12:58:35:40:
                    99:0a:72:7c:7a:1b:1b:9d:69:68:01:cf:65:24:6c:
                    66:94:1b:7e:a1:15:ff:97:75:8a:f3:d7:e6:3a:f9:
                    f2:fd:ee:43:74:30:f5:68:5f:2e:76:66:3f:54:a3:
                    25:f2:ec:41:99:7b:80:c2:17:f7:96:c7:de:e0:d9:
                    f1:d1:40:45:3e:91:d7:0f:2b:49:ae:80:62:e6:92:
                    98:4d:e6:9d:73:4b:c3:a7:a5:87:8c:21:ec:b6:ec:
                    92:61:02:ec:59:f5:a7:a3:1e:05:a5:57:cd:e6:82:
                    5e:ca:0a:24:9f:56:78:82:73:7c:55:8a:6c:99:85:
                    47:ea:15:dc:89:05:e6:6f:b8:68:83:81:24:53:fb:
                    1f:81:d3:79:7f:f8:18:ba:ce:85:04:92:de:ac:39:
                    f6:3e:04:3c:4a:17:53:cd:9e:6a:13:c6:ac:f1:6e:
                    17:0e:33:6a:be:78:1c:1b:aa:cc:4b:70:be:e9:1f:
                    b4:b3:68:73:59:6e:76:3d:44:52:b0:7d:e8:cf:3c:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:BC:C2:5A:D1:B9:C2:97:B2:D9:D8:8E:82:20:3B:F1:C9:7B:38
            X509v3 Authority Key Identifier:
                keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:26:73:d8:84:44:74:5c:ed:f7:cd:46:55:0b:d8:12:30:dd:
         30:88:bf:18:ee:ed:1b:cd:9d:33:82:d5:4f:31:6b:20:d8:b4:
         c4:d4:58:b9:15:30:91:1a:5d:83:30:b1:30:0a:9c:9f:81:77:
         4b:43:85:cc:ab:24:25:bf:33:15:f0:ae:93:c8:28:ba:3e:9e:
         cd:8d:ff:04:69:2b:87:fd:ec:a3:d3:5e:67:08:4e:d0:8e:c7:
         75:b8:df:d9:fb:f6:48:55:68:8e:07:4e:2e:95:b7:cb:4c:e7:
         0f:fc:e7:ba:43:82:95:a9:42:18:fa:e6:29:ef:8f:eb:26:78:
         44:be:60:c8:82:c1:b4:8f:05:f5:eb:d4:c0:44:7b:78:d2:c5:
         20:e8:11:e8:3d:0c:ff:46:7f:ad:b3:0b:d1:e1:70:9f:02:7b:
         d5:4c:2e:d3:b8:16:13:9f:51:87:a2:8f:f2:d9:f4:b0:ff:fe:
         e1:95:ac:68:b9:bd:6b:bf:60:87:ed:63:11:ce:af:e9:35:86:
         57:f0:a9:20:fa:ce:d6:43:86:41:d7:e8:f9:18:fa:cf:4e:25:
         18:a0:09:76:31:85:2e:04:3b:10:39:f9:b5:66:49:45:fc:02:
         48:50:31:55:9f:03:c5:c5:36:83:1a:f3:42:b3:8e:ea:a6:8c:
         91:8b:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----