Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
File:                     kpZChU_lYFL93BRr9y57xpSFC2M.mft (raw, json)
Hash identifier:          xvnYtta4LOikU+bCKgbxnyVgogiSZZUy/z6ibjTyX7Q=
Subject key identifier:   F6:9E:8B:07:B2:5B:C3:5A:52:8A:FD:42:B3:F2:BB:D8:48:8A:1A:0E
Authority key identifier: 92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63
Certificate issuer:       /CN=929642854fe56052fddc146bf72e7bc694850b63
Certificate serial:       01962E9954E824A32A71838891946170E0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: kpZChU_lYFL93BRr9y57xpSFC2M.crl (hash: jKN4zqFjBGJorGNrDUmyhv59x625CRsxXqG+BQJPy1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:e8:24:a3:2a:71:83:88:91:94:61:70:e0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929642854fe56052fddc146bf72e7bc694850b63
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=f69e8b07b25bc35a528afd42b3f2bbd8488a1a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:a5:b9:f7:22:48:8e:0e:f4:62:c4:eb:68:
                    6e:08:15:df:16:4a:90:51:3d:93:88:6c:4f:ac:e0:
                    8e:a1:d3:50:6e:e9:98:66:47:3e:b3:71:ba:1c:10:
                    7e:3d:7a:c4:1e:c6:e8:5c:cc:59:7a:f7:9a:24:f9:
                    a2:b3:e7:f4:f1:f5:0d:36:b1:f2:3f:74:2d:8d:75:
                    a6:e2:c5:11:27:2b:66:d4:80:c6:fa:2b:a8:d4:58:
                    b3:a8:a9:48:6a:64:3a:05:b7:10:3d:a7:08:26:40:
                    7f:1f:19:2c:32:f4:78:71:3a:03:d0:20:b0:9f:fd:
                    1d:06:ab:9e:5d:75:59:51:d1:ec:92:82:72:e7:26:
                    95:9d:0c:3c:ae:63:4a:00:5a:57:0b:50:95:f1:c1:
                    41:9d:9d:d3:78:84:1c:0c:d0:59:46:5c:66:1d:78:
                    76:43:25:97:a3:b1:03:0c:f0:48:4c:8a:e8:c7:97:
                    e9:82:48:dc:12:0f:e6:45:c7:fc:18:de:5b:7c:ce:
                    0b:59:31:a9:83:24:ca:6d:37:5e:5d:16:ba:41:e4:
                    a6:52:3b:5f:53:87:ca:9a:f4:9c:7a:35:0f:ac:b3:
                    7c:1f:1c:9f:68:89:28:b4:9c:47:91:69:a3:d3:26:
                    4b:8e:a2:2f:45:d3:27:cf:56:7b:70:5e:bb:a9:4c:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:8B:07:B2:5B:C3:5A:52:8A:FD:42:B3:F2:BB:D8:48:8A:1A:0E
            X509v3 Authority Key Identifier:
                keyid:92:96:42:85:4F:E5:60:52:FD:DC:14:6B:F7:2E:7B:C6:94:85:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpZChU_lYFL93BRr9y57xpSFC2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1b01d8-9b31-4f08-a1c5-e91648ec7de5/1/kpZChU_lYFL93BRr9y57xpSFC2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:f0:41:63:ed:06:b1:d9:95:98:2c:b2:e4:a9:67:e5:a0:
         ee:c8:b0:cf:4d:5b:c4:2e:4c:76:a2:99:ad:39:2a:01:e2:0b:
         d8:ae:67:59:f7:a4:b5:76:97:33:9e:16:20:e5:ee:68:86:7c:
         0a:b9:1f:b3:b8:ba:52:3e:5c:93:44:d2:b4:30:a7:e8:fe:39:
         4e:03:36:30:fe:cb:c7:e8:66:35:a0:e0:77:dd:97:f2:3d:6a:
         08:89:bf:06:70:ab:b2:a1:02:8f:69:dc:9a:dd:bc:95:71:81:
         1f:97:14:25:61:63:21:d7:ed:43:ac:30:80:84:23:8c:16:37:
         ec:1c:59:cb:2f:ba:44:e8:69:82:e1:7b:0e:ee:f0:8b:71:8e:
         f6:f2:b9:f1:e8:b4:39:be:74:d7:e7:7d:63:94:a7:8d:78:c9:
         87:71:50:ae:7b:4c:96:8a:87:f8:1b:ef:2c:2c:bf:54:ba:c6:
         8c:5d:86:e2:63:35:83:a3:5f:3e:6a:cd:ff:76:50:32:70:2d:
         d2:d1:3c:b7:07:45:6a:c4:c4:37:14:8f:24:65:99:26:a6:fe:
         f3:d6:fa:66:7f:11:2c:cb:f2:70:4e:35:8d:d7:47:05:6f:40:
         62:d2:11:9d:77:21:29:c4:52:24:9b:cf:e9:a6:fc:2d:98:6a:
         a2:1d:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----