Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File:                     KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier:          Sw5qOkXqp/MUo6PDQuyKN57HwBTATGbAEOHzsDl24qM=
Subject key identifier:   D4:42:82:B8:2C:19:B3:C5:1F:D5:C5:12:49:4E:C2:0F:2D:57:98:E7
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer:       /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial:       01962F06CDC6B544EBF02DFBD889FBCA4050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number:          0596
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 0ew3GDGdcko8IEl72SU1gGU7W_k.roa (hash: 9xx5BwMCjSrUJr+68yVrM18oEIPDjZ9uwovBe4fuSRQ=)
                          2: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: 3lZ2ygZUxfs/j+3C3Ex2+csz254z2A65z6lmuAincFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cd:c6:b5:44:eb:f0:2d:fb:d8:89:fb:ca:40:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=d44282b82c19b3c51fd5c512494ec20f2d5798e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:dc:d3:32:ff:e7:a0:e8:67:c0:f0:5d:48:
                    3c:a7:af:25:06:56:ba:d5:5b:01:ad:e1:02:92:aa:
                    3d:4d:d8:5b:d6:eb:9f:83:46:40:87:56:0f:2d:cf:
                    1d:d9:b4:0a:9a:81:8d:2f:4c:a1:58:fc:bc:8d:04:
                    92:85:a9:d8:c4:6c:d5:47:10:92:4b:13:52:08:91:
                    18:1b:1f:8b:4e:a1:40:46:3a:5a:33:af:fe:64:86:
                    5c:4d:65:4c:d2:7e:e8:35:86:f9:e6:54:7d:cb:25:
                    cc:29:c7:ca:38:58:a0:02:4a:a9:05:2a:d4:aa:a8:
                    66:ca:2b:17:6a:36:ef:37:fc:a0:2e:4c:68:46:68:
                    ad:0d:c6:83:b8:0e:03:db:1e:0b:3d:42:b1:6d:01:
                    d8:5c:48:f4:98:9a:b7:fc:bb:89:e7:3d:8a:01:a8:
                    ad:d4:c9:80:5d:a0:01:4c:12:52:fa:15:6c:50:3d:
                    7c:c2:2b:30:f9:2a:ef:29:fe:de:3a:2b:b4:04:58:
                    a5:ee:c6:63:62:ab:7b:1c:c0:36:34:58:b4:38:27:
                    5e:fc:62:d6:db:63:9a:3e:f8:74:5d:58:05:ba:c4:
                    46:ef:76:0b:cc:7b:a1:bb:bd:ea:d4:74:38:50:3b:
                    f0:e9:4e:a9:b1:22:96:d3:1a:e9:f4:6a:bc:72:6e:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:82:B8:2C:19:B3:C5:1F:D5:C5:12:49:4E:C2:0F:2D:57:98:E7
            X509v3 Authority Key Identifier:
                keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:77:a6:40:4a:69:4c:9e:5c:67:31:a3:c6:5a:2a:ec:15:
         af:b7:fc:93:bf:a9:b2:f2:2c:65:95:f1:0e:5b:d2:3f:5e:02:
         fe:0b:e0:a3:03:1f:8d:71:f0:7a:b3:17:0a:19:de:54:3e:31:
         d5:7f:ba:a4:77:33:aa:58:57:04:68:e4:92:e9:02:c4:8d:a9:
         b1:7b:ae:9b:ab:4b:ef:25:78:ff:5e:85:6e:20:e2:67:c3:3d:
         66:84:fc:a9:87:d6:ce:a9:e6:ce:2c:7e:59:83:81:37:aa:ec:
         5f:44:cb:a6:2b:55:06:59:77:33:93:2a:82:e6:eb:ff:a4:a8:
         59:50:f9:64:e0:06:88:52:69:f3:aa:93:80:f5:89:76:c5:67:
         40:c3:ae:c2:db:21:2a:24:bb:08:f3:8b:c6:34:1d:fb:ac:c4:
         bb:00:08:a2:94:f6:b8:ba:f5:72:f7:fa:17:f4:fa:b5:22:3b:
         72:ce:07:ed:60:b8:0c:dd:a6:24:df:a7:99:d2:88:80:72:78:
         a3:f3:11:d9:20:03:23:b4:50:df:90:69:66:a2:2f:e9:8b:a2:
         bf:c3:1d:d3:6d:67:5d:45:99:4f:5b:0c:cf:5c:a9:4b:9a:e1:
         36:0e:2a:85:c3:5b:39:dc:ff:fb:94:a8:d9:60:e1:27:d0:2e:
         6c:43:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----