Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File:                     KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier:          TNOqJ+YNKBHm/+eNVIHOcxgvtdWrdDBtb7g9WpJfT6U=
Subject key identifier:   C2:7D:AD:D1:9D:DE:16:BD:20:84:E4:58:BE:20:C4:D8:E0:21:BC:24
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer:       /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial:       01962F747E73E5E5A11C1A33ACC8670300E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number:          0F28
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: 1vtmYYmiWZ+FVRI2BYwNTyXvSzMDRyDO3TfzkwYddFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7e:73:e5:e5:a1:1c:1a:33:ac:c8:67:03:00:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=c27dadd19dde16bd2084e458be20c4d8e021bc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:0b:a9:f5:fa:14:7e:9e:f4:8c:3e:c5:4f:
                    54:ce:8f:04:e7:37:8b:71:18:d9:61:b2:18:8f:91:
                    7e:d3:ef:9e:9c:06:2d:43:0c:ae:41:74:ff:95:23:
                    74:73:4c:61:5e:84:4b:2d:7f:38:24:40:49:4d:d9:
                    8c:99:06:38:84:82:7b:0b:b9:6e:3a:88:c9:3c:d0:
                    ff:3e:39:d2:3c:81:44:ce:27:99:fb:89:1d:11:71:
                    57:b3:76:cf:93:9d:12:04:c5:ea:01:bf:3f:9c:26:
                    bf:7d:d5:e3:4c:a3:59:5b:74:ba:c0:b6:82:ea:2f:
                    d0:e4:24:c6:06:ea:86:f5:52:8c:40:30:b1:c2:49:
                    85:80:ba:99:ae:25:ac:6e:3a:dc:0d:f3:3f:3d:ba:
                    54:57:97:02:b6:e3:55:db:f2:3a:3d:95:cd:27:f7:
                    2b:32:d9:8a:0c:05:d7:90:4e:09:51:27:fc:4e:d3:
                    97:15:f4:7d:ca:b1:73:9b:f5:1d:6e:f6:ea:a0:3a:
                    de:67:d7:96:25:66:1a:d4:80:ab:f4:e6:b2:eb:4d:
                    7c:49:5d:a0:4d:46:05:42:83:82:6d:06:cd:e8:a7:
                    b5:2f:b7:ff:a5:0c:7a:e3:4e:94:ea:c9:ab:d9:50:
                    e3:f9:30:79:24:8f:07:17:e7:24:60:68:b4:b3:f8:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:AD:D1:9D:DE:16:BD:20:84:E4:58:BE:20:C4:D8:E0:21:BC:24
            X509v3 Authority Key Identifier:
                keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:e8:65:6a:45:5a:5e:77:f8:75:e5:30:b8:4e:8b:d4:7a:
         bd:3c:a4:fb:7b:3c:17:a5:1a:6f:15:ca:7b:b2:cf:00:bc:85:
         54:2f:45:4c:c7:53:a4:81:0f:fd:45:36:9b:79:c9:d4:b9:2e:
         d2:b1:d6:98:bc:47:ae:0f:9d:1a:70:21:9d:9a:9d:cf:d7:c4:
         6d:50:8d:16:8f:f2:52:cb:3a:01:f7:85:a2:f0:cb:44:10:86:
         de:69:64:4e:fe:5b:03:ea:cb:0c:bd:40:4f:44:3a:ca:20:f0:
         25:6a:ba:56:ed:14:4d:a7:9f:bc:df:72:39:12:92:e4:b7:dc:
         bf:e5:9f:5e:88:40:d7:9d:b1:a2:a7:c9:bd:65:6e:fc:78:48:
         2f:74:2c:3e:6c:52:8e:11:9b:8e:75:a4:66:55:33:37:96:2a:
         31:d6:e3:c1:bc:ac:e3:1a:04:2c:23:a8:ac:c9:78:32:45:e5:
         d2:09:d3:8c:37:2b:f5:93:61:8f:1b:19:5e:db:a6:00:9e:e4:
         e7:b2:bc:ad:18:62:ae:c3:b5:e2:fa:66:24:b1:08:c8:54:3f:
         0c:31:97:b0:35:be:cf:db:17:9f:7b:84:61:3d:8b:9c:a6:6e:
         9b:26:ab:93:79:40:fc:d3:e0:d5:b0:01:6e:b5:47:be:ed:2d:
         e9:4a:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----