Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File:                     KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier:          IfcdTTpXyODeQU28veEpUJYjqn7OTiCcemHMfvcxFIU=
Subject key identifier:   56:4D:F7:67:90:0F:BD:FE:3D:55:2E:8A:AE:93:A8:C1:DA:DC:DA:02
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer:       /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial:       01962ECF6374E48DCB0E83527B54C2634FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number:          11F4
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
                          2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
                          3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: T3rU4bDaPOlikySDS/nJsAmus2uCmhsXSTrxb86bF0w=)
                          4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:74:e4:8d:cb:0e:83:52:7b:54:c2:63:4f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=564df767900fbdfe3d552e8aae93a8c1dadcda02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:b8:a8:30:16:ab:c0:f3:58:0c:8c:3b:35:
                    49:a1:59:ce:c3:0d:1e:4e:3b:8a:72:41:87:18:bc:
                    5e:2f:af:61:f1:0f:f9:c7:1b:12:f4:b2:10:52:17:
                    ea:cc:f0:dd:9f:3f:ae:29:2e:78:86:fc:c6:80:bd:
                    1a:18:6a:81:8b:04:f2:67:7a:7d:a5:c7:46:da:9e:
                    0c:f3:f7:45:0b:35:c1:37:b6:34:b3:1c:e2:99:a5:
                    89:e3:6f:34:fe:0a:19:c1:ee:8f:52:88:3b:e4:a5:
                    e7:75:44:ff:b0:bb:44:92:91:45:55:a8:98:d4:c4:
                    db:10:0f:74:bd:b1:45:53:d1:7f:97:86:bc:b5:26:
                    c1:84:e4:18:9a:f9:e5:ee:88:15:62:db:ee:77:b2:
                    30:09:57:a7:6b:5a:2c:4b:75:1b:79:c5:d6:2c:bf:
                    3b:cf:46:67:1f:bf:44:a2:b5:2e:f9:ad:bc:0c:a0:
                    95:44:c7:bf:f7:8d:89:ff:2d:62:f7:89:12:94:20:
                    b0:09:9b:da:2d:ea:3e:87:ca:32:24:d5:2e:b7:cf:
                    eb:d9:8d:2b:21:d7:cd:b7:46:12:ea:7c:c8:d2:f0:
                    38:ef:b4:e8:bd:b9:39:1c:a8:e2:8d:5b:e0:50:fa:
                    3b:fc:56:99:f7:26:11:63:b4:b6:a5:13:f6:a4:5f:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4D:F7:67:90:0F:BD:FE:3D:55:2E:8A:AE:93:A8:C1:DA:DC:DA:02
            X509v3 Authority Key Identifier:
                keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:f5:26:47:34:c9:1b:76:fd:52:d4:20:54:1e:bf:40:38:
         4e:f0:6d:af:86:63:fa:ae:ec:fc:4f:38:7c:82:00:96:4c:bc:
         97:ee:56:4e:3d:39:2f:46:99:98:5c:8d:bf:95:76:17:76:8e:
         58:36:e1:ee:35:35:80:6d:30:03:13:ec:fe:13:9f:78:8c:45:
         ec:a9:e0:6b:34:6f:62:24:f6:d6:e1:8c:8c:e0:c3:b5:c6:57:
         f6:dc:8e:35:35:58:92:bb:bf:37:d7:b4:70:99:0e:9b:54:04:
         88:bf:ab:d9:45:08:c7:0b:4e:17:96:ec:f3:e9:4c:71:3f:82:
         2a:c6:b6:26:1c:d9:c0:11:4e:9b:08:4a:e9:40:10:6d:49:ed:
         da:56:45:96:2c:87:4e:48:a6:a9:cb:82:21:87:b3:cf:bc:12:
         46:7a:02:f7:12:1b:a6:a4:c7:c4:fb:be:7c:28:b2:6c:e6:e0:
         cc:74:5b:8f:59:af:fd:a2:28:0b:af:e9:26:94:da:df:72:26:
         e0:75:18:9a:3d:a8:5d:59:28:76:26:d0:c9:0a:ea:61:ab:24:
         2f:38:15:95:73:2c:33:b3:18:36:dd:79:40:78:3b:92:4b:b1:
         18:fa:48:f6:3f:62:89:76:93:65:50:d1:48:84:cb:dd:93:e9:
         b8:6f:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----