Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File:                     KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier:          d4XtrXD3DBZt9bgXhzM6jZSDbKkCaG+cgGqvcxJDI64=
Subject key identifier:   F5:47:DC:08:C4:F1:61:1E:82:5F:4B:55:3F:BF:9A:E2:FD:89:7D:E2
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       01962F066EBCB0E1C5E6E86773A94BAD2F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: OlFez/d4fvsdGR9pnr++FU6W9a7x8zyBbPtcXJKahHg=)
                          2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
                          3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6e:bc:b0:e1:c5:e6:e8:67:73:a9:4b:ad:2f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=f547dc08c4f1611e825f4b553fbf9ae2fd897de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:57:f5:28:ec:7b:dc:e9:4b:9e:2c:c8:3a:
                    74:b4:78:bf:fb:64:93:be:ac:bf:b4:d1:6f:7d:0f:
                    79:bd:34:80:e3:a0:5e:73:1e:a2:93:5c:95:e4:37:
                    7e:60:b3:df:c9:23:78:45:b2:01:30:38:f1:08:71:
                    03:66:9b:38:b8:11:a0:cc:ca:6a:0d:26:ad:d6:26:
                    48:df:d3:b6:83:ed:2f:b2:3b:da:a8:68:68:6b:ec:
                    a3:a4:01:3d:ed:56:db:7b:e4:b7:af:58:22:78:29:
                    e7:1f:8b:79:9f:38:45:1f:d2:23:6f:67:16:cb:3c:
                    f5:00:f9:dd:c2:d2:bd:ef:4b:2e:57:6c:c3:0f:a9:
                    d5:80:d7:28:38:c2:77:62:1c:27:dd:90:1b:d0:53:
                    78:92:ff:46:cf:55:84:05:ce:4c:38:4e:79:61:11:
                    eb:a4:95:54:08:d7:ac:14:b9:89:64:e7:77:d7:76:
                    a9:e8:32:dd:00:07:84:ae:2f:53:49:90:58:11:3b:
                    62:26:ac:d2:2d:c1:7d:59:0b:44:09:29:19:f3:d5:
                    5a:fc:de:4f:5d:22:05:d1:1a:4c:01:45:ad:f3:94:
                    59:60:1b:63:74:c8:bb:57:1c:61:ea:ec:be:e5:44:
                    9e:7b:2e:73:0f:35:ff:e9:e4:6e:1c:86:34:b6:f0:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:DC:08:C4:F1:61:1E:82:5F:4B:55:3F:BF:9A:E2:FD:89:7D:E2
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:09:04:2c:64:79:dc:de:28:7d:b3:e4:e8:07:e5:d1:2b:
         9d:e6:c6:cc:dd:d9:e6:11:f4:8e:44:a8:d6:fe:0a:94:58:ee:
         a8:dc:37:a4:a6:3c:55:0f:14:ae:f0:33:74:60:7a:14:44:3c:
         ab:8a:f5:14:0c:6a:f7:0a:75:24:b8:74:06:c0:46:f1:40:0d:
         50:b4:f9:d6:ec:73:4e:78:c2:cb:e8:55:61:b0:01:a0:21:27:
         9a:f3:46:f0:51:32:8c:db:a7:de:3f:79:80:ba:0f:9f:d7:1a:
         f0:0b:ce:70:1b:0c:5c:3c:13:ff:34:2e:d9:ea:5b:0e:d1:73:
         3a:70:ca:5e:70:d1:5f:ae:a5:15:ba:05:c3:fe:35:a4:1b:10:
         21:8b:c2:84:a3:59:d9:82:8c:c6:f6:cc:a0:ed:41:74:f3:da:
         be:8d:26:cf:a7:54:1a:54:90:0e:9a:d7:57:b6:35:31:7e:19:
         22:01:1b:71:69:03:3b:fb:7b:72:d2:59:7a:3c:f0:d2:33:27:
         63:98:88:1a:0a:98:98:30:df:73:d2:60:8e:8c:94:57:25:9a:
         16:c2:32:52:b9:bf:fa:35:59:a5:06:dd:1b:60:4a:aa:b6:06:
         4c:52:ad:6d:97:62:31:a0:fe:fe:34:e2:69:d9:45:bb:a3:66:
         e8:87:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----