Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
File:                     KPXiqEB6tD1tJkGkeP-UkGUlb40.mft (raw, json)
Hash identifier:          3HrOOg2CNK7V5QXevnnaFKFlWNYc0A5hDomi5Pdcphs=
Subject key identifier:   9F:25:A2:53:95:FD:75:D6:0D:9B:52:26:9C:EA:63:D5:55:51:18:F5
Authority key identifier: 28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D
Certificate issuer:       /CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
Certificate serial:       01962E98694A152792F87AF11AF31D9E377A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft
Manifest number:          0FBA
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: KPXiqEB6tD1tJkGkeP-UkGUlb40.crl (hash: ORnjA9IWk20AHkNZcylSdKbvIeRF+FwfRnQy4JLQyAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:69:4a:15:27:92:f8:7a:f1:1a:f3:1d:9e:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f5e2a8407ab43d6d2641a478ff949065256f8d
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=9f25a25395fd75d60d9b52269cea63d5555118f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:f1:9b:19:3f:8c:be:29:ff:9b:1a:cb:72:
                    33:84:83:d8:8e:81:27:14:92:3a:a1:40:18:50:73:
                    2e:0c:c0:7e:88:87:03:8e:06:c2:e6:95:3d:41:b4:
                    9f:cf:64:e6:1b:87:a2:8d:6b:24:4b:cc:f5:80:a9:
                    09:ac:85:41:fa:08:5f:0a:48:31:89:13:a8:31:a2:
                    f3:8e:b1:77:dd:9d:20:28:29:2c:af:80:24:50:9b:
                    a8:d2:df:58:df:b7:9b:ba:24:3c:54:83:39:a0:e6:
                    4f:93:08:85:ba:c5:cb:d8:5a:34:f5:46:4f:52:95:
                    a0:2a:b6:d3:53:a3:e4:c4:56:7e:50:30:24:c8:af:
                    24:c8:f5:5e:54:f3:61:bf:16:ec:4e:6b:37:a4:55:
                    25:1e:c4:90:b9:cc:e7:7b:3b:71:43:14:c9:ed:82:
                    88:a0:12:ed:97:e8:a8:03:3c:a4:f8:c2:24:0e:90:
                    46:81:b2:03:07:e7:1d:36:68:ce:5c:a0:e6:b9:16:
                    25:fd:b6:9c:fb:76:77:2d:46:60:4e:50:67:18:2e:
                    f9:fd:d6:4f:b3:7e:9b:4c:82:03:7c:4e:3f:62:ed:
                    aa:65:bc:b4:f0:8d:5f:f3:31:25:e4:ae:90:6f:77:
                    4d:ce:e8:a6:2d:f0:9e:5b:14:6d:b7:61:51:6a:b7:
                    58:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:25:A2:53:95:FD:75:D6:0D:9B:52:26:9C:EA:63:D5:55:51:18:F5
            X509v3 Authority Key Identifier:
                keyid:28:F5:E2:A8:40:7A:B4:3D:6D:26:41:A4:78:FF:94:90:65:25:6F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPXiqEB6tD1tJkGkeP-UkGUlb40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02f6cc-9691-4831-8e2f-91d62e826428/1/KPXiqEB6tD1tJkGkeP-UkGUlb40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a0:be:74:47:ae:26:cd:82:1d:10:49:87:16:2e:fc:a2:4a:
         ed:b9:c3:ed:d1:25:e8:7f:e9:0b:04:27:14:01:d1:21:6a:5e:
         a9:8d:9a:d3:f7:4e:93:94:b0:4f:4d:57:d5:88:1f:88:3b:e5:
         9a:33:bf:58:0d:f6:bc:1e:83:ca:3a:b7:aa:e8:10:3a:6e:aa:
         fc:91:ac:03:a3:ea:c7:b3:f6:c4:ee:d0:6f:cb:77:0d:78:d1:
         f2:d5:55:53:e1:d7:2d:34:d2:c4:c2:31:d3:0c:9d:e9:cb:b9:
         61:fd:8f:59:c3:e4:bc:53:fb:56:5c:93:2f:0b:ce:3a:dc:b0:
         ea:59:91:90:96:f9:0c:a7:89:a3:18:da:2b:d7:c7:82:3b:be:
         0f:ae:8e:af:9b:ba:82:80:94:ba:f3:8b:4a:01:21:98:bc:65:
         8b:3d:38:1e:c9:19:61:3f:01:fd:cc:a7:5a:7d:f6:33:7c:43:
         79:9c:3f:18:23:95:19:f8:53:a5:77:89:06:68:84:78:d6:b9:
         35:e1:b9:75:ee:cf:3a:a0:92:33:b4:50:a3:68:70:a5:56:91:
         ee:6b:0d:2f:cc:18:72:7b:21:0f:1e:fd:26:19:04:38:c0:e2:
         48:28:71:42:60:c1:8c:d8:93:2b:8f:8b:fb:cb:e7:cc:96:1a:
         d8:0d:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----