Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File:                     Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier:          MgFsaJ6TIryWMDWFAtVkpslQ41ex6bCG+MKmi+fuKvM=
Subject key identifier:   91:AF:41:2A:D5:A4:6C:31:64:09:DF:3D:38:61:39:FD:AA:BD:03:12
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer:       /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial:       01962E991F7D5952127B58B5F25B71611F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number:          04CE
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: azvBBS0WSq4T5BpYHYGfZpFKgCmU5K9ABNmYVZTwUdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1f:7d:59:52:12:7b:58:b5:f2:5b:71:61:1f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=91af412ad5a46c316409df3d386139fdaabd0312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:c1:fc:1f:78:91:42:b0:3f:81:2b:ac:46:
                    b5:c2:41:5f:c3:08:54:e3:a0:f4:a2:b3:4c:84:62:
                    b3:df:7e:4f:e2:19:63:b9:a4:b7:d0:18:24:90:c0:
                    de:95:5b:46:ed:a0:82:fe:bb:57:64:89:41:b7:a3:
                    ba:d0:f0:79:8e:5f:ee:d9:f1:c5:59:7d:ef:a6:48:
                    bd:e7:2b:f0:6e:5f:52:de:68:52:f6:02:0f:e5:c2:
                    1c:ea:f0:ef:53:bf:c2:22:f5:e7:64:ec:ea:66:d1:
                    19:41:92:34:f9:8c:88:03:9e:83:22:16:b4:0a:99:
                    31:6d:75:63:c7:69:a6:68:93:77:51:be:b5:d6:6e:
                    07:56:10:0d:42:09:30:40:f0:00:6d:99:f8:bc:a9:
                    7b:be:79:8b:1f:f7:35:0e:b3:88:79:bb:1a:09:29:
                    b6:be:ec:e0:56:cd:3a:00:6f:0c:bc:10:7f:d6:eb:
                    cc:89:8a:a2:16:c9:a1:36:ba:03:2a:75:f0:e6:9b:
                    2b:2b:a6:98:b2:57:fa:ee:8e:61:97:2a:7e:ae:bb:
                    17:d8:99:06:cb:e7:ef:98:57:32:70:9b:e7:62:a6:
                    26:33:c8:ec:64:f8:dc:cc:52:64:50:c8:56:84:04:
                    29:89:eb:4e:fe:6e:ae:b2:83:f5:67:36:d0:bf:e0:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:41:2A:D5:A4:6C:31:64:09:DF:3D:38:61:39:FD:AA:BD:03:12
            X509v3 Authority Key Identifier:
                keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:88:c5:c5:2d:7f:97:85:71:97:95:08:c9:75:4d:ed:d5:
         e8:1f:5d:7a:13:ca:f7:7e:57:a5:4e:3e:b5:73:7b:66:fc:d8:
         d7:84:10:92:1c:47:99:81:94:89:fe:89:aa:90:cb:50:f1:9a:
         e7:ce:90:6c:84:49:70:8d:e0:f9:ec:b9:7d:54:2f:f9:00:00:
         2d:25:71:f7:92:64:97:c8:d8:8f:ac:58:4a:d6:82:02:e0:f6:
         56:b3:f4:b8:52:66:d5:d6:78:f6:31:9d:20:47:a6:d4:14:21:
         30:5c:2c:88:69:6e:2b:23:a8:81:a9:a5:b9:9a:da:e9:29:52:
         3b:b1:6e:c3:38:80:7d:10:aa:e3:cc:dd:b1:3b:55:5a:c8:de:
         b2:20:2c:4b:26:06:71:a6:91:a0:21:3f:cc:a3:a5:a6:01:9b:
         fa:8a:ee:f5:8e:5e:be:ed:42:98:13:1a:16:be:1d:ed:eb:5b:
         d3:ba:f7:9c:c5:71:96:fd:34:0c:5f:57:50:4f:5f:a4:14:0b:
         2d:a1:73:cc:cf:f9:6d:5c:b6:4d:19:6a:ea:4f:8d:e1:30:c6:
         aa:3a:40:b3:a0:26:5c:a1:dc:7b:c8:0d:95:ff:70:b8:e5:b0:
         20:1b:a8:a2:0e:05:26:30:b9:e5:ba:7d:4b:a9:19:f5:79:e1:
         43:81:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----