Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File:                     Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier:          88uUk3iU3IRlgsQKye2XcR8RrEBhtDRIZ7ka0/Lwm70=
Subject key identifier:   BE:FC:CC:8E:4B:2E:CA:4F:FF:95:6E:A7:4D:80:C3:10:8C:55:06:A4
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer:       /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial:       01962F74C22995621A96F08A1F42DACD3BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number:          0E18
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: 3KnL5yysPPDf5R4miFhsc+liTm+qvAhvl5s+TD6ok8s=)
                          2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c2:29:95:62:1a:96:f0:8a:1f:42:da:cd:3b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=befccc8e4b2eca4fff956ea74d80c3108c5506a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:ec:8f:34:81:80:9b:38:a6:20:02:8e:16:
                    15:ca:5c:60:04:32:36:a1:2a:5d:35:b3:5b:d1:64:
                    a4:44:eb:08:ce:5d:d7:5e:73:b8:cc:b6:03:fb:e6:
                    a0:12:be:08:6d:41:15:7a:52:c7:77:04:25:cb:c0:
                    26:b9:fa:cc:1e:af:90:9d:f9:ad:b3:77:4f:6c:9f:
                    16:15:de:b3:c8:53:8c:f9:96:f7:f7:0d:8f:f1:ae:
                    57:79:4d:9c:18:27:94:b9:14:ba:89:47:3f:65:f6:
                    db:99:9c:c3:23:8b:01:91:ff:70:de:07:cb:c3:a0:
                    a8:9b:95:9a:2e:44:75:7c:bd:63:c2:60:4a:65:0e:
                    cf:bc:ae:0c:7f:91:89:a8:c2:b8:3c:74:36:9f:79:
                    40:24:a3:f6:db:ea:00:b8:cc:b0:59:8b:fd:a0:26:
                    a2:3e:6f:c3:9f:4b:fc:12:da:c8:68:22:23:cc:4a:
                    37:e7:56:96:e9:03:75:13:a4:74:cc:e8:6b:5d:46:
                    03:70:a9:38:50:70:29:f5:ac:de:5f:3c:d4:b8:75:
                    d1:f4:23:14:1e:fa:58:eb:30:af:4e:00:06:b0:e1:
                    fd:7f:01:97:f1:15:2d:c6:3e:fc:bb:95:08:90:60:
                    e6:63:ad:c3:a0:f0:17:a3:1b:aa:78:5e:f7:c2:04:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FC:CC:8E:4B:2E:CA:4F:FF:95:6E:A7:4D:80:C3:10:8C:55:06:A4
            X509v3 Authority Key Identifier:
                keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:8d:95:f2:43:66:9e:0c:a2:af:60:ab:ee:2a:08:0f:23:
         8c:c8:2f:ab:3e:a7:70:e1:76:4b:db:e0:48:8f:a5:36:10:46:
         3c:75:84:3f:0e:01:7c:8e:91:9f:b1:44:b8:f8:26:5b:83:37:
         7d:a1:b4:a1:23:33:b7:44:d6:84:4f:bb:40:86:c9:44:b6:a5:
         9f:8f:a7:91:5c:a1:54:85:ae:e2:79:d0:de:77:8f:db:2a:c2:
         70:ac:c0:46:c1:f1:cf:40:11:36:96:a7:38:fa:ad:1e:3b:f8:
         4c:7d:90:cf:2e:ea:d2:f3:2f:5b:82:e8:ba:b4:32:0e:17:ac:
         b0:36:95:67:68:9f:c7:f2:59:72:34:4a:17:8e:41:1f:3b:44:
         3d:a6:2a:a4:d5:0c:a1:e5:f9:0e:23:9d:d8:7f:87:40:ab:f9:
         00:78:d8:98:91:9a:7d:cb:8a:98:36:f9:87:08:9a:66:2f:a5:
         8f:41:cf:e8:cc:5c:eb:4a:40:0a:5c:1f:15:e1:b7:5b:21:5d:
         e4:01:a6:fb:40:4d:ee:e0:65:0b:dd:ef:51:2c:4e:cd:06:c6:
         f7:84:74:bd:7d:0d:68:04:f2:7d:86:ef:0a:a6:e1:42:20:e7:
         a6:ba:3a:5a:80:0c:ed:bd:48:32:43:6c:28:87:f4:f6:34:25:
         da:92:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----