Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          ZF9AHTGfshP4vQOW5UA3wIFb+P+CcWrHHLkyfcuLzhA=
Subject key identifier:   D0:22:86:C9:56:B5:4E:22:B3:C0:1E:50:36:B7:9B:45:DF:66:48:B4
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       01962DF3A1323B63301C2D15E7132F6E2A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          1488
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=)
                          2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: Th2wxTJCGkwGPa0dtrBYWJiDobPdI/0Ehc8uUSJa9wU=)
                          3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=)
                          4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a1:32:3b:63:30:1c:2d:15:e7:13:2f:6e:2a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=d02286c956b54e22b3c01e5036b79b45df6648b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:49:6a:0a:13:bc:9a:ca:ae:db:ef:71:52:
                    ad:90:8e:c1:bc:d0:9b:a9:1a:e3:85:bd:43:6d:74:
                    23:3a:43:06:e0:2c:76:f6:9e:c8:17:36:6f:c7:0d:
                    c7:ed:1f:e2:09:9e:47:cd:68:93:db:42:f3:a0:78:
                    04:4c:3c:d1:67:46:0f:66:be:a2:b0:57:cf:4f:c2:
                    f0:6d:99:e3:b0:e4:9a:0c:02:cf:f7:fd:f1:c3:3a:
                    b4:90:e1:17:3f:58:25:dd:2b:fb:76:70:5e:fb:5c:
                    9f:46:31:5f:63:79:d5:17:24:76:20:c9:cd:42:6f:
                    10:c2:93:e4:5f:b5:49:58:28:d3:a1:44:b7:a8:52:
                    97:fa:af:cd:96:9d:af:c6:38:d3:c2:b0:ae:42:71:
                    02:3f:0d:d1:d9:0c:73:9a:96:eb:f9:db:6a:26:41:
                    59:4b:32:44:a5:b7:fc:75:dd:14:f9:a0:74:9a:2f:
                    af:e0:3b:77:dc:79:dd:6e:e2:e5:26:06:a3:54:59:
                    dd:19:a0:0e:5c:99:05:e5:a4:81:29:88:1e:0f:1e:
                    f3:75:84:bd:71:f1:0f:23:b3:6a:98:44:b1:b9:dc:
                    93:5a:b8:20:a8:be:f3:9c:07:0b:ec:ae:d3:26:6a:
                    bc:86:a7:ff:7d:55:71:ea:e4:fa:59:b2:c9:31:14:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:22:86:C9:56:B5:4E:22:B3:C0:1E:50:36:B7:9B:45:DF:66:48:B4
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:de:9a:b9:82:ac:df:ef:23:06:2c:a5:9f:d8:c8:da:49:28:
         fd:9b:43:9b:f9:e1:0a:a7:6d:47:70:66:ab:f0:ff:0b:77:f4:
         0a:17:25:7c:c8:07:11:2d:5e:c3:d0:1c:1d:45:23:b6:0f:70:
         85:2f:f1:df:61:d8:ca:a2:48:2c:be:40:89:15:85:ae:12:83:
         79:08:46:46:21:b9:b6:05:0e:f9:3a:fa:05:57:66:ab:6d:92:
         4d:ce:61:29:21:d7:2a:8a:38:ee:11:7e:ad:ff:a1:6c:b8:56:
         09:4f:11:09:5e:3c:0d:32:b1:1f:60:02:f0:b6:7f:89:6a:f0:
         26:35:b0:a7:b7:5f:1b:1b:18:13:41:f5:f9:99:7e:83:1c:f2:
         fb:ee:2c:da:35:5d:56:01:93:0d:70:d9:0a:ad:d1:12:5c:7f:
         b2:f1:1b:63:79:55:40:25:2b:a1:d9:85:2d:c5:bd:d0:96:18:
         b3:4d:20:20:77:9f:bc:19:32:34:fa:c0:d3:87:40:42:c5:f1:
         81:c0:32:32:62:51:75:ec:ea:88:fc:c6:78:bc:68:e4:c9:d3:
         30:d8:1c:2c:10:27:ec:bd:a5:be:2f:15:f3:ad:41:65:5e:18:
         ca:28:52:16:03:3d:62:d9:31:66:37:f1:f7:07:bd:c7:dd:de:
         31:d4:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----