Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
File:                     K5Ro565AOUbluk3mHMHEej2b794.mft (raw, json)
Hash identifier:          KDbdAyuQWgDxDB+9GG0123BM0uDeEzBIVNnvpqPLke8=
Subject key identifier:   00:E3:03:07:1B:E0:9D:E7:EE:DB:CD:94:13:0C:B4:73:31:AB:0E:4B
Authority key identifier: 2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
Certificate issuer:       /CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Certificate serial:       01962E61A516C1D8FCC65D4E0A7BFB468316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
Manifest number:          09A3
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: K5Ro565AOUbluk3mHMHEej2b794.crl (hash: WtZPA2hX9FLV+LFKq5BMOuz602V63UD8Z0w0dNHXBFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:16:c1:d8:fc:c6:5d:4e:0a:7b:fb:46:83:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=00e303071be09de7eedbcd94130cb47331ab0e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:5a:24:2a:27:71:ff:53:63:68:29:9d:4b:
                    cf:c4:cb:8c:1d:f6:01:a3:fb:76:a2:71:80:d5:61:
                    aa:f7:89:b8:ab:f5:90:80:f5:1d:9f:c9:39:10:8b:
                    30:e1:ed:ac:cf:65:0c:40:7f:ec:d2:ff:e3:da:64:
                    80:5f:82:8d:05:ad:57:a1:01:b0:63:7e:b3:de:1e:
                    39:d9:a1:98:9a:9b:87:e9:eb:da:c8:77:f7:ab:df:
                    db:33:78:97:a1:9a:94:fe:7d:e2:02:22:59:f8:16:
                    d0:fa:fe:5b:a8:18:25:72:17:7f:b2:b6:06:0e:cc:
                    c7:c7:db:53:b6:b5:b8:6f:8c:be:19:a3:64:da:99:
                    6f:9f:6f:d9:ef:cb:7d:2d:7f:e0:d7:7b:5c:38:db:
                    3e:5e:ed:e3:78:7c:ac:69:19:a6:f6:d9:a3:a3:2c:
                    d2:8a:27:8f:76:f1:d7:0d:66:f6:e8:5f:ab:86:19:
                    a5:66:9a:da:21:e8:1f:ae:00:9f:41:76:d7:1f:99:
                    d0:8c:05:c9:d3:ac:78:c9:a2:88:f8:b5:dc:bf:e4:
                    db:6c:40:ce:55:28:f8:78:18:bc:ed:d1:ba:4d:39:
                    e7:73:76:74:0a:11:61:49:f7:9e:dd:29:33:68:af:
                    bb:1e:44:09:af:67:c7:8e:75:1b:ec:a1:e6:0c:87:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E3:03:07:1B:E0:9D:E7:EE:DB:CD:94:13:0C:B4:73:31:AB:0E:4B
            X509v3 Authority Key Identifier:
                keyid:2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:77:88:13:82:16:87:a1:c3:38:fa:65:d6:0c:42:19:b2:
         78:2d:6e:c2:a5:74:3f:2c:b2:19:78:73:23:f0:5d:90:d7:65:
         93:b2:82:45:27:f9:98:05:86:df:57:dd:00:57:10:b1:71:34:
         78:83:02:c3:14:dc:fc:da:02:83:3c:46:f5:98:c1:97:89:1d:
         58:b8:b9:b7:a5:ef:05:74:ac:59:f1:02:85:fa:74:ca:c0:95:
         d7:2a:c9:88:8a:8d:1f:7b:8b:22:fa:7b:9f:78:1c:e5:b7:ed:
         08:94:0d:ad:fe:b1:a1:a3:07:95:7a:94:c9:63:66:71:e0:1a:
         ed:24:4b:b1:24:91:3f:8f:8d:00:38:6e:7f:43:6c:db:a3:1c:
         db:8c:32:9e:aa:4e:c0:43:d9:38:cb:6f:b8:b2:77:7f:93:f8:
         b7:bb:b9:b7:13:f2:fa:ba:cf:46:7b:5d:a6:c3:75:05:35:c8:
         f0:f8:fd:3a:ed:2e:36:f5:85:a3:d8:05:53:42:ea:49:bc:67:
         0f:fc:43:5b:0d:4d:8d:c3:50:f0:b4:bc:67:35:9f:e0:c6:b5:
         50:fe:d7:60:04:ca:2f:a4:5c:25:b1:1b:5b:e7:7c:e1:a0:ae:
         ab:2f:38:e1:3a:1c:ab:74:ef:6d:02:61:19:35:21:00:ff:66:
         bc:8c:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----