Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File:                     KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier:          6hz8bYqZ9HqRy6ydA46/Wi7UroIxPSUlMUV98k1091I=
Subject key identifier:   AB:36:6D:90:F0:A3:ED:2E:EA:69:35:F4:FE:F9:61:B4:71:CA:89:83
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer:       /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial:       01962FAB233797611526D8058E8E55407EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number:          13E8
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: pVYoFkJj/LBNpjQizK4Z5w7VSbz8heVyMeovdDEGF6s=)
                          2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:37:97:61:15:26:d8:05:8e:8e:55:40:7e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=ab366d90f0a3ed2eea6935f4fef961b471ca8983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:fb:59:87:34:fe:9f:f7:36:10:1d:4a:f1:
                    82:55:76:19:28:62:75:97:5a:62:78:99:5d:41:ed:
                    15:9e:2e:78:91:0d:4f:87:76:66:93:bb:a5:c1:23:
                    2d:f9:9f:4c:44:98:b3:7e:de:6b:2b:f1:5c:ff:bb:
                    65:16:0d:3c:ea:a3:89:d3:bd:fd:82:ed:9b:49:a1:
                    05:25:a0:d6:91:da:51:8e:c4:a9:80:1d:b6:bb:b2:
                    ed:39:46:32:d3:5a:90:3f:3a:10:7f:a6:4c:bf:04:
                    86:9c:f8:be:1c:51:85:62:53:5b:fc:ae:26:29:87:
                    d6:7d:44:5c:59:5d:7d:24:79:2d:98:fb:84:04:4d:
                    56:9f:22:f3:8f:ee:60:50:d5:75:3b:7f:ba:9b:67:
                    6f:7d:17:26:b9:b5:0f:36:e3:98:33:a6:fa:fe:31:
                    77:05:55:c4:18:82:fb:36:56:e3:46:09:85:2f:9b:
                    08:38:72:27:c1:59:67:72:2a:68:fe:d0:a8:bf:93:
                    9c:79:9c:6e:dd:1d:e3:0e:a0:e9:52:50:62:9d:e4:
                    80:54:b3:01:a8:41:5f:05:c3:6e:f8:22:08:26:6c:
                    75:7c:99:ed:5d:c1:6a:26:ba:09:73:5c:59:5b:e0:
                    8d:c6:5e:a0:af:9b:71:1e:28:99:2a:7f:d5:a7:08:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:36:6D:90:F0:A3:ED:2E:EA:69:35:F4:FE:F9:61:B4:71:CA:89:83
            X509v3 Authority Key Identifier:
                keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:4d:31:f0:82:70:6f:d2:37:a7:3d:f7:57:7b:3a:01:a4:
         b9:a0:58:64:35:b3:d6:99:79:f6:80:26:9b:b6:d7:4d:0f:b6:
         48:4e:bf:df:0b:86:e8:11:72:e7:5f:14:23:ca:57:87:99:9e:
         2e:84:be:89:4e:27:96:2e:f0:f0:7b:55:09:ac:56:2c:2a:b0:
         cb:ce:9f:fb:7c:db:8f:d2:c6:7f:f8:dc:03:16:b0:fb:fb:13:
         d8:63:41:84:37:b4:f0:28:e7:79:08:a5:f5:02:eb:0c:18:be:
         69:d2:52:4d:73:f6:bd:9e:c9:30:c2:24:e9:5e:3c:ef:65:b5:
         2a:5c:68:0b:67:ef:b4:34:81:cf:43:3f:83:e9:90:11:29:8f:
         59:23:84:10:d5:c5:11:54:94:b4:1a:94:df:74:05:51:20:be:
         68:1e:f2:c8:c0:6f:3b:fa:86:02:33:ab:b6:04:35:49:b8:3f:
         05:db:a9:29:e2:5f:47:13:3b:74:82:a8:43:52:df:60:b9:10:
         93:b7:f7:df:77:6d:70:52:62:28:d5:e3:8d:2e:60:62:fe:95:
         d5:59:a4:b6:25:d5:f8:a6:f6:d5:12:87:d8:c7:ca:fd:67:bc:
         f6:e4:51:c6:c5:32:dd:74:e7:39:d9:f8:77:bf:b8:9e:28:7c:
         4b:1a:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----