Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File:                     KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier:          MPq+EONuzRqHInnMijRpI7pB8yhFcQyXVLotHx+OFAQ=
Subject key identifier:   2C:D8:34:D6:E0:AB:29:A4:F1:2C:36:DC:5C:16:DB:2D:98:E4:01:8F
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer:       /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial:       01962F068234849EA7E7C31C9A9E419D61A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: VhKAmvLnqitGmPxTA71k9zUswz9Lv+zwEn7Uyd6nwN4=)
                          2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:34:84:9e:a7:e7:c3:1c:9a:9e:41:9d:61:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=2cd834d6e0ab29a4f12c36dc5c16db2d98e4018f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:31:c7:05:55:93:04:27:ce:b4:e0:ef:14:
                    d0:0b:57:a2:ae:de:b7:b5:2c:fb:bf:53:b4:af:ad:
                    5c:a0:12:db:91:01:81:c3:2f:19:08:9a:fd:1c:a2:
                    6d:cd:59:d0:fb:4c:d1:e4:80:d5:04:cc:0d:84:7c:
                    79:68:30:22:6d:f2:73:6a:76:12:85:5f:e4:05:97:
                    cb:1d:01:10:e9:6f:9d:44:fd:c0:4e:f2:47:2c:85:
                    01:e6:b7:93:8a:21:3e:d6:5e:90:65:8a:d2:3d:08:
                    7c:e1:52:17:19:bb:8a:41:44:86:75:7a:23:8e:42:
                    35:14:77:fa:b0:00:33:b4:aa:89:b3:0a:f8:27:de:
                    22:09:00:5b:0a:6a:eb:ee:93:ae:b0:e5:c7:6c:b2:
                    18:94:4b:ea:06:bc:8c:ab:9b:37:e1:82:a4:c7:8b:
                    8b:cd:9d:d0:c4:49:c0:a4:50:0a:f1:f6:86:11:56:
                    6c:7f:37:f3:5b:4f:c1:c6:45:39:f6:bc:eb:93:b3:
                    97:7d:f8:4a:9b:24:bc:64:44:67:8c:b2:df:a9:f9:
                    c4:0e:d0:5b:cd:92:6a:1d:bd:72:9b:1c:34:88:3e:
                    7c:fb:16:e7:9a:28:0d:6a:e7:fc:99:a3:2c:e0:61:
                    c1:c0:ff:b8:03:9a:6a:c0:a3:7e:0d:1f:aa:7d:3c:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:34:D6:E0:AB:29:A4:F1:2C:36:DC:5C:16:DB:2D:98:E4:01:8F
            X509v3 Authority Key Identifier:
                keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:0c:03:b9:07:a8:c5:70:62:56:c9:70:1d:b7:77:15:e8:
         58:d0:69:b8:da:e3:b0:0d:a2:1f:d6:4f:54:b1:9f:b5:6a:c1:
         e1:11:c5:4e:12:3e:79:18:ed:2e:d2:16:df:d7:40:38:73:47:
         cc:c0:26:2f:7b:6b:fe:b7:27:2c:0c:96:81:99:41:30:21:61:
         b0:39:ce:72:cc:45:22:3a:0f:db:35:0c:c0:c9:57:29:35:57:
         b0:6d:ae:1e:8d:63:9e:e1:e1:49:80:c6:fe:6b:44:3c:c8:65:
         a9:7f:b3:aa:4a:b0:aa:98:5b:b2:f5:1a:5b:e5:61:54:cf:03:
         e8:cf:b2:de:63:9a:2c:4f:88:cb:a0:70:1e:db:05:f6:6c:03:
         9c:16:74:73:e6:56:a2:97:61:a1:a6:4b:21:c5:59:0e:8f:1b:
         a4:81:33:7b:9a:ab:9b:96:41:8d:3f:11:40:b1:62:19:16:a4:
         be:b3:54:9c:c5:37:cd:04:ef:f8:ef:38:a6:de:62:35:ee:b2:
         3a:ea:11:a3:15:df:11:bc:7f:90:09:7c:b7:8f:d3:f8:78:35:
         51:02:c8:e2:37:e4:e4:6f:2c:ac:d1:a7:38:58:0b:0a:ee:51:
         e9:8f:b8:fc:61:04:13:14:7d:ae:37:11:26:9f:64:24:13:16:
         74:99:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----