Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File:                     kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier:          Bg0rEM9jSqRhAb4CHCIRc/sOdE3CUlzwAGXHRJWlG0E=
Subject key identifier:   B9:C9:9B:2B:92:0A:68:2F:19:C4:83:19:EB:19:74:9B:CD:FA:76:10
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer:       /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial:       01962F7478CEA68BF22B1D8A45B2B6B36FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number:          0507
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 1-PjUZT902dDkd6VPDrdDPHXwUZw.roa (hash: MHJPB3k7tQCL3suOF/2f4yZcUJ+jnvq9tJxwFWeEEbc=)
                          2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: IMln+OEn0yWT6ewVxbsrY4uaXrXQPoWqtouqrlmK0YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:ce:a6:8b:f2:2b:1d:8a:45:b2:b6:b3:6f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=b9c99b2b920a682f19c48319eb19749bcdfa7610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:cb:65:ad:b2:63:87:51:2c:fa:c1:16:ce:
                    c9:f1:39:73:18:da:55:69:5c:9a:7b:47:ee:4c:e5:
                    5a:a5:94:4a:6b:78:95:cd:eb:e6:1d:dd:02:01:82:
                    48:29:ea:5c:aa:a5:66:c8:6a:7b:8f:fb:e8:24:e4:
                    f4:ea:ba:5b:a4:8f:58:df:b6:49:b9:19:23:8e:e7:
                    4a:2f:f6:89:ef:27:79:cf:fc:fd:1c:8e:ed:c4:66:
                    ee:9c:4c:63:a2:21:b0:29:54:8d:52:09:3c:ac:44:
                    f1:2c:82:0a:70:8c:ae:fc:6e:ba:9b:db:35:e4:f1:
                    d7:44:76:47:49:f9:7d:65:60:58:e0:38:0a:d3:1b:
                    8f:b9:2e:df:e3:2b:82:a5:7b:bb:74:97:86:2e:36:
                    8b:ab:7d:77:ac:fe:52:e6:0c:c8:24:9f:d6:25:c5:
                    5b:28:32:e2:30:5e:ce:ca:03:eb:6a:22:02:d2:00:
                    89:9a:f4:f0:85:e3:e1:52:a6:27:8c:b8:27:09:e7:
                    5e:35:df:a9:f6:e8:5d:c6:1f:4b:64:70:73:7b:07:
                    c1:f9:6f:63:0c:1f:ab:4a:18:a6:d7:8e:20:d1:f1:
                    66:a3:31:de:30:56:13:b0:f2:14:76:3a:21:ba:66:
                    2e:3b:2a:f8:b6:60:b2:76:97:08:1f:b2:c7:3a:6d:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:9B:2B:92:0A:68:2F:19:C4:83:19:EB:19:74:9B:CD:FA:76:10
            X509v3 Authority Key Identifier:
                keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ef:c0:1d:88:34:df:d8:b4:c2:65:e7:7a:61:b0:b6:47:54:
         70:13:a5:2e:b1:cd:8e:46:d2:2b:33:0f:12:b2:ec:82:98:38:
         3b:97:3a:10:83:ac:8c:a5:0e:ab:a0:19:e3:46:b9:49:68:02:
         05:f0:0d:ad:9d:a6:c0:36:a8:79:5a:52:9c:f5:96:71:9a:61:
         f5:6b:58:ea:70:2e:ba:91:04:96:89:99:a0:aa:6d:8a:b4:1e:
         4a:36:8d:e2:53:2f:e4:fc:b6:7c:ef:af:dd:ae:05:90:fb:bc:
         65:7a:6f:d4:d0:47:a9:ad:d4:33:80:b8:88:27:77:cb:85:38:
         56:c3:5b:e9:32:58:3d:57:e6:59:e6:b9:d1:af:78:5b:c9:c7:
         fc:39:c6:c8:37:72:31:e4:09:c7:0e:0c:c2:ce:8c:e8:79:23:
         5e:dc:99:bf:0d:b9:62:75:3a:b3:66:ef:2b:24:ac:bd:b5:92:
         b9:e3:6e:5e:6e:e1:3b:95:46:89:b4:6d:cf:bb:08:62:f8:be:
         06:90:3f:83:0b:33:a7:77:d0:8b:f8:8a:de:27:6e:1a:c0:eb:
         a6:bf:b3:ab:f6:c7:6f:84:a6:6d:e1:16:d7:5c:9d:e4:ce:8c:
         cc:8c:88:1c:83:88:d4:8b:f7:6f:ff:90:86:bc:47:db:64:f3:
         39:5a:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----