Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File:                     kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier:          VV71tUXwQmA7q3pKP9n0OecGpbsZ2sORnWJdLQ4WM0U=
Subject key identifier:   8A:EB:78:AD:10:91:E1:02:90:26:77:B5:4A:5B:70:59:F5:3D:B7:8D
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer:       /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial:       01962F06D47E7C3031EFC843A457518FBC20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number:          0D37
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: L4yOlESI8fdR9WjrNj0pt8bvOiM.roa (hash: PjGLNOQOqdRe8JNO68TKc2teWeNxY1n93CJQ5L6+wdo=)
                          2: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: Y7jJCn0/BzWyQJ35DB2TD926l9lK7RP1hHS6GDPaepw=)
                          3: r3p8XMwcqAmXyonA67gG5KyDMk8.roa (hash: W3LtjBTfw8JpwVLfBSb4wvoIcLS8m9n94Jp8osd+AvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:7e:7c:30:31:ef:c8:43:a4:57:51:8f:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=8aeb78ad1091e102902677b54a5b7059f53db78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:ce:51:25:9b:eb:0c:22:14:11:79:19:70:
                    9e:d3:98:2a:b6:7e:6f:28:27:62:97:74:14:99:43:
                    24:cb:33:5f:fe:0e:d2:ac:94:9e:82:1a:2c:e4:07:
                    91:a1:60:93:51:29:6f:19:62:53:ff:e2:b3:89:61:
                    32:e5:c2:45:3c:bd:6c:5c:2c:aa:2b:dc:73:fb:0c:
                    d4:9c:49:83:67:07:a5:e0:2c:c0:27:e8:a5:85:f2:
                    6e:f1:9a:79:4a:95:b4:81:b6:6a:92:65:55:36:74:
                    c6:25:3f:89:0f:44:e2:f6:db:af:fe:13:09:98:2e:
                    aa:87:57:b3:e6:6e:a3:30:e1:77:cb:6f:8b:ad:ee:
                    df:ba:99:56:3a:bd:50:03:a2:a1:30:a7:44:40:58:
                    b5:81:ea:d6:a7:df:8e:80:45:42:3d:b7:e3:e0:8e:
                    79:a9:82:73:c1:7d:5e:a1:91:02:c0:91:6a:d9:c9:
                    25:de:d3:fd:5b:08:39:f4:dd:54:b4:78:13:ba:f7:
                    91:14:1f:47:2f:3a:36:18:44:cc:30:71:7b:9f:e6:
                    95:8e:af:e4:8e:05:40:a7:14:83:4e:a1:76:85:a4:
                    3b:c8:31:a8:0d:55:00:91:38:6c:52:ba:f4:bc:b6:
                    cf:22:ac:d4:0b:3c:fb:3a:05:eb:11:c8:4c:c5:99:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:78:AD:10:91:E1:02:90:26:77:B5:4A:5B:70:59:F5:3D:B7:8D
            X509v3 Authority Key Identifier:
                keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:67:36:11:0e:cd:a0:1d:dd:6d:43:91:21:df:86:a9:18:
         d7:a4:29:29:5f:7c:62:ca:78:92:b0:f7:8c:37:58:8e:d6:4d:
         5a:68:28:78:7a:3a:05:44:ab:66:a7:48:42:a1:1b:c3:e1:55:
         60:b3:29:ea:e8:22:10:62:77:84:9a:1b:d5:55:0b:65:a6:6e:
         47:ed:bf:ff:05:a8:d7:3e:c1:2c:6c:7c:8f:dd:28:ca:67:fc:
         18:8f:fa:df:ef:89:e7:99:21:41:c2:9f:c8:87:f2:92:60:0e:
         9f:c5:84:bd:ed:8c:0b:f7:13:19:82:ba:b2:da:b8:41:70:7d:
         f3:43:48:7b:36:28:ba:d2:ba:a8:69:3e:26:2c:4d:9b:60:ab:
         00:3a:30:f2:b1:35:7e:8e:95:83:a8:ac:ff:a6:19:9e:88:8a:
         cc:34:cb:3c:67:5b:6d:80:5a:ac:6c:ed:f7:46:bd:63:35:39:
         e9:24:47:98:32:69:af:01:2c:2b:85:2d:08:28:3c:60:e2:3e:
         41:1c:2c:19:2e:69:c2:b5:5d:6f:eb:f7:58:fc:9c:50:44:7a:
         9c:ef:ab:9b:67:d3:fc:99:29:28:9c:c7:4d:05:bd:88:71:d2:
         1e:89:ad:ba:9d:a2:61:27:05:6e:47:6d:bc:80:25:8a:79:14:
         dd:0f:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----