Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
File:                     K7vWOe-xE9GWiKGszmlFu2xqmsU.mft (raw, json)
Hash identifier:          HfUgG8lf8YHZiHlq83KUBJUQ9cepsIiDX1pxF1pcC7s=
Subject key identifier:   58:DA:16:90:35:67:90:37:01:7F:3D:58:38:A8:A1:7E:D0:D1:DC:40
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Certificate issuer:       /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial:       01962E61ACAD87B46EC6516861A68484216A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: K7vWOe-xE9GWiKGszmlFu2xqmsU.crl (hash: jHC2xzD7MVkqcG+f+9676eHXQh55T50vXKy8BMt5E8I=)
                          2: n0XS6IJCl3vm93lJQsjg2X6pLdw.roa (hash: k2WYtuBGETSvwmKGDnyWeLNoT+PiSlaaWRzhdHXtIhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:ad:87:b4:6e:c6:51:68:61:a6:84:84:21:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=58da169035679037017f3d5838a8a17ed0d1dc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:de:bb:1a:35:ba:79:a8:f8:18:54:af:3d:
                    6e:b2:26:3b:2e:ca:f7:1b:55:f9:33:38:50:5a:07:
                    aa:39:f8:8a:51:09:04:e5:ee:61:d4:f4:5c:3a:96:
                    11:07:37:59:ea:0f:81:60:c4:e0:4d:f6:ca:ca:61:
                    7c:1b:80:57:23:28:a6:d1:ca:5f:96:95:cb:85:cc:
                    cc:f2:34:66:89:1c:a1:b2:2d:f1:4d:1f:73:8e:64:
                    fd:55:90:d6:e6:80:6d:51:cb:ff:7b:15:52:13:2f:
                    2c:01:25:e6:ee:a6:77:28:93:0a:70:da:ab:50:ce:
                    e7:18:f1:36:21:e4:1e:6f:7e:f6:46:ad:d8:df:7c:
                    02:e8:18:51:ac:a4:4b:9a:00:e8:1f:b9:e7:34:9e:
                    97:b8:5c:8f:d2:26:c9:1c:3d:83:06:6d:03:42:65:
                    5c:00:c8:94:d9:a2:6a:59:9a:c8:77:7d:5e:1c:e0:
                    b5:93:c6:90:82:fa:61:03:0b:99:94:db:cd:ad:92:
                    69:bf:dd:d3:be:68:f1:63:9f:74:32:f1:0c:45:0a:
                    9c:ab:da:e6:e0:93:1f:3b:aa:c4:dc:f1:c9:60:ab:
                    90:59:26:a9:ee:9f:4f:14:db:fc:1b:51:39:4c:31:
                    d6:9f:d4:e5:4a:ba:29:7c:d1:ec:0b:f8:e4:a7:a2:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DA:16:90:35:67:90:37:01:7F:3D:58:38:A8:A1:7E:D0:D1:DC:40
            X509v3 Authority Key Identifier:
                keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:b7:30:47:02:70:c2:0b:ab:22:4b:41:80:fd:ef:d8:11:
         42:6b:78:f3:b0:f2:81:5d:db:02:75:71:3a:d9:fe:f9:db:ff:
         32:79:30:14:06:c8:69:1d:41:78:70:89:ad:a1:df:0b:2d:70:
         4f:69:13:3b:6a:10:7b:ab:fa:01:09:bc:4f:37:35:ad:0e:f7:
         3b:33:b9:3a:91:b4:dd:37:36:f7:18:d9:a7:a2:23:87:37:2b:
         e1:c0:f7:39:51:61:b6:15:1c:01:c9:2f:87:2e:6e:a9:98:36:
         a8:55:72:82:10:16:ca:92:db:88:8f:d4:87:9d:0a:19:6a:ed:
         6d:2c:34:38:dd:c1:55:5a:65:eb:23:3b:04:a1:7b:b5:ae:99:
         2e:61:b4:34:07:91:d2:b7:50:f0:bd:10:3a:16:48:ec:72:46:
         f6:99:89:9a:5c:99:9c:7f:e9:7f:63:94:72:9a:b7:09:c3:52:
         f1:44:6b:6e:af:ab:4e:e4:f9:c5:a7:0d:75:3f:36:5b:21:a2:
         68:36:14:7d:8d:ae:81:6f:ae:4b:11:9d:00:36:a0:98:d5:fb:
         54:07:67:12:b7:60:dc:d9:06:97:6c:9a:23:2a:69:e5:64:83:
         03:8f:2e:fa:61:98:8c:c0:70:85:d5:6c:1a:4b:60:88:74:e4:
         71:db:55:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----