Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File:                     KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier:          jH9DlbbO605lY06FFBEZe9ipxXrHYOWVALViiXT/Vbw=
Subject key identifier:   B8:08:A4:BD:2C:C0:CD:B5:9A:08:4C:12:F9:D8:B7:46:8F:34:5E:01
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer:       /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial:       01962F7517BDE9FD29E6F885CA050EE17CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:04 +0000
Files and hashes:         1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: 22Dh5kf4zbJ7iC6X9GSipVKGJ7+CnoFLlgvqXA4p6TU=)
                          2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:17:bd:e9:fd:29:e6:f8:85:ca:05:0e:e1:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
        Validity
            Not Before: Apr 13 14:02:04 2025 GMT
            Not After : Apr 14 14:02:04 2025 GMT
        Subject: CN=b808a4bd2cc0cdb59a084c12f9d8b7468f345e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:52:a2:91:9c:60:9d:c6:ad:02:d2:aa:1f:
                    ac:ea:e5:e6:b6:42:a0:7a:21:cf:f6:d3:55:3f:1c:
                    57:1e:a7:0f:d6:ed:fd:20:1c:1d:4a:2c:a8:0c:c0:
                    0b:2a:29:97:8f:7a:3a:e7:46:61:f9:12:e6:20:38:
                    44:79:83:39:e9:c0:9c:c5:a5:fd:0a:19:82:fe:0a:
                    30:be:a5:18:11:8a:2e:51:73:89:6f:97:e5:53:2a:
                    22:35:46:39:bc:ec:c4:aa:a4:0a:b5:c1:d3:03:c7:
                    92:10:ad:ce:24:8c:c9:cb:c5:9d:dd:6a:c2:f4:79:
                    0e:38:da:67:9f:12:cb:64:e1:b1:c8:75:e1:13:81:
                    e3:e7:be:2e:d2:3a:01:72:14:03:45:3c:60:01:3f:
                    bd:60:d9:10:18:21:c9:f8:be:38:f4:cf:8b:8e:fe:
                    92:94:c8:e5:af:62:b6:aa:48:14:2e:ec:ed:82:4f:
                    5d:ae:f2:42:d8:55:36:f5:1c:e4:fc:f4:bc:68:02:
                    1a:7c:a8:8d:3c:89:31:10:9b:75:cf:f4:a8:b7:ef:
                    8f:55:ef:e8:ca:b9:77:83:ca:2e:f6:a1:61:ca:63:
                    36:31:d6:1f:12:1b:3c:fc:46:c6:9a:de:69:aa:41:
                    60:f4:5d:83:e3:75:ac:35:72:b9:ea:58:57:47:84:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:08:A4:BD:2C:C0:CD:B5:9A:08:4C:12:F9:D8:B7:46:8F:34:5E:01
            X509v3 Authority Key Identifier:
                keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:90:58:e0:49:4b:5b:13:d9:a2:6d:7a:c7:2a:47:0a:4f:
         e7:0a:31:c4:0d:85:7a:f1:ad:f7:7e:a7:72:a0:ec:b3:e3:7a:
         15:2a:e2:35:4b:12:ca:26:b3:9c:32:28:f3:69:c0:08:36:3e:
         8a:e3:f4:62:d7:e4:ba:54:39:c9:db:17:cf:47:a4:de:1b:01:
         b1:e1:c9:2b:70:65:5e:cc:65:29:e4:c1:c8:ad:aa:24:f1:a0:
         e9:ec:38:ed:78:e9:e8:a6:9d:d8:93:38:12:ed:98:57:12:4b:
         24:41:d9:d1:61:09:8b:78:46:dd:1a:d2:05:8c:9e:2a:05:fd:
         2f:59:5e:e3:ca:5c:14:3c:ed:10:0a:17:8c:a4:13:2b:67:d2:
         a7:97:69:35:50:9a:ff:35:05:f6:32:ac:f2:80:81:b5:7e:d8:
         3a:4b:9d:c5:8c:a4:d5:ce:70:fd:60:b0:54:64:2c:88:63:5f:
         30:88:44:ec:af:55:78:7c:55:d0:97:0c:b9:54:6a:1e:7e:a4:
         35:86:1a:71:8d:17:9d:84:21:62:73:66:d8:34:37:fb:27:15:
         a4:a5:48:14:27:07:5f:5d:57:d4:39:c4:4d:c4:57:e9:b3:9c:
         7d:71:41:94:62:fe:81:ed:31:aa:53:6d:6a:1e:30:88:af:82:
         8c:9b:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----