Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          2SRa1G1oVp6dt5R5POzx2VzpJIwcWuhuO+SOuuEQxhc=
Subject key identifier:   15:4B:8D:DC:18:F6:3A:8E:4B:46:87:9E:90:24:D9:D3:D5:A8:12:80
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       01962E61808726488DD2E62B19AC5B76E390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
                          2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
                          3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: hRMTbiwypQGzsE/z1pdnLBparaYoKMfbUfYnXeryWxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:87:26:48:8d:d2:e6:2b:19:ac:5b:76:e3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=154b8ddc18f63a8e4b46879e9024d9d3d5a81280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:8d:1a:1f:bc:28:e7:f1:22:b0:fa:5c:15:
                    e6:f4:e2:66:6d:bd:8d:12:81:61:94:05:14:15:82:
                    d9:a6:98:93:65:20:6b:5f:38:62:fd:ba:b4:69:1a:
                    a5:6b:a2:5d:e5:38:aa:5a:67:a6:60:c9:e3:be:0e:
                    78:c8:4e:cc:d8:d2:04:d2:9c:82:c4:50:44:b2:de:
                    37:3e:72:f8:7c:70:60:3e:b3:d3:21:e4:06:6b:44:
                    7a:b8:3b:75:1f:33:c1:fc:a7:40:56:68:50:4d:24:
                    77:f7:a1:56:ef:01:6c:8d:9e:72:60:09:25:45:e6:
                    b2:33:2f:71:9b:93:07:a4:86:11:23:45:38:f3:79:
                    cc:50:25:9a:86:73:b1:c0:c9:51:89:63:ae:bf:4b:
                    a9:11:3a:0d:e0:62:ef:b4:e1:ea:ba:42:e1:02:30:
                    6a:fd:2c:67:07:db:53:31:18:28:d3:30:80:cb:fe:
                    be:ae:82:e1:c4:1a:ae:7c:8e:1e:a5:a2:e9:67:74:
                    af:64:81:bb:bb:f5:03:0a:0d:6d:b6:34:2c:be:bc:
                    e1:c7:3d:8b:3c:cf:01:b4:0c:db:81:22:42:09:56:
                    74:82:d5:f9:6d:1a:50:49:5e:62:7a:fe:11:73:24:
                    76:19:95:fd:fc:c0:b3:cc:82:fc:bb:71:93:2f:b8:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:8D:DC:18:F6:3A:8E:4B:46:87:9E:90:24:D9:D3:D5:A8:12:80
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:f3:d0:8e:a4:e8:1b:1c:8e:cc:a7:b7:f7:54:3b:a9:3d:
         ac:3b:af:cc:b7:ff:71:46:7e:ae:59:b9:8a:d8:b5:38:93:ab:
         e8:86:04:2e:78:9c:33:55:c7:d4:b1:4d:83:4b:6a:30:02:8f:
         06:69:aa:f0:ae:55:92:c2:2c:33:42:f8:1a:85:17:be:2e:64:
         2b:a6:58:4b:aa:80:fb:de:84:57:9a:c6:06:f6:0c:f8:36:82:
         18:d6:b2:4e:ca:f8:aa:07:cc:f9:ac:99:6c:bb:81:31:d3:6c:
         ad:27:4d:b9:47:fa:f0:80:4c:d0:04:1e:f0:3f:09:1a:b5:01:
         39:c2:29:16:b2:87:c5:e1:3c:d7:6e:18:b1:cd:1d:8f:b2:39:
         a5:0e:d9:25:0d:ed:19:bf:80:c4:30:33:f3:36:e0:53:b9:6f:
         30:57:e2:27:3e:1f:e8:52:47:14:68:1d:40:58:3a:68:ca:2b:
         05:f9:14:ca:c4:7a:b4:7a:f3:29:f2:9f:59:2c:50:78:11:b9:
         aa:39:1d:84:f1:ac:63:3f:85:81:3f:e0:f3:08:90:04:30:f5:
         a6:17:a0:cd:99:ba:f7:58:83:0a:72:41:dc:0c:9a:2a:ae:00:
         b1:a1:f1:74:a7:96:21:00:f8:db:b5:a3:e4:b8:b6:e6:94:12:
         8b:ea:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----