Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File:                     KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier:          nGmnr8uCn3OqUjki43L6GygE0Jp5hgioQXt/e+jTwuQ=
Subject key identifier:   21:13:71:0B:23:1F:F9:2C:BF:A7:42:52:C5:00:39:6C:3C:DF:64:3B
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer:       /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial:       01962F06B0D9CFBBF57CB5C4089609275E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
                          2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: dmJXUOO2cW2bl+pgjoSSgT4QfxOyvhD9ZIWiRJNVHc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:d9:cf:bb:f5:7c:b5:c4:08:96:09:27:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=2113710b231ff92cbfa74252c500396c3cdf643b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:78:70:59:f7:96:e1:5f:4a:42:72:9e:df:
                    6d:10:8c:a2:d9:df:c7:24:52:5c:bb:b9:a7:79:bd:
                    d5:65:2c:b0:c3:a1:49:3c:5a:ab:76:b0:c2:03:20:
                    37:ae:25:3e:61:0c:8b:eb:c6:d1:2d:30:da:02:17:
                    8e:00:a3:46:4e:08:5b:9b:ad:5c:a1:47:3d:fb:72:
                    b1:a2:56:6e:3a:90:f0:56:2e:1b:cc:4e:d5:bd:35:
                    de:93:a4:cf:43:2b:9d:d4:b3:b5:64:83:52:11:a8:
                    18:5e:42:b8:ee:75:bd:f1:1a:7b:bb:a3:5c:91:f9:
                    2c:f2:75:8b:4c:91:bc:63:07:c7:46:05:ea:a5:21:
                    52:f7:2e:7e:24:1a:48:67:ec:ac:80:c7:4e:01:1e:
                    27:2f:b0:c6:64:e6:5c:d0:7e:d4:1a:3b:ef:dd:35:
                    da:1f:94:30:72:a1:36:3e:7d:af:d7:f7:77:6f:87:
                    ef:15:f8:ac:6d:f4:94:b1:b2:ec:22:95:08:61:44:
                    9a:8e:5d:bf:36:88:3b:d9:87:04:9d:8e:bb:1a:b7:
                    a1:e6:a6:fe:cc:27:ad:2d:d6:06:6e:5c:c9:43:61:
                    2d:64:a9:22:b8:d7:bc:13:a2:08:65:b0:17:5b:67:
                    c4:fe:f7:2b:27:3a:7e:01:06:0f:f8:93:81:71:8a:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:71:0B:23:1F:F9:2C:BF:A7:42:52:C5:00:39:6C:3C:DF:64:3B
            X509v3 Authority Key Identifier:
                keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:91:7f:1e:ac:1d:af:35:6e:37:3b:40:2b:85:18:75:8f:
         72:1e:29:05:7c:8c:cb:9f:6d:89:ae:e7:02:03:89:ff:f8:a5:
         e0:f8:f7:d2:8b:02:8e:89:9d:f8:38:19:c2:b1:3d:2a:58:52:
         f3:70:b9:25:09:62:f8:16:b0:18:81:3d:7a:5f:87:a6:f9:f4:
         c7:08:d1:c0:67:0b:08:14:75:fd:21:1f:29:97:ec:8a:73:46:
         11:93:99:04:90:e6:17:90:0e:61:9f:9e:55:eb:e2:ac:c1:a1:
         09:cc:a2:2e:db:94:db:75:94:9a:d9:59:b0:f3:a7:5f:1c:4c:
         5d:9c:fe:e0:23:31:b2:59:60:68:6f:a3:09:62:f1:60:b1:99:
         09:97:b5:c6:5b:61:be:84:be:82:c0:3a:47:63:4c:7d:ef:e7:
         ab:16:07:2a:70:bb:32:ba:0b:a5:65:00:d2:af:0e:e1:9a:61:
         d6:19:e2:05:72:68:0f:bb:eb:56:20:a1:97:3a:81:d8:73:cf:
         69:48:43:b6:d0:a8:28:6f:1b:53:40:c5:32:43:ab:0a:ee:81:
         7c:db:b2:29:ee:77:e9:d0:9c:d5:72:20:eb:48:68:18:f2:0e:
         87:c6:35:25:92:3e:de:47:c4:6e:36:52:12:b3:9d:bc:6a:b5:
         3d:3d:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----