Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
File:                     KEo1xF93T6_4QkXOEkvcZVx0Uos.mft (raw, json)
Hash identifier:          9pVIFx0HuHSFo5Kvk9NBsw83QoO8XsxbPIRNoe1SO2M=
Subject key identifier:   3C:1D:CF:22:C5:2F:4E:02:90:1A:D2:73:7A:8E:90:D4:EB:64:5F:7E
Authority key identifier: 28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B
Certificate issuer:       /CN=284a35c45f774faff84245ce124bdc655c74528b
Certificate serial:       01962F06DB39B4385E34BD0974772134B91B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft
Manifest number:          05BB
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: KEo1xF93T6_4QkXOEkvcZVx0Uos.crl (hash: +G7+K5cCGzfZH7K/tkrHggZVYyUtSsQIzoKoS/Rebwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:39:b4:38:5e:34:bd:09:74:77:21:34:b9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284a35c45f774faff84245ce124bdc655c74528b
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=3c1dcf22c52f4e02901ad2737a8e90d4eb645f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:1f:e3:1b:d0:7b:e2:1e:bd:78:f8:ae:2a:
                    2c:83:de:1f:ad:5e:1c:6c:4e:44:72:b4:de:49:54:
                    1f:77:52:39:79:40:b2:c5:f6:4a:7d:bc:bd:83:e8:
                    ad:59:30:29:9b:bb:1a:09:67:d7:1e:d6:25:a6:92:
                    9f:03:0d:ac:d4:5f:d3:22:8d:1d:4e:53:22:ac:e4:
                    9d:b7:6a:99:8b:98:db:54:08:96:36:e9:e3:21:fa:
                    94:3d:c9:dc:74:e1:cd:6b:34:3c:84:b9:64:20:98:
                    91:7a:da:86:49:a2:60:80:b0:51:d2:0c:a0:03:21:
                    fc:55:9c:49:6c:f9:37:99:f3:71:80:5e:e2:3c:cc:
                    9b:9a:01:06:40:85:3a:de:d1:79:a7:10:a1:80:ae:
                    cb:e4:71:4d:ce:96:0b:f8:c6:90:ff:42:9d:f6:98:
                    0e:33:b8:65:e7:f2:2c:28:4a:62:e7:65:ca:8f:06:
                    04:1d:fe:e9:e7:71:56:76:0b:6a:78:f3:4a:6c:c1:
                    b7:09:08:87:dd:0b:2b:3f:9b:f7:4c:ec:b9:91:30:
                    b2:1d:cc:aa:32:96:f8:8d:76:52:91:d6:72:5a:06:
                    a7:45:ad:53:41:ff:40:9b:66:7d:c5:94:5d:ff:16:
                    c1:8a:25:83:3e:e4:65:a0:3e:f8:2a:9d:34:33:30:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1D:CF:22:C5:2F:4E:02:90:1A:D2:73:7A:8E:90:D4:EB:64:5F:7E
            X509v3 Authority Key Identifier:
                keyid:28:4A:35:C4:5F:77:4F:AF:F8:42:45:CE:12:4B:DC:65:5C:74:52:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEo1xF93T6_4QkXOEkvcZVx0Uos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/920301-5cae-4da1-a3c2-af00d71d3407/1/KEo1xF93T6_4QkXOEkvcZVx0Uos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:0e:f8:e5:cc:03:91:12:22:15:2d:a0:1c:26:51:ae:70:
         36:34:8f:6d:6e:12:8a:7c:60:df:6c:f3:27:30:25:03:3a:98:
         e4:ab:4d:cb:d5:a2:32:85:1b:fe:f8:63:31:ef:df:6d:20:99:
         19:69:d0:0f:b7:7b:18:6c:a7:8a:38:00:83:17:01:61:04:9e:
         66:33:c4:5d:73:50:5e:70:e4:d8:ad:5d:5f:08:73:85:6c:6d:
         5f:5f:a8:da:60:ed:74:41:65:8d:97:37:92:dd:88:cf:d3:26:
         4c:2c:f5:41:2e:ea:2c:93:f3:4b:7c:c1:36:fe:b7:f7:94:52:
         28:a2:ec:67:8c:79:4e:20:5b:aa:90:f5:90:8b:5c:56:68:bd:
         9a:6c:b0:4b:22:20:d0:a8:98:21:1f:0b:9e:15:8e:61:73:53:
         1f:b1:d9:5f:3a:34:df:42:86:76:de:e2:61:1f:b1:69:b1:7c:
         64:6f:d8:d2:7a:24:d8:a7:41:a8:df:68:9d:13:b8:f0:11:16:
         0a:28:0f:93:67:04:23:6a:70:2a:70:26:fd:98:1e:b7:d9:85:
         05:98:48:ca:22:6a:f0:1d:83:6c:8b:00:21:84:aa:22:49:29:
         3d:5d:23:8c:90:d3:2d:94:57:39:cd:44:d0:0e:e7:46:26:54:
         ba:e7:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----