Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File:                     Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier:          geRrhQl4AZxljtQ5T5rlfjZFBgvzgcSWu0KjWqHPrVs=
Subject key identifier:   9B:2E:40:78:58:8F:2C:45:86:9A:D2:F2:28:7A:CC:8A:C8:9F:95:B3
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer:       /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial:       01962FAB0C6E0C62BF0BF8D6F3619FF7BCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: nSj4ZJ35KNwq9DkH7NVNtutFGurSNIE9D/13Ley7Buk=)
                          2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
                          3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0c:6e:0c:62:bf:0b:f8:d6:f3:61:9f:f7:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=9b2e4078588f2c45869ad2f2287acc8ac89f95b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ea:a3:8b:ef:a1:eb:af:8d:6f:ab:96:14:2d:
                    59:55:43:6f:d4:ef:ee:d1:43:bf:7d:42:70:2d:c7:
                    8e:f4:ed:45:73:f6:2d:42:d8:4b:2f:07:cf:3b:f4:
                    83:2b:5d:0d:a5:da:2f:68:d6:f5:96:7e:c9:96:7a:
                    fb:bf:b1:c0:97:2b:d9:53:07:ac:48:29:b0:91:cf:
                    1a:67:9d:88:87:20:e9:68:cc:c2:31:a7:bd:65:dd:
                    39:25:40:af:37:59:14:47:75:7b:e3:25:eb:74:e8:
                    f2:71:95:f7:6d:06:76:a0:f2:ab:3c:aa:8f:c2:3e:
                    e3:d4:17:7c:eb:c0:cb:55:ea:29:54:3e:58:75:cc:
                    20:89:27:2f:25:b3:3e:7d:10:d6:17:fb:65:e7:ba:
                    d6:49:29:ea:93:76:fa:4e:74:78:69:bc:d2:de:25:
                    40:37:62:bd:e9:7d:28:65:cd:62:50:e1:ee:f8:e5:
                    a1:a7:0a:65:8b:c2:d3:68:b7:36:aa:a9:96:be:e9:
                    ac:cf:00:d2:41:f7:da:ff:57:af:dc:8a:c5:a0:a5:
                    84:3f:f3:67:62:1a:04:29:02:93:7e:77:32:6c:55:
                    d5:e6:df:8d:f4:c8:82:ca:d6:33:7f:f9:d8:b8:10:
                    7f:c6:84:c0:bf:6a:19:7a:cb:9e:2d:27:d2:49:77:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2E:40:78:58:8F:2C:45:86:9A:D2:F2:28:7A:CC:8A:C8:9F:95:B3
            X509v3 Authority Key Identifier:
                keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:34:36:01:8f:bf:f2:2d:21:d3:c4:99:dd:d4:af:63:22:
         ea:e4:1c:19:5b:d0:44:11:59:de:9c:56:65:73:fe:b0:cf:e2:
         c7:ba:34:ac:2f:76:c4:73:85:1c:b3:17:98:6c:f6:ba:79:fa:
         19:6e:f7:e3:dd:b6:18:19:83:15:1b:1a:45:d1:61:86:e6:98:
         37:8c:98:aa:99:87:e8:5b:33:84:83:a8:f6:46:83:50:b0:c0:
         f3:54:c9:1f:af:63:0c:63:5c:81:9d:13:36:01:f4:6c:e7:3e:
         5c:b6:12:03:5e:99:5d:84:f3:9b:e0:5a:ab:4b:e5:8a:02:f5:
         4e:f0:53:0c:d4:fd:43:04:71:eb:fc:45:0d:1d:90:0c:d9:a0:
         8c:4b:07:80:4d:9d:87:6e:23:79:8c:0c:ea:4e:ad:ca:43:97:
         77:42:e9:78:11:ec:11:79:c0:dd:e5:7c:c1:fb:f7:b4:2e:f9:
         3f:14:0a:68:f3:a5:ee:04:21:94:8d:53:01:84:24:e0:6f:a4:
         28:ad:2d:e1:06:78:f6:67:1f:6c:ad:1f:f7:80:48:61:14:f6:
         b1:30:09:4c:3e:ea:b9:8b:27:5a:51:8b:4f:2d:97:57:40:cf:
         cc:0f:03:97:06:be:31:6b:2b:25:6a:3f:41:5e:1e:1d:3d:4b:
         7f:5f:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----