Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File:                     kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier:          MsSbrzvLxNtI3sQLRtCcM/6sYupN0w9tcX1MjO4AAFc=
Subject key identifier:   98:DE:0F:F5:41:4C:6F:D6:2D:25:9A:16:3F:F0:33:60:8D:BE:90:25
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer:       /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial:       01962FAB9D39364724C24A7B4B1124B3A753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
                          2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: rdDRp/6h4IElwX8bRK76hYgE1A+SSst/qHXNdtJypAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:39:36:47:24:c2:4a:7b:4b:11:24:b3:a7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=98de0ff5414c6fd62d259a163ff033608dbe9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:03:6b:85:22:8e:1a:45:ee:47:52:de:46:
                    c7:de:bc:74:7a:94:a7:96:50:8e:31:c3:51:4d:dd:
                    a5:61:b9:26:ff:ad:dd:e9:53:19:58:18:6b:ef:20:
                    6f:bb:3a:4c:0f:8a:f7:e2:60:51:42:74:a8:e5:2f:
                    fd:c2:86:28:6a:e4:f3:03:32:69:8a:78:fe:ec:0b:
                    4f:9d:04:77:9b:ab:4d:af:ba:27:f4:98:72:a2:9d:
                    56:e3:7c:45:36:34:d7:f7:4e:c7:5f:64:f3:5a:69:
                    b8:48:19:f9:ae:42:01:5a:97:5a:f9:36:30:d8:5c:
                    3b:09:7b:c0:be:15:22:59:4e:44:d1:fd:51:ed:72:
                    7c:97:db:49:81:4f:21:b3:36:8c:26:44:6c:8d:b7:
                    52:f3:bb:19:fc:1f:d3:b7:fc:26:79:6f:44:72:5e:
                    8c:76:b4:23:7e:0f:06:e8:fb:f0:88:c7:b7:77:69:
                    ee:7c:a1:d6:d4:7d:11:c1:95:63:41:c3:b3:39:89:
                    83:86:71:64:12:0c:a6:14:17:37:b9:ad:75:22:98:
                    d4:82:1a:fd:4f:da:bc:ca:98:6c:c1:cf:11:0d:e8:
                    08:69:cb:56:13:27:e1:61:88:cd:e3:c1:eb:b0:b6:
                    58:80:44:23:b6:24:fa:27:4c:7a:3a:36:4a:1d:4b:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DE:0F:F5:41:4C:6F:D6:2D:25:9A:16:3F:F0:33:60:8D:BE:90:25
            X509v3 Authority Key Identifier:
                keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:74:a3:4c:cb:e0:07:ab:c8:0e:f3:f3:f8:7e:6e:fb:e3:16:
         a0:4f:93:3e:a3:80:b6:26:9c:a6:86:88:1f:a4:3c:a2:ac:ba:
         43:14:b3:07:49:ce:fe:7b:c9:bb:b4:05:83:61:0f:b2:91:14:
         1b:db:cc:ca:6f:f8:a2:6e:bd:4d:c7:57:55:bc:c4:b2:d9:99:
         56:89:2a:ea:05:0a:2b:af:67:5a:e2:6b:d7:88:37:d3:06:37:
         e4:fd:8c:1e:02:f6:02:ed:e5:84:39:94:ca:39:28:c0:0d:47:
         d0:29:5a:b1:24:d1:5e:59:ff:12:aa:b5:d4:5c:1a:6d:7a:f1:
         80:18:5d:a8:b7:10:3d:b3:ef:29:5d:f8:30:c2:d6:fc:98:ca:
         73:e2:e4:11:58:16:7e:f3:89:e2:a9:75:97:e3:5f:24:79:17:
         f5:4a:c9:4f:af:ed:b3:14:22:eb:6b:58:40:c4:ea:d5:e9:4a:
         d2:9e:b4:df:33:a5:39:4b:f8:4b:36:6d:b7:82:59:56:17:4f:
         d0:e2:27:8d:a9:a2:73:e4:c9:5f:78:97:a1:71:8e:cf:19:5d:
         30:d2:6d:05:34:f3:9a:bf:fc:59:3e:e1:94:c7:a8:6f:df:b1:
         f0:28:dd:70:6b:4b:61:a6:89:b4:78:47:0e:58:d3:49:87:ee:
         02:99:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----