Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File:                     kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier:          i9h4Z4vApLryme4R8i+BAt/wK0tGO6K3xj3lGSTp4BY=
Subject key identifier:   8E:7C:C1:21:0E:91:E1:9F:30:DF:20:37:C5:04:0B:7F:A0:34:37:CA
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer:       /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial:       01962F3DA239A68CDCDD9E30D24DAD27B5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: M1SUpQd7+IWZkWRqiwlgCVgLjYM5JBIusFYxke636UQ=)
                          2: yaNI0_QU-og_a5wIKL7nblpP3wo.roa (hash: mocSKnatPWu2K5HO5VSBkHGD9dsGk50fbeHRajNzTSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:39:a6:8c:dc:dd:9e:30:d2:4d:ad:27:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=8e7cc1210e91e19f30df2037c5040b7fa03437ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:dc:6a:a3:0e:10:44:d1:34:8a:3b:ff:46:
                    2a:b4:80:b2:bd:f0:6d:d7:a0:72:8f:03:21:4c:bf:
                    30:d9:ce:0a:fd:c0:3d:ae:3f:a7:0b:f1:e8:c5:bd:
                    49:fb:3a:d3:9b:19:49:1e:76:f5:99:d4:ad:ec:f8:
                    4c:cc:17:0b:d5:c4:55:93:76:e1:e0:aa:f9:53:cf:
                    7d:4e:94:c9:b4:67:49:73:88:fd:d0:53:8d:f1:11:
                    1e:05:92:14:1d:c6:58:54:50:80:92:f4:dc:6d:9f:
                    67:cb:cb:ef:18:56:81:ea:eb:32:f3:7a:c8:b8:95:
                    fc:8e:76:3d:aa:da:50:77:d3:a0:aa:fb:45:f2:67:
                    a2:39:51:68:9f:03:8e:aa:32:51:93:41:96:29:1b:
                    50:3c:8e:52:b2:a3:7e:e4:d8:47:63:8f:18:53:e0:
                    91:51:19:e5:97:c8:b7:f6:c7:c6:c0:e4:cb:00:8b:
                    25:b9:31:5d:19:1d:48:b0:77:a9:8c:44:0f:41:3c:
                    f6:c1:ee:b3:9b:44:cb:cb:fc:24:1d:79:b1:92:8e:
                    a7:df:ad:f8:e1:02:53:9a:79:3e:1d:8d:33:62:e2:
                    79:f7:2e:4c:6c:62:f8:a4:1c:01:4d:0e:ce:67:1e:
                    cc:83:74:95:33:e3:4d:eb:98:e1:9c:2d:d5:a8:55:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:C1:21:0E:91:E1:9F:30:DF:20:37:C5:04:0B:7F:A0:34:37:CA
            X509v3 Authority Key Identifier:
                keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:41:6e:aa:15:50:a5:db:66:67:bf:76:cc:f1:ef:79:88:38:
         2d:63:ab:91:38:c4:a7:20:74:d7:99:06:dd:1f:72:dc:b1:5e:
         a2:b9:9b:dd:ff:e1:f7:6b:41:40:38:80:19:a9:5d:8c:e2:8e:
         cc:97:41:40:73:6e:7b:65:69:0c:a8:94:51:37:a3:f8:64:1d:
         da:6c:6d:af:56:86:ea:7b:16:25:52:61:c5:33:85:ef:47:bf:
         da:92:9a:29:4d:2e:63:ba:1c:e8:a2:e4:6c:f0:52:87:b8:a7:
         b6:1a:27:23:8a:1e:c4:51:9f:d8:92:41:3f:cb:99:38:86:22:
         68:9e:67:33:16:a5:b9:54:45:e2:e3:ac:cd:f5:59:04:59:33:
         bd:e0:65:ce:00:66:39:18:15:6c:10:96:20:14:c9:2c:3e:2c:
         dd:1f:6d:36:bf:2e:a1:93:06:2a:df:48:ff:1a:2a:f5:9c:a0:
         ce:f1:15:15:30:ad:4b:14:6a:04:87:c5:c1:60:b3:b7:bc:da:
         4c:50:6a:74:ef:a8:c7:fb:64:b7:27:ab:a1:10:e6:72:3a:fa:
         5d:52:80:2a:e3:b9:e6:71:e9:00:35:52:a0:fb:e5:eb:8e:a3:
         80:dd:e2:b0:26:b7:2e:40:89:8a:8f:05:52:59:f1:01:b6:29:
         94:85:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----