Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File:                     kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier:          vT4SSg/tiF4JBhqZQ3RLrw4Kza9pC1Ug/3qFJ8q4lAI=
Subject key identifier:   4E:4E:6C:20:7F:7B:FC:03:60:E7:35:B2:F2:C3:E2:D8:64:13:86:FA
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer:       /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial:       01962F3D7C7808391A62131F75E0AD98B319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number:          0203
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: 1IoNjTs4Vgwy/Xa3euIvJgY2puB2Hs8CiLYwqTyz4Es=)
                          2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:78:08:39:1a:62:13:1f:75:e0:ad:98:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=4e4e6c207f7bfc0360e735b2f2c3e2d8641386fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:1a:41:9a:a6:16:9f:1e:7d:09:5f:83:c0:
                    a0:8c:1b:a2:39:2f:1d:d7:63:70:35:f2:f2:72:e1:
                    a3:ef:5a:6f:9b:b9:bf:58:65:a6:25:24:37:7e:cf:
                    90:a5:94:21:08:df:74:56:ac:3c:c7:ed:2b:31:90:
                    95:31:81:00:cb:64:2a:42:ae:a9:dc:c7:6c:5b:5a:
                    74:50:5a:ce:11:6c:f1:2f:8a:23:a1:dd:fd:bf:0c:
                    e4:dd:6e:9e:da:3b:f1:bf:d0:74:20:18:a8:3a:87:
                    e1:a8:90:36:56:8a:35:eb:8e:58:1f:1b:16:43:b4:
                    78:51:4e:ed:fe:a6:7c:52:a1:ea:9a:ac:e3:3b:f4:
                    34:a3:7f:00:e8:19:2c:1f:7d:83:31:92:06:f9:50:
                    e5:b2:9b:ab:ab:af:c6:7b:5e:d9:f0:19:15:cc:9a:
                    c5:0f:dc:36:b3:b1:d9:ae:8b:52:9e:75:d3:c9:92:
                    f1:0b:c3:7b:9c:0a:4b:4e:ed:2a:01:dd:24:ad:ba:
                    af:35:59:a4:45:08:f9:b6:c8:f8:05:a6:21:54:de:
                    34:91:8e:c1:01:e8:9e:99:97:88:20:44:36:ba:ac:
                    94:37:18:3b:5b:ad:ca:f5:d5:5b:fa:71:c0:14:c3:
                    e1:6f:62:a1:ed:84:4b:80:44:06:90:b3:ef:d6:9b:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4E:6C:20:7F:7B:FC:03:60:E7:35:B2:F2:C3:E2:D8:64:13:86:FA
            X509v3 Authority Key Identifier:
                keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c3:18:d6:84:f3:d1:1a:1a:79:e9:52:ae:0d:87:6c:ba:af:
         04:74:c6:b2:f1:0b:f3:68:3a:a8:2e:0b:00:0c:86:a6:99:89:
         39:d7:de:8d:5c:78:d5:ee:0f:35:88:cb:43:15:25:e2:4d:58:
         ba:6a:b6:a2:07:0c:45:75:89:ab:f8:92:62:d1:3e:68:cf:f0:
         f7:a8:48:d7:18:6c:b7:4e:33:15:f8:46:34:93:c1:83:43:5a:
         26:8a:a0:a9:c1:75:a6:19:35:3c:05:5a:8b:0c:43:21:d8:58:
         1b:b7:63:7a:06:dd:29:e4:af:30:37:9a:18:7a:c2:64:dc:08:
         d1:d3:3e:2a:d8:3b:d1:fb:66:da:74:12:ae:bb:d7:7c:6b:94:
         99:e5:eb:42:55:8b:dc:f2:00:1c:01:82:76:3e:6a:d8:ee:cf:
         15:42:91:fe:ad:de:60:45:9d:52:ae:1e:a7:6c:b2:bf:38:a8:
         68:fe:4f:3d:76:1e:a9:41:48:42:e6:62:4a:5e:04:62:d2:bd:
         1a:0f:85:b6:9e:38:43:61:c2:e4:97:75:61:4b:46:ea:a1:04:
         e3:4e:7e:78:ea:d2:12:ee:57:3c:65:5a:d1:d8:c4:07:61:56:
         17:7b:07:e0:11:70:06:2a:15:6c:fc:68:8e:9e:cb:7a:7a:54:
         7b:2a:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----