Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
File:                     KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json)
Hash identifier:          RrlUtiGAI4qR1rHY4Iw75sbZgOVW6my6ex15iwEPda4=
Subject key identifier:   A5:70:09:53:A1:A9:E0:77:38:5C:92:77:15:C7:E2:AA:F7:AF:65:EB
Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
Certificate issuer:       /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Certificate serial:       01962F74D66309F70387EC028051528BEC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: oWDdva7/R3H9D849k5At0pJG9F5+uiy4Ltn6hvI1p58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d6:63:09:f7:03:87:ec:02:80:51:52:8b:ec:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=a5700953a1a9e077385c927715c7e2aaf7af65eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:d9:f7:4d:9e:68:0a:1a:f7:94:29:1c:6a:
                    e2:98:8a:a9:f6:ae:21:fd:aa:b3:f2:a7:0e:cb:38:
                    27:45:e7:50:39:1d:59:21:61:38:8a:be:ae:47:3e:
                    e1:b7:d0:9b:07:d2:6c:64:84:67:8d:c0:ef:bf:cb:
                    46:1a:d3:20:d9:f9:ba:12:ad:c5:80:a1:ba:36:19:
                    4a:bf:ce:8f:d2:91:c6:4f:fd:4d:36:12:db:b6:0f:
                    e8:50:24:63:d5:ce:e1:09:1b:9c:1d:71:11:1c:9c:
                    e1:a3:73:2b:82:a6:ca:17:c7:d3:f2:bb:b9:47:48:
                    fa:50:a2:8e:a6:77:8c:2e:0a:e1:47:ab:8d:a7:45:
                    37:f5:23:5b:90:d3:d3:bc:c9:2c:6f:2b:a8:b4:80:
                    1b:e0:a0:3d:5c:08:f3:26:74:89:e9:2e:c5:67:55:
                    2c:c8:83:0f:2f:50:4a:e2:d5:05:12:5a:e0:ed:c3:
                    73:69:d0:12:3e:99:da:7f:f2:c2:5c:6a:45:10:0e:
                    dd:c9:8c:bd:b0:ae:24:f5:20:94:1b:88:5c:d1:e1:
                    aa:9c:ca:1f:19:9e:5b:30:c1:ad:22:e7:ad:03:70:
                    f8:2f:c9:22:26:17:e3:64:b2:76:8f:fa:d2:98:50:
                    b3:72:47:b6:39:81:f4:ac:69:99:30:74:3e:8e:58:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:09:53:A1:A9:E0:77:38:5C:92:77:15:C7:E2:AA:F7:AF:65:EB
            X509v3 Authority Key Identifier:
                keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:99:c7:07:53:1e:b5:9d:0f:c4:0f:c1:a2:15:dc:1b:e5:b8:
         c1:15:ae:59:1a:4a:c0:61:db:fa:b6:da:f2:15:73:fb:bd:07:
         c0:3f:fc:2d:41:7d:21:af:bc:66:81:92:38:98:92:e3:69:4a:
         6f:ed:8c:e7:48:ac:be:9a:c0:39:38:99:37:34:78:3e:91:75:
         b2:f6:8c:d2:24:f8:f9:fa:99:74:7f:84:14:98:51:4b:f5:67:
         97:38:69:7c:b4:1e:d9:14:5c:63:f7:ae:64:23:74:31:af:5c:
         16:28:57:d5:4b:04:0f:35:12:c8:49:23:07:9c:03:58:98:84:
         64:d0:e3:b5:6c:f5:37:ff:d6:14:99:14:c6:f1:b1:63:00:fe:
         9d:02:6e:72:54:c9:cc:38:6f:45:72:16:26:fd:c4:4a:7b:62:
         ad:7d:3a:c9:b2:49:48:a6:e2:c4:d7:e1:6f:57:c2:c8:f0:fb:
         70:88:73:e6:d3:0f:4f:6b:43:fd:f8:e5:95:42:22:87:5b:7a:
         5e:d4:52:67:6f:4c:25:03:17:6a:01:f7:f2:31:10:d5:9e:ae:
         c3:ed:03:cd:8f:20:eb:84:7d:58:2a:68:20:59:3b:00:81:d8:
         f7:20:67:c3:34:e1:63:27:af:85:71:11:e6:55:81:28:39:2a:
         7c:0a:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----