Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File:                     K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier:          eCeaYTIPQvel9wdwQgN0zAC+XUvT8xBACVC/Hfk+Jwc=
Subject key identifier:   07:7C:D2:FB:33:D2:9A:BC:D4:83:CF:0C:15:D6:2A:EF:1D:78:FC:1A
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer:       /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial:       01962E989EEBBDAF0A5BE42B7801FBC62BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number:          0603
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: 5mpZ9F9YodF7lrpyopUgGXWuItc6K1LvjR56nzJm4SU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9e:eb:bd:af:0a:5b:e4:2b:78:01:fb:c6:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=077cd2fb33d29abcd483cf0c15d62aef1d78fc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:25:85:37:37:03:bd:19:ff:67:74:21:dd:
                    63:5d:15:96:bc:7e:e6:a4:47:73:2e:50:86:d6:86:
                    4c:15:50:20:b2:35:09:9d:a8:f3:5f:ff:39:81:ac:
                    94:71:fd:c3:c5:7d:16:39:9b:8d:49:25:b4:97:95:
                    49:37:4a:08:94:06:c9:70:01:f1:7e:c0:5f:c3:15:
                    4c:19:46:cc:c9:fa:42:10:7d:30:6f:ba:89:69:d0:
                    2f:64:ce:f9:cd:55:74:56:96:d5:be:81:95:d8:0a:
                    63:09:35:52:3b:d2:ae:a7:d8:16:6a:10:30:8b:a2:
                    18:cb:0e:e4:87:72:09:46:e1:3c:5b:e8:7b:93:d2:
                    2a:c8:2a:78:2e:ed:4b:df:61:98:2b:4d:32:c4:84:
                    89:8e:b6:6c:fd:bc:2a:98:c9:d3:fa:3a:13:31:31:
                    1e:4a:56:fc:aa:fe:72:e4:17:50:b8:3b:c4:d5:6a:
                    e3:02:b8:d4:43:fb:93:70:56:50:75:b9:f3:54:16:
                    8a:c6:23:a7:7d:fb:f9:fb:93:56:09:ae:78:96:5f:
                    82:88:23:c7:48:ea:7f:2e:8a:eb:b9:29:7d:f7:6f:
                    67:77:6d:d8:36:1d:e7:a0:58:8e:c9:3c:0a:ea:00:
                    17:e7:7a:24:e1:ca:f6:7b:1a:15:4c:09:da:fa:67:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7C:D2:FB:33:D2:9A:BC:D4:83:CF:0C:15:D6:2A:EF:1D:78:FC:1A
            X509v3 Authority Key Identifier:
                keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:00:9e:12:bd:64:09:d1:21:6c:d0:d6:0a:d8:10:71:2e:
         0d:93:e3:6f:ff:10:fe:b1:35:4c:ca:d0:d7:ea:96:a9:b8:f9:
         72:10:b0:96:46:04:88:da:6c:9e:54:46:de:00:e5:bf:b2:31:
         07:dc:f8:75:b4:c5:61:4a:77:c5:a0:9a:65:98:60:c7:30:7c:
         22:4b:d9:df:f0:de:fc:b9:f6:75:bc:50:63:7b:6d:a8:a5:3e:
         d2:50:09:3e:35:e7:bf:3d:12:ba:7e:fb:e1:ac:d7:d1:1d:29:
         5f:29:39:50:99:8a:0b:50:e6:15:e7:76:69:6c:44:1c:43:a4:
         dd:1e:19:97:87:8c:a6:43:5a:45:a3:8b:7e:f8:96:23:1e:be:
         bf:fe:4f:be:c0:d7:63:5b:2b:72:e1:77:ca:e7:4a:1c:f1:f5:
         10:7f:a4:80:41:3c:4b:82:f2:1d:99:90:c4:47:4a:64:e4:cf:
         04:34:30:b7:5f:68:30:24:c8:a8:1e:6d:58:22:f9:24:79:a1:
         ce:34:1c:fd:7f:95:96:15:f9:ca:c7:ea:75:a2:b1:98:7a:d9:
         a9:de:17:bc:8c:da:83:ed:21:39:98:f1:c4:dd:a1:75:9a:82:
         4e:b3:f6:7f:b3:20:30:6d:2f:1c:cb:ab:68:79:84:cb:af:57:
         17:d2:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----