Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File:                     KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier:          5bAjyJRM2e7g4QSIQSPpKyZvJg+brjIMNtZfaJ6p8iw=
Subject key identifier:   9A:51:C1:D0:D6:9C:80:B1:0C:F1:40:87:BF:33:47:15:51:42:A7:ED
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer:       /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial:       01962FAB3087067C8FCDBBE7785CF9F20888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number:          067B
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: PLnwwFThKT6MQxTcTTeawWB3pwFdEPg5YhPgOXHFjO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:87:06:7c:8f:cd:bb:e7:78:5c:f9:f2:08:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=9a51c1d0d69c80b10cf14087bf3347155142a7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:b0:8c:69:2a:a6:2f:6f:bd:86:4e:10:f8:
                    73:44:ce:1c:62:38:b9:ea:40:6f:4b:78:54:cc:09:
                    c0:1f:ec:6b:4c:0a:0e:b4:f8:e6:fa:6c:95:84:f2:
                    1d:f1:1b:f4:d4:fd:b4:08:ff:02:ad:bb:55:a6:92:
                    03:25:b6:cb:60:16:20:97:1f:1f:08:8f:b7:42:0f:
                    ab:92:2e:62:ab:6c:67:91:a1:ad:eb:ab:3a:eb:b2:
                    42:2a:c9:7f:23:7e:cc:9e:a6:b4:1d:a8:01:df:1a:
                    63:5d:99:84:d8:15:73:7b:90:2e:73:b9:fc:c7:c3:
                    6f:d1:3f:a6:31:aa:d7:9b:b3:dd:18:db:db:f9:c5:
                    89:15:20:fc:03:a9:09:8b:7b:07:2c:d8:8f:1d:04:
                    d1:50:ac:aa:7d:b8:2c:a7:32:39:5b:26:26:c4:7b:
                    08:22:71:3e:f2:81:25:1c:33:27:81:de:cc:af:13:
                    8a:4c:b4:09:53:09:62:ab:6a:bc:9a:2a:98:f2:9c:
                    f2:74:59:23:6f:b8:68:05:f0:ad:a2:43:6f:49:11:
                    31:40:07:a4:1c:ce:ee:aa:67:f2:b8:19:a9:46:88:
                    c9:30:1d:3d:6f:b2:88:10:b6:fb:7d:7c:f6:29:66:
                    cf:28:32:f0:ea:a9:06:a9:5d:ec:b1:94:7a:71:62:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:51:C1:D0:D6:9C:80:B1:0C:F1:40:87:BF:33:47:15:51:42:A7:ED
            X509v3 Authority Key Identifier:
                keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:0f:05:a8:4a:e1:7e:31:cc:37:12:ea:58:32:82:36:e5:5a:
         d3:17:cc:e2:11:53:8a:d1:19:c7:6d:c3:b4:bd:84:39:84:74:
         fd:eb:d5:95:ab:00:dc:10:9c:9a:77:bd:83:eb:b2:18:0e:0a:
         5c:52:99:00:91:63:1d:c3:7f:c4:5b:12:50:48:5b:e0:0c:cd:
         2f:eb:11:61:e1:f5:df:9c:4c:4f:4a:59:ba:25:63:2e:57:f8:
         6c:1b:5a:2c:d7:d2:c7:89:20:a3:5f:2f:aa:30:76:b9:bf:11:
         6a:67:c4:8d:b0:73:c3:96:73:a8:07:1c:80:8a:86:94:e7:60:
         03:f4:1c:37:2b:19:f7:03:f8:b5:f8:fb:be:d4:21:54:c5:da:
         ff:3f:33:b5:4c:64:be:8f:31:28:26:56:77:b1:2e:8c:a5:6c:
         d7:e1:36:f3:f8:45:d6:a3:af:0a:05:cc:f0:70:2d:89:b6:bc:
         df:1c:a2:90:b3:2a:dc:1c:f0:06:58:ff:64:25:64:30:f9:15:
         18:26:05:9f:cf:9f:22:3c:84:83:68:ce:8f:83:c7:fc:59:e3:
         93:18:bb:32:15:0a:40:cc:ca:f1:82:33:f9:f5:26:ce:1c:4e:
         d8:44:8d:03:2b:c0:7d:ba:ec:7d:d9:e7:34:64:07:14:99:8a:
         78:66:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----