Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File:                     KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier:          gdF0GGTNLwI8jW4AEy9TxmmvrjGJe1FsmiCwONxyfWo=
Subject key identifier:   77:83:65:F4:70:0F:66:C3:A0:5B:45:6B:F4:13:D6:67:EC:E3:DA:5C
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer:       /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial:       01962F0710594522514F5C8676C190F258EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number:          0CF1
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: iMSNjPjzA3z6QxGMd1kWR7A4BE3E4B+iFO3LK2zEixA=)
                          2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:10:59:45:22:51:4f:5c:86:76:c1:90:f2:58:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=778365f4700f66c3a05b456bf413d667ece3da5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:3f:97:bf:5c:cc:cc:a8:64:6e:e6:02:3d:
                    06:96:63:42:b3:32:a7:8a:78:a4:65:a5:de:4a:f0:
                    ac:7c:a0:2e:91:b4:83:1b:e5:62:b4:4e:d2:3b:ef:
                    3e:21:d9:fb:77:0a:be:5b:16:de:1d:3a:87:ae:99:
                    86:7e:dd:dc:85:0c:58:8a:80:41:e2:6b:c8:aa:bf:
                    e8:e9:4f:e5:72:a0:e0:db:36:cc:ef:69:95:62:6d:
                    d2:09:e6:67:de:e7:91:15:94:47:33:93:45:d0:88:
                    55:c0:ab:84:44:d9:71:99:4c:ea:f9:8a:8c:5e:c7:
                    77:45:69:ec:3e:54:e1:4d:78:a9:49:36:94:12:b0:
                    3f:9d:85:bc:14:c5:43:7d:2d:fa:15:47:7a:ab:df:
                    dd:d3:9d:9d:75:fa:f1:87:63:d0:a4:6e:f0:6e:8d:
                    4d:92:0f:b6:5f:5e:c5:20:63:c1:a7:6d:8d:e8:5e:
                    4e:e3:79:8b:9e:27:f6:65:03:46:52:df:cf:ef:da:
                    52:0e:8f:ca:c5:ec:33:12:2d:22:14:ae:e2:6e:9e:
                    fb:98:c0:41:a4:b0:b3:f4:c7:66:21:fb:1b:e8:a7:
                    b7:46:b0:29:a3:df:68:e7:b2:54:c7:ac:08:ec:4b:
                    a1:6b:25:1d:b8:98:23:81:ea:33:2b:18:f4:cf:1f:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:83:65:F4:70:0F:66:C3:A0:5B:45:6B:F4:13:D6:67:EC:E3:DA:5C
            X509v3 Authority Key Identifier:
                keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:01:9d:c9:1e:ad:1d:9a:68:5a:33:2e:e0:8b:fc:54:f8:
         f4:6c:bc:1c:65:6b:ef:b4:9b:b8:74:56:f8:a0:c9:cf:31:8c:
         98:aa:2a:2c:50:6c:3a:b7:14:0e:73:01:f7:1b:f3:cc:83:1a:
         82:f5:31:ee:cb:b3:68:27:a4:fa:01:9b:64:e5:e7:a2:71:c5:
         2b:75:9b:b2:9e:71:1f:9e:7e:3e:fb:8d:33:fb:fc:c4:2d:cb:
         7c:30:62:43:1f:30:77:9d:48:9e:a3:7d:70:8d:ff:61:92:6c:
         3c:28:72:e9:33:ed:af:3d:12:31:d4:9d:e1:55:29:59:2e:bc:
         af:6f:8e:49:80:11:7f:5f:7b:86:ea:e2:6e:d7:b7:22:ff:fd:
         29:58:1a:d3:ec:89:62:0e:d2:f8:fb:27:f5:1b:70:24:27:79:
         8e:fa:c4:c4:f1:17:08:21:ba:7f:f1:60:74:57:44:9b:4f:f3:
         84:a2:22:32:c8:59:e5:f1:c2:8f:d2:76:17:83:94:d1:fd:6b:
         19:c4:c6:0a:e7:ef:66:c3:9f:69:31:e0:08:aa:0f:98:72:05:
         91:36:fb:54:e4:53:85:d9:6a:53:ff:c8:bd:57:57:bc:8e:85:
         36:93:9f:5c:70:85:af:39:c0:74:15:b3:a9:99:84:6a:fe:47:
         18:15:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----