Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File:                     klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier:          xRotEJSbO8ASRBgQv3rv/LqV3eLOmnx8S/G98idGMzc=
Subject key identifier:   40:34:99:22:E0:0B:60:B2:1F:D5:2E:74:18:71:51:7D:DB:14:01:CD
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer:       /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial:       01962FAB7503927C513636051867868BE3E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number:          04A6
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
                          2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: de6dNJmMaB5x/7ZwXv+qcQP1qsMcYYbJmole7lJqfm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:03:92:7c:51:36:36:05:18:67:86:8b:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=40349922e00b60b21fd52e741871517ddb1401cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:c1:4b:a3:9f:ff:6d:f6:d8:2c:ea:69:05:
                    75:fc:b6:49:8e:4a:69:ef:1d:0e:77:bd:1d:47:46:
                    b5:d9:d6:b3:5e:a5:b0:f2:03:94:43:fc:42:cd:a7:
                    6e:75:ec:4a:9c:4d:7e:88:6c:cc:cb:23:08:aa:d9:
                    63:b8:fb:4f:35:c8:3d:ba:53:b0:00:15:e3:1a:63:
                    b8:9a:75:98:24:1c:95:5a:73:3e:b0:20:bf:e6:13:
                    48:ad:ea:55:b0:6e:84:82:32:f3:60:bc:2d:5a:f5:
                    f7:7b:8e:02:32:82:09:a8:ff:f7:d7:52:8c:a7:59:
                    57:16:76:e5:95:81:0e:0b:81:5c:c7:54:3c:36:63:
                    a0:a0:9d:7e:82:76:f5:46:95:e8:34:40:49:c1:5a:
                    aa:81:fb:a0:f6:65:a0:74:32:84:a8:03:a6:88:eb:
                    17:69:c0:00:85:5f:a7:22:02:b7:a5:01:15:e3:1d:
                    de:6e:ef:a1:23:8d:6c:ac:05:82:ea:50:63:58:03:
                    82:e8:3e:ec:81:be:9f:12:ee:d6:b9:95:48:95:47:
                    3c:ed:c3:3a:a5:43:a1:15:90:5e:10:b3:5b:86:57:
                    f4:32:09:51:4d:2d:93:20:6c:00:7b:34:a7:a4:77:
                    fe:2f:78:24:29:a8:d1:b2:4a:7e:37:c2:d2:3a:00:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:99:22:E0:0B:60:B2:1F:D5:2E:74:18:71:51:7D:DB:14:01:CD
            X509v3 Authority Key Identifier:
                keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:83:9e:a6:c1:37:2a:22:26:95:47:0e:be:cb:43:3a:d6:44:
         a8:5b:bd:26:d8:e5:f7:41:c0:f4:fb:1c:2d:3f:51:e3:e3:cc:
         3c:f4:10:7a:71:14:d5:4e:67:9c:9f:e8:0f:4b:6a:80:d3:3e:
         ea:86:33:de:fa:66:74:08:ab:e7:8a:26:b8:02:a7:d8:91:9d:
         52:76:86:1c:0c:54:5d:5e:54:df:2c:90:e2:cf:50:4a:bc:4d:
         46:1a:5a:ce:3c:52:e8:61:83:cc:ae:e9:33:48:06:d5:98:43:
         9a:f7:ab:39:fa:6a:f3:bb:30:b5:54:2e:20:77:74:e7:1a:42:
         6b:48:4c:e5:3a:56:fe:01:87:a3:52:5e:d9:bb:6d:9a:ae:4d:
         16:d2:c4:0f:c3:aa:2d:af:15:3d:a5:ce:e2:8d:c7:65:dc:59:
         50:10:a8:a9:ad:f6:d9:29:7b:09:9f:6f:f1:9a:51:a4:b8:f8:
         7a:8b:e2:b4:e7:1a:83:bf:4e:65:10:e9:87:e6:3e:c4:e7:67:
         59:3e:70:cc:d6:ba:6f:37:f2:c4:cf:c2:f6:f2:fe:9d:ce:ad:
         ce:8b:c9:44:c5:70:b9:8e:ee:5e:6c:ab:ab:27:13:62:68:42:
         3f:b8:e8:20:29:96:63:ad:5e:97:5e:b2:3c:5d:17:c9:0c:57:
         1b:87:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----