Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File:                     KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier:          3zjwxsLrKD0ZVUV4bmFz0BrYW4kKrLo1wEbYTRQGDmQ=
Subject key identifier:   34:82:AD:26:79:2A:F7:95:2B:39:BF:05:A1:5C:C5:B1:C3:54:8C:97
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer:       /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial:       01962F745ECA3AE0D598D4DA0E258C0F2FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: WQAafVCmO/+l8Avopr6i8ve1AbUcAZLUF0RN2vAIUTQ=)
                          2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5e:ca:3a:e0:d5:98:d4:da:0e:25:8c:0f:2f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=3482ad26792af7952b39bf05a15cc5b1c3548c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:5a:33:07:56:2b:f3:28:f0:35:bd:34:f4:
                    41:e4:77:86:58:32:9b:69:c1:e0:56:98:ec:62:6c:
                    65:07:e0:17:6e:6b:3d:3b:98:8e:f6:99:60:b2:f4:
                    5f:18:da:64:7b:97:77:e8:72:6a:dc:43:d9:29:5b:
                    aa:ab:ed:e8:46:e5:d7:b7:ba:56:ee:db:a4:11:b4:
                    eb:30:82:85:78:ea:cd:8a:11:6e:91:c3:3e:37:af:
                    1f:d2:40:4b:2a:4f:dc:dd:aa:2c:78:0d:fe:42:28:
                    90:d9:9a:f1:a3:91:72:09:99:e0:f6:98:95:c6:0f:
                    cb:c4:30:bb:f9:3f:53:c0:67:65:99:2f:f3:3a:35:
                    e9:0d:4b:ca:5b:3e:7e:33:f8:73:78:29:8a:b7:2d:
                    ff:24:39:01:03:76:05:cd:fd:cd:39:1f:32:c7:3a:
                    57:75:34:c1:6f:0f:3c:df:e7:2a:51:c7:24:7c:a1:
                    02:e9:96:7a:ec:0c:3f:16:f6:4d:c7:06:e5:33:e0:
                    d0:7a:48:2b:d4:48:ff:a3:cc:62:65:44:55:69:fc:
                    c5:43:2e:70:f3:9e:35:5c:cb:f4:b2:8f:48:01:ab:
                    b6:61:a6:9d:02:1d:ba:bf:b4:c8:98:8d:98:c7:d8:
                    26:4f:f8:29:55:48:dc:6d:8e:c5:8b:6b:d2:fb:8d:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:AD:26:79:2A:F7:95:2B:39:BF:05:A1:5C:C5:B1:C3:54:8C:97
            X509v3 Authority Key Identifier:
                keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:af:eb:42:d4:9f:c9:34:e2:80:3e:ec:32:0e:20:11:2b:6c:
         7b:df:4f:7f:7c:aa:47:2a:bd:73:e8:f7:95:1a:a2:e5:13:8c:
         d2:15:f1:b8:9c:c5:89:16:06:78:af:24:c2:99:b8:63:23:5c:
         40:f2:82:aa:67:9b:63:76:a7:a5:61:6d:ca:84:bf:a3:04:81:
         e4:14:21:e9:19:f0:be:96:3d:0f:83:35:83:68:1c:c1:bc:bf:
         f1:bb:35:73:ec:bb:cd:43:d6:c9:98:cc:6e:cc:b7:94:7e:4c:
         65:8a:16:29:db:0f:6b:63:0f:54:4e:4e:40:08:a3:f5:d5:9e:
         5e:46:13:aa:b5:fd:3e:01:4c:cd:e0:b6:0b:43:62:f9:fc:d8:
         ba:c8:3f:1d:69:4c:2a:80:77:23:52:e0:6a:8f:94:da:75:07:
         7f:56:09:50:18:bf:3c:d9:91:50:1f:82:70:86:b0:ce:2a:c7:
         c6:2c:57:f0:5d:c6:56:36:34:9f:27:6c:6b:05:c9:3b:f5:c2:
         dc:cc:b2:de:f9:6a:32:46:d1:67:4b:a7:91:14:53:13:2e:bf:
         4e:23:77:b5:6e:ad:51:fb:d9:95:f5:40:ca:96:97:76:16:70:
         b6:42:95:83:d6:57:4b:28:c2:79:75:fb:d1:1c:f0:3b:f3:3e:
         7b:f8:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----