Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File:                     KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier:          VSvEHFrboz+eTWb/ybVpQ4ZoN/5MTmTNY9UdfBex6jk=
Subject key identifier:   41:6E:50:0A:34:41:14:9F:AE:53:B4:74:54:27:93:F5:D1:55:B1:87
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer:       /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial:       01962F7440350A9CEECAA1144105C2AE25AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
                          2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: goZp1XZWCXzxQf7NbD54xxTumf2+eojHz8Z/KaVxlwo=)
                          3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:35:0a:9c:ee:ca:a1:14:41:05:c2:ae:25:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=416e500a3441149fae53b474542793f5d155b187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:d4:a6:25:6c:8e:7d:3d:08:0b:51:f8:19:
                    9e:2b:6a:29:c8:38:fa:45:35:4f:67:00:49:f1:40:
                    54:72:3c:99:84:9b:72:47:6a:3b:77:6f:44:ae:ad:
                    f6:1c:4b:9a:80:12:37:6c:48:75:8c:b3:cf:88:93:
                    66:b6:73:8b:9b:33:5a:f3:27:7b:10:9a:b4:1b:98:
                    fc:58:73:c9:56:12:89:73:53:1e:83:51:0d:0f:82:
                    f1:ec:3c:65:76:47:a4:1d:32:ce:7d:a6:14:33:d0:
                    30:4b:2f:a5:67:ce:b4:78:5d:0f:2a:c8:29:f0:98:
                    9f:1f:ff:c0:6e:60:b0:50:ca:19:8b:fb:6b:e9:80:
                    a9:92:4c:cf:9b:59:5d:56:a7:c1:b4:6f:83:44:05:
                    a2:d1:b1:60:3e:7e:14:c4:5d:da:b4:fb:59:5f:69:
                    6e:5f:43:f1:69:fd:95:e9:fc:a1:d3:59:ed:3b:7c:
                    89:d7:77:73:01:98:ad:5d:98:15:e1:fe:32:db:21:
                    15:38:03:c6:22:78:cd:13:f0:0c:43:c5:fc:6c:89:
                    f7:94:6f:ce:67:7c:e6:c2:26:5b:a8:5a:48:06:99:
                    a5:31:28:6e:b5:c2:ef:fa:30:9c:cc:42:c4:3b:10:
                    95:4f:af:0c:b4:df:87:a0:67:e9:46:66:97:80:7c:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:50:0A:34:41:14:9F:AE:53:B4:74:54:27:93:F5:D1:55:B1:87
            X509v3 Authority Key Identifier:
                keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d3:2f:f9:a6:0f:9c:2b:24:7f:a4:b8:b3:d6:89:b5:03:b4:
         dc:15:74:ee:22:99:67:01:ad:24:64:c4:e2:9c:51:1a:e2:87:
         c9:d3:71:df:c2:ee:0a:60:66:a4:bf:b1:d3:75:22:b9:92:63:
         ff:ba:6a:f1:b9:ae:36:fc:7c:75:3a:c6:55:9b:af:73:23:be:
         4e:fa:de:ff:22:fc:20:6d:8b:5e:44:e0:8d:62:ad:18:c5:8d:
         2c:b4:09:d7:ba:1d:6e:a3:6e:9d:1b:72:72:01:6f:81:df:1b:
         8c:36:5d:c0:26:e4:c8:e7:5b:d0:29:92:c2:db:64:21:87:65:
         59:6b:87:16:98:f0:39:ab:0a:7f:10:28:ad:e6:af:9d:50:8d:
         25:f7:fb:3b:b2:0e:57:fe:b6:9b:9c:05:85:fc:70:5e:1f:60:
         d3:5f:45:d1:cc:28:39:18:9e:73:33:cd:54:73:2f:e3:e7:fa:
         0e:c1:d1:82:23:6c:ba:c9:34:a3:43:c8:dd:17:13:8e:0b:f3:
         ed:fa:11:81:29:07:5d:b7:2d:dc:53:37:70:71:15:cf:e1:be:
         f8:9f:b1:c4:a6:bf:f1:a9:93:71:9a:7a:91:db:f9:63:99:b9:
         cc:4b:34:93:36:32:4d:8a:a1:51:a3:2a:3a:0c:99:62:ff:d2:
         dd:ee:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----