Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File:                     KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier:          fTJDTtFv/zQ8+6eEwBzCVD2RnUw9h1KJgG51tLWgMwA=
Subject key identifier:   A9:B2:FB:8C:E1:15:67:51:08:67:2A:76:F1:D5:F8:75:7D:ED:40:2D
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer:       /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial:       01962E2B302B8135BE66A61F52D5DFDDB690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number:          0527
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
                          2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: XAozCF7SJRZDv8PKcOWCfH9Uk6waNC+Z2Z/gtXFB1oE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:30:2b:81:35:be:66:a6:1f:52:d5:df:dd:b6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=a9b2fb8ce115675108672a76f1d5f8757ded402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:d5:12:30:3e:cd:ae:f1:f3:47:e2:fa:f4:
                    57:8c:b6:fc:1e:ce:0b:4b:a6:43:32:b2:a3:ad:56:
                    9b:38:2a:b5:db:9f:3c:4a:c8:d3:81:f0:5f:d6:39:
                    d3:b6:35:32:64:50:71:d6:59:3a:ee:7a:10:d5:4d:
                    65:6d:47:62:01:28:ae:48:ef:15:58:52:97:5a:03:
                    2f:7b:ed:19:6d:38:d1:d8:1c:85:b1:91:06:08:55:
                    81:e7:01:8e:ba:ab:25:29:ef:3e:f4:a3:31:7a:d7:
                    5f:8f:5b:12:6a:16:55:5b:cc:ab:fc:6b:3c:d7:ee:
                    38:02:b7:ec:22:a4:79:bf:5e:c8:9e:56:31:8a:12:
                    1e:22:71:e8:38:d8:69:0a:40:c4:2e:69:9b:9d:89:
                    52:35:1f:9f:9e:6a:3b:2d:91:79:d2:16:a8:c5:19:
                    c4:27:2d:87:58:ac:97:36:63:77:70:68:85:55:2c:
                    0b:fe:3e:a6:e2:d4:53:50:7d:a3:98:ae:d2:2e:44:
                    c2:87:de:2d:b1:26:8e:ca:d1:f4:f6:79:eb:2d:1a:
                    19:c0:fe:88:1d:d0:2d:20:ab:1d:88:22:51:29:18:
                    74:85:76:57:9f:f1:22:33:6c:2e:87:5e:b5:35:38:
                    86:ab:8d:51:74:a7:31:6b:02:48:f5:ad:fd:88:2e:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B2:FB:8C:E1:15:67:51:08:67:2A:76:F1:D5:F8:75:7D:ED:40:2D
            X509v3 Authority Key Identifier:
                keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:e3:db:8f:40:5e:58:ee:3d:25:f1:40:f8:3c:87:0a:cb:
         98:e6:12:78:4f:9c:06:39:06:3e:a8:42:1a:48:be:de:57:48:
         14:99:c4:94:bd:6e:f7:c2:0c:62:c7:3c:3b:f4:94:5d:1c:e0:
         5a:20:07:d2:aa:55:2c:86:14:de:7e:a5:9a:4c:8c:73:1d:ef:
         44:61:84:1e:88:07:47:cb:4f:15:21:d3:8d:9d:cf:14:4e:c0:
         58:cf:ed:64:87:99:03:ea:3c:db:33:03:27:4b:c9:04:f9:e2:
         b6:19:4b:c1:d9:51:13:5d:1f:7a:2e:5c:4d:34:1d:43:9c:27:
         93:3c:d2:da:46:62:7a:30:33:87:a8:3c:b8:23:46:9c:ed:9f:
         40:54:1c:75:21:8b:88:79:5a:9d:62:b2:c9:11:79:20:40:6b:
         eb:9b:3e:fb:b5:b7:fb:8a:db:2e:95:e7:bb:04:bc:f6:2b:8d:
         93:d0:d6:7e:93:4c:4c:c6:35:83:e0:11:f7:22:e1:21:c5:4f:
         71:b0:ea:12:a5:a8:4e:45:7a:61:f4:9e:89:de:8d:85:f2:0e:
         00:64:03:08:92:dc:33:ed:c4:7a:24:83:4a:33:cd:9a:b6:a6:
         62:f0:d7:11:62:82:df:57:e0:44:96:f7:88:b9:73:70:4e:21:
         80:77:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----