Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
File:                     Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft (raw, json)
Hash identifier:          Pwvb4DIbHCsTx77zswyCYTS0e7tXDtHnAn3lmdlJQFI=
Subject key identifier:   FD:5C:51:88:9D:4F:6B:68:0F:2B:4A:30:6C:D8:37:BC:B3:D8:2E:71
Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9
Certificate issuer:       /CN=2ace126fa5830911083e45f583cadb08a63ec6f9
Certificate serial:       01962FAB35586C6E93DF0862D4372F23CAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: Et82Ox-YoPWswPFqxd1JmT5HiVY.roa (hash: dKjp2M/qEJfQktMuqf3U3untvmBMHbGfy5ZX8hyRWlU=)
                          2: Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl (hash: 5xKvbwxfvKG8gwUzsN6MlIsxiJR30Xgt1Z6DCuovKzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:35:58:6c:6e:93:df:08:62:d4:37:2f:23:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=fd5c51889d4f6b680f2b4a306cd837bcb3d82e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:80:02:d2:83:ff:eb:60:59:3f:d4:29:9e:
                    57:6b:d9:43:42:04:c5:a0:cf:39:49:43:ac:85:10:
                    cb:96:bb:9f:de:d4:dc:65:3c:97:5e:8c:ec:1d:8a:
                    b5:f6:aa:0d:6e:ad:cc:8c:18:03:71:83:9d:61:a6:
                    f7:72:c0:eb:41:20:b2:88:96:a3:84:b7:ea:41:4e:
                    2f:0e:18:e8:d6:f3:cd:f5:51:0f:9c:d3:f3:72:29:
                    a0:7f:a4:26:04:b0:d5:e8:a7:a2:95:fa:ee:1f:e1:
                    f1:a7:33:98:65:c3:36:71:73:5c:c5:6c:1d:c3:dd:
                    2c:0c:d6:bb:1e:95:7e:0f:07:85:f0:dd:07:66:ed:
                    4c:76:32:71:69:e6:15:ba:ff:03:f4:2e:fc:ea:d4:
                    17:d1:f1:23:d2:bd:3e:50:9a:16:44:a0:a6:5f:f5:
                    fb:88:f3:8a:80:19:55:9e:c6:10:e5:43:76:5d:64:
                    02:5c:8d:e7:f5:cb:82:a6:ae:9e:f1:c8:7f:48:9a:
                    66:8b:c4:10:d1:94:90:d1:8d:4d:5e:47:8d:0b:bf:
                    29:f6:01:0f:37:3a:55:71:4b:9d:98:dc:a7:10:39:
                    e7:22:56:f8:09:0d:12:18:b9:f8:b4:36:48:d3:3f:
                    5c:64:ff:03:f7:1f:bc:ea:17:7d:60:15:e6:f8:b5:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5C:51:88:9D:4F:6B:68:0F:2B:4A:30:6C:D8:37:BC:B3:D8:2E:71
            X509v3 Authority Key Identifier:
                keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:be:2a:e4:e3:6b:95:e0:5d:b2:90:b3:39:86:d7:24:9d:a7:
         5a:5f:a3:ab:5d:81:13:60:27:9b:38:fa:fc:2c:26:6e:f0:22:
         0c:c5:c6:5e:6e:18:30:40:77:d3:ec:36:2b:2d:52:ab:4f:dd:
         7a:3c:00:88:ec:41:00:28:2e:a4:b1:38:75:d5:02:29:ec:44:
         8f:0a:45:5e:8c:18:33:10:de:dd:67:1f:ce:58:0c:b2:ac:82:
         59:c5:64:2e:fe:67:61:ff:cd:1a:67:ab:a7:85:25:33:68:3d:
         8d:c7:ce:c6:6d:97:7e:bd:dc:42:16:e4:a0:3a:32:3b:22:7c:
         74:ec:3e:59:a7:0f:c8:c9:97:90:c0:e9:f1:57:bd:e3:c8:08:
         b3:46:74:15:85:c5:a1:db:87:ea:b1:bd:b6:12:55:90:c2:26:
         83:66:f6:d0:a2:5f:6a:ac:6f:44:32:82:83:e0:78:77:e8:35:
         69:e7:e7:ac:90:36:d8:f6:22:87:ef:54:70:00:eb:23:19:e4:
         32:5c:bd:04:8a:90:ac:63:c2:a3:66:72:89:f1:fa:69:34:61:
         c9:2b:37:a0:4c:df:8c:c7:51:1f:d8:45:e8:4c:76:92:a2:df:
         d2:e2:02:71:7e:9e:f0:bf:e5:a8:d2:4b:ec:f4:5a:4c:1b:00:
         99:f3:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----