Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
File:                     KgedPD3CTph79wxKn6u6QFsIOkU.mft (raw, json)
Hash identifier:          DNCZy7GNa2okBIvHB87bHAmeUvRObZEPePPADUR/f1M=
Subject key identifier:   59:0C:17:EE:0C:65:B0:30:46:9E:3E:47:30:08:89:5B:56:9C:6A:B7
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Certificate issuer:       /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial:       01962E9940CDF10ACEF493B1E9DBECDFABCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
Manifest number:          0A5F
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: KgedPD3CTph79wxKn6u6QFsIOkU.crl (hash: docX0ed5VdeYbwYcRYtJGbCofTX1swVx0zLd4rm/AvM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:cd:f1:0a:ce:f4:93:b1:e9:db:ec:df:ab:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=590c17ee0c65b030469e3e473008895b569c6ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:6d:70:6e:01:36:64:55:65:d5:8f:58:90:4c:
                    cd:7c:ba:2c:0f:43:fa:67:4a:36:75:0f:d1:2b:e2:
                    62:47:5e:fa:65:76:1f:a2:8d:f1:69:71:33:6e:d8:
                    f1:e1:9f:fd:36:58:81:1b:27:10:e7:ce:21:be:5d:
                    f7:f6:56:b4:06:5f:b7:fc:77:90:bc:f2:fc:66:81:
                    ef:93:93:a2:4e:41:8f:84:82:3e:0e:2b:49:db:0e:
                    de:1f:92:92:53:c3:e1:ae:e2:08:1b:16:39:de:1a:
                    c4:b5:c1:fa:4e:02:00:ab:fb:8f:d0:22:05:4f:45:
                    ae:fd:9c:84:45:25:2b:6b:f2:37:6c:f6:1b:ea:fd:
                    f7:59:2b:ff:29:21:3e:66:a1:2a:b2:ae:d6:8f:5a:
                    a8:3b:2c:32:58:68:08:4d:f8:ed:08:91:d5:be:47:
                    97:5e:9e:da:d3:82:6f:f3:99:49:71:27:8e:64:0a:
                    05:f7:c2:38:ed:02:1c:2d:32:a6:f6:3f:62:76:04:
                    2f:30:61:67:73:75:40:50:0e:2b:ea:b0:a3:ce:52:
                    2b:3a:a3:9f:81:61:c9:49:41:45:09:44:28:cb:fb:
                    ae:18:0f:94:c5:67:51:87:5b:77:57:e0:0d:8e:3e:
                    b3:06:a8:e9:71:cb:20:b7:84:9b:37:ab:34:54:10:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0C:17:EE:0C:65:B0:30:46:9E:3E:47:30:08:89:5B:56:9C:6A:B7
            X509v3 Authority Key Identifier:
                keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:57:d3:88:90:6e:00:52:cd:be:e3:4f:8c:a4:57:f8:56:
         65:17:96:3a:16:20:5f:10:76:0b:b8:da:7b:54:a5:81:cc:6a:
         02:75:9d:ae:6f:31:3c:95:ba:19:3b:57:72:7d:6b:e3:34:d9:
         40:b4:f0:95:c2:4e:20:17:6b:08:c6:77:2a:d9:d4:05:9a:8e:
         1f:37:b0:5f:bb:0f:bc:3c:5b:b8:a4:16:a2:45:6e:aa:01:8d:
         1b:f1:47:2c:68:36:16:4a:80:83:54:26:89:b7:da:58:b6:60:
         a7:69:be:49:9b:e1:56:0a:0f:34:33:9f:1b:b5:71:1a:3d:d6:
         44:26:98:7b:85:2e:25:1f:a2:c1:58:f2:ab:c3:4e:a6:78:00:
         85:d3:89:20:03:14:73:0f:80:bb:87:72:54:df:68:5b:82:4c:
         f5:d9:5c:1a:7f:fe:07:56:11:65:e2:ab:34:a2:6f:72:af:65:
         95:03:ce:5d:21:aa:23:36:81:cf:28:ae:c1:21:65:cc:7f:22:
         3f:eb:04:e7:48:52:97:8b:4b:fa:a0:c7:ce:98:bd:a9:25:fa:
         6c:23:04:f9:e0:16:d5:72:9c:38:09:60:d3:94:25:41:66:f5:
         c0:12:86:43:48:69:e6:97:5e:02:2e:1f:4a:9c:17:95:af:3c:
         dc:22:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----