Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File:                     kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier:          PFFTkUT09sM1MtZFGFxVXaVRRazFxBvF3ZRDQ7+LYqw=
Subject key identifier:   80:69:C1:68:2F:BF:9D:7E:59:37:9A:A5:F2:A6:66:09:50:EC:2F:51
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer:       /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial:       01962ECF71AEA8EDC4D658EBB86B271CCA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number:          0775
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: 91vhz9KWFHYPQzg7dBoPZzGphmgSjF3clqogfFhb2V4=)
                          2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:71:ae:a8:ed:c4:d6:58:eb:b8:6b:27:1c:ca:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=8069c1682fbf9d7e59379aa5f2a6660950ec2f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:5a:00:c8:8a:84:39:1a:c2:55:47:c6:0d:
                    8f:cf:56:ed:4a:a6:af:c5:dd:a1:8f:2c:29:a2:ce:
                    44:11:24:f3:88:62:0f:80:fb:7e:12:7a:8b:be:b4:
                    72:7c:71:6c:17:fd:07:bf:21:5d:6e:99:04:ae:23:
                    f7:9f:0d:a7:55:29:4f:43:2d:cd:3d:4d:b2:50:3c:
                    32:37:59:3d:79:3d:40:b3:92:fc:d5:3f:39:8c:ec:
                    a5:95:99:4c:6d:3f:be:e0:98:80:ba:5f:65:be:ac:
                    04:a1:b4:ce:76:fe:c6:77:c3:2a:4c:e8:11:b1:39:
                    a8:4b:e0:5d:68:e8:0b:ce:3e:ba:76:44:5d:cb:da:
                    70:80:f3:62:2e:6d:b8:2e:aa:3f:a2:30:cc:c0:aa:
                    32:4a:cc:0b:d3:a2:f4:ba:a1:b5:ad:bd:97:79:2a:
                    0d:ed:95:85:5e:07:b4:7f:ab:48:0e:71:f7:bb:02:
                    44:6e:a1:f2:c2:10:49:ed:91:5d:a1:60:39:e5:9d:
                    19:d5:5d:f7:72:68:c9:38:96:2b:a6:c1:8b:e2:51:
                    3d:c8:94:a2:84:9f:b6:83:c4:b4:b2:29:ac:41:f3:
                    1b:18:f2:a0:94:35:21:a9:0c:70:2a:14:2d:fd:70:
                    f7:df:e2:12:de:e4:c7:d7:7b:c1:7d:cd:c0:db:57:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:69:C1:68:2F:BF:9D:7E:59:37:9A:A5:F2:A6:66:09:50:EC:2F:51
            X509v3 Authority Key Identifier:
                keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:64:64:1d:04:bf:30:22:29:df:23:b2:39:1b:ec:fb:89:fe:
         0d:a2:9d:b2:4d:21:94:59:01:4c:74:42:5f:67:96:f0:69:33:
         c1:9a:d4:14:9f:6d:a3:08:d4:11:e4:08:19:25:14:ba:4d:90:
         54:97:23:f3:76:a0:3b:53:44:8c:80:ea:39:40:93:0d:45:e6:
         19:ec:4b:70:c3:39:47:ca:98:a1:5d:c9:76:af:d1:59:31:f5:
         e5:14:57:34:e0:3d:fc:06:22:7d:cb:b5:96:ba:00:6b:27:e9:
         33:b5:39:e2:c6:17:03:1b:ca:09:d5:02:43:c2:d9:86:88:e7:
         ac:56:e1:6f:7d:c7:4e:fa:19:51:6d:39:1b:a4:4a:aa:2b:ff:
         07:5e:32:4f:b3:76:f2:6b:f5:7b:2b:64:b3:fd:2f:cf:4b:77:
         c2:05:6b:cf:45:ed:61:d8:53:ba:cb:77:2d:9a:81:53:f6:9d:
         77:18:4c:48:8e:00:68:c3:c7:01:14:f3:99:7a:a4:0b:c5:f4:
         7c:95:9e:68:29:0a:ba:38:6a:f2:02:06:fb:35:56:18:1c:48:
         a4:47:08:71:ea:b8:8a:d8:25:7c:86:d7:a1:48:a8:59:e1:19:
         7d:5e:67:60:ac:62:9b:c6:6c:fe:51:0e:43:6c:43:77:56:71:
         fd:4b:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----