Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
File:                     kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json)
Hash identifier:          NThEVmThjpp5gwLL/gHToKJMCm1WzjAXyG3Gv95nRzg=
Subject key identifier:   BD:9A:DB:7E:EF:C8:F6:1D:ED:2B:F2:51:42:62:75:C3:5A:10:A5:43
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Certificate issuer:       /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial:       01962DF3FC76709509D01A7CC576F799232A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
Manifest number:          017D
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: 6RTQ6ReoKSdnwxkZ8IFm6e5DWCQT0n68GGJuk2NwCKo=)
                          2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fc:76:70:95:09:d0:1a:7c:c5:76:f7:99:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=bd9adb7eefc8f61ded2bf251426275c35a10a543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:07:1a:34:c9:ab:aa:99:6b:68:61:39:7e:
                    fe:16:e7:64:93:ba:90:30:c7:85:b4:b0:d1:7a:b4:
                    54:7c:19:a3:87:2b:88:bc:3e:15:41:96:87:af:8a:
                    9a:72:9d:4b:1c:21:d1:ce:9f:aa:00:91:f2:47:e6:
                    58:27:04:9c:8f:fc:a0:bf:13:31:fd:df:dc:2b:5b:
                    14:3e:f4:1c:53:0c:50:1f:01:ff:62:c7:46:27:e5:
                    94:56:b1:36:25:df:a8:f3:d8:82:ea:90:5e:d2:96:
                    f2:57:47:48:48:80:32:15:67:6c:4c:d6:52:27:2a:
                    ba:b5:a4:a6:ff:c2:62:a4:1e:2a:c5:a9:0b:f6:5a:
                    73:c7:68:64:ff:0d:88:2a:9b:fe:c4:0d:77:15:2c:
                    ae:3d:a8:3c:87:0b:fe:37:c5:85:14:83:e3:4c:92:
                    75:ad:cb:ad:a3:76:7d:b2:b7:62:e9:4d:a6:88:dd:
                    f2:5e:3f:e9:93:e3:c6:cd:7a:3b:00:ab:6a:a5:42:
                    04:04:47:57:c7:8d:7b:cf:f0:96:36:79:3c:25:d0:
                    b3:1a:c3:06:c6:7b:5b:5c:e5:28:dc:7b:d1:c4:73:
                    42:f5:0a:d1:44:d7:14:fc:b2:1b:99:0f:4b:47:64:
                    c9:83:2e:8a:53:c8:e8:79:f2:b0:1d:cb:2d:cc:72:
                    7c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:DB:7E:EF:C8:F6:1D:ED:2B:F2:51:42:62:75:C3:5A:10:A5:43
            X509v3 Authority Key Identifier:
                keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:1d:f3:37:e2:80:2a:6c:66:2b:b1:9e:c1:26:b8:0c:be:
         da:e4:8e:4d:ca:06:ef:fd:3c:dd:29:a2:51:c6:be:86:d4:d5:
         6d:28:83:ca:09:30:86:2f:d9:17:61:9b:ae:d6:de:75:c7:e5:
         90:bd:bf:37:ed:77:29:02:b8:c0:82:26:b5:6e:08:af:d0:07:
         c6:c3:84:a6:27:b2:54:f8:3b:16:e3:5d:a6:e3:88:63:ea:61:
         9c:e1:43:13:8c:d5:fe:a2:59:69:24:da:26:06:06:dc:53:c2:
         b8:2c:82:32:8a:97:bc:32:d4:2b:4c:83:5c:5a:8a:e7:e6:e6:
         fa:4c:0e:32:64:72:50:7b:ba:5e:6a:70:30:30:5e:0b:c2:5a:
         0a:b2:f6:36:6b:f2:b8:5b:dd:6e:5e:73:09:c2:12:83:5a:95:
         5e:88:1a:d6:27:fa:55:be:10:64:57:cc:e6:f2:c2:e5:7c:57:
         bb:dc:d8:c2:82:0e:12:d8:56:dd:d8:20:4c:70:d3:9e:db:a3:
         5c:4b:25:fc:c5:5f:af:25:de:49:4e:92:51:7d:c7:e5:48:53:
         0d:2b:22:50:30:db:1d:e5:cb:09:0a:1c:39:22:fc:2e:83:69:
         5f:73:1d:05:04:c3:8b:7c:0d:92:46:a8:57:10:90:16:33:91:
         51:20:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----