Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File:                     KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier:          CYB/IKvj+Tas2Y3sjGRXUWbhGAuYJWacIVqToNseOPs=
Subject key identifier:   12:30:24:D3:43:A0:8A:F7:F5:6F:1B:BD:B9:18:BA:78:E5:CC:0C:6A
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer:       /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial:       01962DF408F139935083B11EAB294EC952B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
                          2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
                          3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 1VOwjK9h032tj3TK3oIU59FLavNUfFfSLn7/jTN+EdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:f1:39:93:50:83:b1:1e:ab:29:4e:c9:52:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=123024d343a08af7f56f1bbdb918ba78e5cc0c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:15:fa:87:66:c3:6c:37:93:5d:ff:85:e0:
                    3e:c4:c1:b5:f3:7e:e8:03:aa:59:38:7b:b4:cb:da:
                    9b:da:38:23:73:75:ed:d6:ee:03:5b:65:44:df:16:
                    5f:04:10:2e:e8:6c:a1:12:62:06:5c:e3:28:c1:a2:
                    09:d7:43:ee:13:0c:43:ea:0b:44:6d:93:22:35:c4:
                    a3:c6:e7:51:27:fa:82:2d:7b:9b:3f:9b:32:26:c7:
                    ee:5a:88:82:37:a9:18:6c:fd:fc:8a:c7:85:44:74:
                    f3:e8:2d:07:30:78:be:65:15:8f:a1:1d:5f:b5:6e:
                    72:b1:bf:15:d3:fa:f7:14:d8:e5:90:af:18:18:3d:
                    df:08:8e:c5:5e:58:de:32:8e:e8:8e:11:c2:5f:13:
                    74:d7:24:37:37:42:6f:c0:8d:c0:57:b0:69:8a:0c:
                    bc:b1:6a:bd:89:30:64:00:82:cd:14:7e:b0:bf:3c:
                    3c:b1:1f:0f:a1:03:30:68:a1:70:00:fd:7a:ae:8d:
                    d6:81:19:f1:30:d8:0b:03:5e:09:a9:2e:fa:03:bf:
                    63:63:b0:16:67:5a:53:f9:06:35:ef:30:c7:f7:d7:
                    5d:fd:be:75:a0:5b:99:c4:e0:ec:fe:b0:84:ad:06:
                    3a:2e:79:7b:b3:ca:01:a7:ca:10:d6:58:2f:c3:ce:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:24:D3:43:A0:8A:F7:F5:6F:1B:BD:B9:18:BA:78:E5:CC:0C:6A
            X509v3 Authority Key Identifier:
                keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:81:7c:5b:c9:e5:a3:35:fe:60:45:9f:d9:3b:86:2a:d0:
         ba:47:3a:ed:30:8e:2b:f0:f8:56:2e:de:8b:e0:a0:f5:2a:01:
         10:f7:62:59:a0:5d:dc:f1:a9:a7:73:fd:b6:5c:12:a6:33:36:
         3a:5d:7f:b2:92:bd:7f:7f:b7:7d:43:d7:6e:29:74:c6:e3:50:
         ac:60:a9:e7:db:51:a6:3d:8a:48:94:2b:95:dc:1f:c8:ed:9f:
         c6:d2:d1:6e:bf:f8:26:52:f1:ae:2c:9b:c8:8c:21:f8:84:e3:
         14:75:12:b9:bd:68:e9:f7:c9:5f:24:c6:4a:a2:bb:a4:4c:2c:
         2b:32:b5:05:96:db:63:7e:b1:d3:92:b5:d8:ca:0f:d6:41:8d:
         a5:77:69:2d:df:30:34:e8:09:c4:70:7c:3b:77:ae:17:32:58:
         62:fd:b2:ab:0c:79:e6:b0:d3:d7:15:95:41:f2:1a:1a:db:83:
         ec:75:24:e2:19:fd:a2:36:52:fc:5a:05:9f:50:9a:b6:55:68:
         f2:1f:f5:29:e4:31:5b:10:eb:23:8d:b9:81:3a:e5:c0:9e:90:
         26:17:b5:e9:44:85:37:a0:9f:8f:f1:63:51:9b:c9:ba:1e:0d:
         14:34:a2:5c:b6:4b:67:96:df:1b:f2:43:82:96:26:da:31:94:
         82:4b:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----