Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File:                     K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier:          pkhJgFwNBcuzhrlPE2i6PWlL1Cq2Vqkyk8JBZ0ecfJw=
Subject key identifier:   CD:84:25:17:C8:71:7A:F6:DA:9E:22:2F:07:67:30:A9:F4:FF:B8:0A
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer:       /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial:       01962F3DCC7E823477C865ABC105CF45B343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: fP8F1h1ssGpLmbvFC9gi/GtTKAZCsmYUQ0R5DPbSSh0=)
                          2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:7e:82:34:77:c8:65:ab:c1:05:cf:45:b3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=cd842517c8717af6da9e222f076730a9f4ffb80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:b3:cd:08:cc:a8:fe:66:6a:eb:5e:9e:90:
                    8c:05:94:c3:36:38:1b:d4:ff:53:99:83:96:e6:65:
                    6b:7b:93:3e:67:46:12:17:74:9f:9c:fa:a0:be:c0:
                    2c:7b:ed:a7:46:4a:35:59:79:1f:95:fb:4b:00:8a:
                    cd:7a:bf:a1:33:f1:bb:a4:7a:39:96:72:25:82:e2:
                    c9:ed:77:70:57:dd:e1:85:f7:f4:35:ab:7f:cd:7d:
                    fb:cf:cf:38:f2:ed:5c:46:e7:a2:e2:18:9b:1f:5f:
                    7e:f6:5f:34:4e:7d:93:68:f0:77:69:78:83:2f:3a:
                    f7:bd:eb:72:5e:1b:fc:60:ea:b5:a7:3f:78:d9:e5:
                    f6:f7:c7:ce:1e:d9:88:35:24:1a:30:74:00:81:95:
                    68:42:d0:f5:29:ac:94:c6:21:fe:6e:ce:d2:cc:35:
                    a7:08:cd:b2:28:c9:e3:b1:84:51:52:76:39:b4:b4:
                    c7:91:e8:8e:01:57:3c:80:86:7a:a6:3d:e0:25:27:
                    13:2c:0c:6a:b4:84:04:5c:fd:1e:50:f1:03:4a:99:
                    af:fd:62:6a:26:11:e1:72:24:d8:e1:d5:c2:ba:49:
                    d5:03:f1:51:e2:b6:00:04:a5:35:55:5b:b6:7b:ff:
                    65:e6:60:2e:25:a8:ac:5e:01:fe:f3:d4:6a:d4:30:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:84:25:17:C8:71:7A:F6:DA:9E:22:2F:07:67:30:A9:F4:FF:B8:0A
            X509v3 Authority Key Identifier:
                keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:85:78:e7:16:7c:80:f0:a3:82:fd:60:69:a1:c7:fb:86:
         b7:8c:03:2d:ff:d7:eb:e2:cd:18:40:ed:f7:02:02:ca:15:43:
         8c:4a:85:2c:c7:cd:e0:1d:85:b8:47:54:15:2a:7f:df:7c:b2:
         ea:4c:cb:24:e4:97:51:bc:55:5e:cc:f2:6b:71:48:71:6e:10:
         95:c2:66:19:12:6a:1a:36:15:43:58:58:7a:84:9b:bc:56:52:
         e6:c9:93:e9:4c:af:c9:a5:ac:68:d7:c7:c3:51:20:c3:74:49:
         bf:e0:3d:be:5c:bc:5b:f1:64:bc:9c:97:8b:4a:15:a0:fe:9d:
         27:55:24:ca:da:98:c9:2a:b9:49:67:b2:ac:f3:9d:66:fd:a2:
         94:99:b2:27:4c:eb:e5:3b:61:7f:8d:e9:81:2a:0f:4a:d6:34:
         7c:e4:6d:1a:e9:cd:04:33:7e:5e:8c:9d:c5:2d:47:1f:bc:bc:
         03:02:fe:91:ca:1d:97:e1:e3:d7:a2:f3:bc:c5:e3:6b:ef:5f:
         96:8f:fd:db:b9:2c:5c:28:e5:b5:8c:7b:79:2a:7f:06:fb:97:
         00:74:87:e4:b1:dc:77:09:ad:5d:02:9d:26:8e:8d:6e:14:7b:
         fd:9c:dd:e7:fe:13:41:d4:31:0f:df:bf:53:2a:56:07:7c:37:
         71:ee:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----