Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File:                     KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier:          IbK2o3KRP+lOuhu4wbtfR1OPAe6/p1qnAh3UUGbaVRA=
Subject key identifier:   6D:21:CA:5C:4A:D6:EF:C5:34:CD:6D:64:2E:A0:44:9B:F6:54:52:C4
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer:       /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial:       01962E61A4941EE1095D17BD8DDFC109BB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number:          0F0A
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: 5O31IlJ0o8owDy1WI08SzfwrzGepLxyEkQIKuoinAqg=)
                          2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:94:1e:e1:09:5d:17:bd:8d:df:c1:09:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=6d21ca5c4ad6efc534cd6d642ea0449bf65452c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:68:69:4c:09:c6:46:a9:5f:15:64:19:c6:
                    e8:f5:37:32:6c:09:8f:38:83:3b:01:51:b6:da:83:
                    47:b3:83:eb:85:b8:bb:6a:fb:83:2c:44:94:fe:c6:
                    2a:f9:6f:78:49:f3:d7:79:20:f9:17:cc:4b:d8:87:
                    b9:11:5b:7d:e6:ff:e1:8c:13:99:4b:f6:f2:6a:72:
                    16:58:e9:0e:ce:e1:cb:8b:18:3a:17:22:3b:65:0c:
                    12:07:31:7e:6a:0f:dc:22:c1:97:3f:8b:a3:ef:11:
                    25:ab:31:5b:05:df:28:7a:a9:89:ac:4a:ed:c4:7c:
                    a3:40:18:24:72:4c:ee:8d:44:9a:3e:14:72:f0:b7:
                    57:5f:08:b2:f2:e7:d8:83:8f:c3:f5:40:5b:14:e0:
                    9d:3f:f6:31:3e:57:7f:5b:a2:10:0f:5c:5a:63:cc:
                    71:47:64:99:cf:72:c6:db:58:8c:6e:40:a2:a0:1d:
                    83:46:40:2d:68:55:09:40:e8:62:4e:e9:44:1a:83:
                    f2:53:e6:f2:6c:1e:46:5c:99:2d:09:7f:fe:76:6f:
                    ad:39:09:78:12:07:fc:d4:97:87:e0:ef:4a:30:0a:
                    b6:5d:21:91:72:0f:92:18:d6:7b:2c:35:44:24:33:
                    6d:4a:36:18:87:cb:c3:df:25:cf:a9:7a:c6:88:57:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:21:CA:5C:4A:D6:EF:C5:34:CD:6D:64:2E:A0:44:9B:F6:54:52:C4
            X509v3 Authority Key Identifier:
                keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6d:de:ac:4f:85:f5:f9:17:dd:d7:1d:00:c6:64:5c:10:c4:
         3a:01:90:28:64:1d:60:4b:b5:ba:f6:2e:0f:8a:f0:2c:08:01:
         d6:8f:89:0e:d6:fc:35:8b:30:9e:9f:fd:f1:73:91:4b:10:b2:
         b6:6e:2f:4f:cf:e2:39:55:68:89:cb:da:1e:9d:3a:2b:b6:af:
         d0:28:4e:dc:b7:a8:b3:19:75:b7:3b:58:e8:26:26:c8:46:3f:
         fe:e6:91:a3:3e:61:49:a6:bc:3d:51:00:b1:ff:88:e0:d8:6c:
         f3:3d:05:bc:c2:b4:21:2e:c5:16:0f:1d:55:20:70:ae:37:e7:
         dd:d2:ac:a2:16:7a:32:f2:a5:c6:d0:2e:39:bf:f9:fa:b2:91:
         4d:7a:61:cc:44:e1:43:28:93:bc:70:03:c1:12:b7:37:e3:ef:
         b1:0e:30:ce:b9:bd:60:76:f8:0c:f8:ab:d8:e8:79:15:50:c1:
         82:c6:ee:1a:b2:13:d0:50:3d:75:71:54:f6:7f:44:fa:61:14:
         c1:cb:bb:3e:8c:f0:60:e3:b6:e5:c6:81:45:91:f0:c5:ae:ef:
         69:76:51:63:08:3c:91:73:7b:f6:d7:e5:89:9d:ad:85:19:91:
         13:6d:3a:29:9f:ec:f0:88:00:2f:3f:51:1b:9c:d6:8f:9b:a5:
         98:35:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----