Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File:                     K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier:          66kQqFkK7iyQ9IdGi8EbWlRbqNYWov8i6WY7YYxI/54=
Subject key identifier:   2D:82:87:95:2E:50:D2:39:DC:A0:D2:2E:F4:23:5C:51:25:72:A2:6E
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer:       /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial:       01962E998A828B1F07F11C603E8A995D43EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: zhaLYw850E1/iTNkVIVjal7f1r6nXXa5F7piyXefbYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8a:82:8b:1f:07:f1:1c:60:3e:8a:99:5d:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=2d8287952e50d239dca0d22ef4235c512572a26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:18:fd:0e:a4:6e:de:9b:88:57:ed:f2:86:
                    d9:f5:5b:a0:f0:a8:62:36:7f:1d:44:87:d3:9d:92:
                    39:e2:d8:01:b0:18:9b:c7:16:36:48:6f:89:02:a5:
                    7c:c9:58:18:94:c8:e5:f9:a7:de:ca:20:cb:d7:c4:
                    45:57:cd:47:ac:d4:39:57:f4:34:20:7a:e4:8e:ae:
                    6b:22:98:75:c8:93:d3:45:c7:d8:97:1b:fa:75:65:
                    ec:36:6f:5d:a3:46:8f:aa:a5:7d:4d:ee:1f:1e:25:
                    2e:ba:ae:65:dd:ce:d1:c5:06:d3:05:b8:4a:46:6f:
                    64:85:49:8b:fe:73:cd:cc:dc:91:01:df:96:bf:bf:
                    fb:f0:96:d7:74:62:a7:05:dd:61:f1:ac:8b:c2:4f:
                    a2:93:50:02:88:a7:9b:f7:39:e7:14:8b:32:a2:84:
                    ba:09:ff:85:c3:14:d4:25:63:53:a2:04:93:f8:04:
                    15:48:08:d5:07:f9:a7:9f:7d:49:fa:e7:c9:23:a8:
                    41:ed:b8:7a:7d:de:38:7d:b4:32:bd:29:3d:cb:bf:
                    6f:2f:75:05:79:e7:1b:ed:59:f0:7e:3c:e0:06:5e:
                    e2:f4:d5:41:75:ce:62:30:02:2f:71:34:64:da:97:
                    e5:c3:a6:83:02:4f:67:31:7d:4f:40:c4:b8:15:75:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:82:87:95:2E:50:D2:39:DC:A0:D2:2E:F4:23:5C:51:25:72:A2:6E
            X509v3 Authority Key Identifier:
                keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8f:f3:8a:75:96:94:f9:db:bb:33:22:a4:e5:62:83:89:f4:
         42:f1:74:76:76:8c:bd:b8:d2:62:8a:90:55:40:41:de:20:22:
         64:ee:22:6d:83:3f:46:7f:76:42:a4:5a:7c:7e:f9:b2:08:11:
         a2:1e:bd:05:07:c2:83:11:59:51:8f:d9:f6:73:cd:7e:33:0c:
         ab:04:ab:e0:57:a4:33:bc:1c:61:a3:47:8b:26:44:d0:c9:f3:
         40:14:fa:c2:03:6f:8f:19:c0:a6:db:90:3f:04:50:5c:bf:7b:
         1a:6f:12:bc:5c:79:03:79:b6:18:04:e0:58:e2:8c:ed:68:5f:
         52:4c:42:fc:e9:f1:58:5a:9b:94:8c:76:a0:76:c2:47:a1:dd:
         de:37:1f:fb:34:81:e9:77:fd:9c:f2:ce:df:17:8f:ad:13:d5:
         b8:c6:4a:a7:ec:b7:8e:f3:c5:31:e7:f5:fa:3c:fc:d6:ac:ff:
         46:1a:9f:c4:b7:c9:92:56:b5:87:58:bb:bd:1e:f6:10:c2:21:
         eb:47:ae:ae:e6:7e:79:c3:5c:b6:7a:04:37:e3:0d:52:20:7c:
         f0:19:c3:53:af:e3:83:01:79:71:05:3a:01:0b:94:1c:7e:eb:
         5f:05:82:2f:a9:0e:ef:04:fa:55:08:16:47:af:47:75:23:55:
         1a:b1:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----