Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File:                     KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier:          LEg2eglGGKPs68F5pMouE9TUYp+HiyUQPPuUrWol/NI=
Subject key identifier:   88:28:1B:4F:6B:C6:B8:A1:5C:20:0F:6A:2D:5B:30:08:36:A6:F8:9B
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer:       /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial:       01962F742C4E10E0572BDA2B7C3792F05EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
                          2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
                          3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
                          4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
                          5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
                          6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
                          7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: VdtARbs6UMYfqRgwvrLN9txFw7xxDu6Z3fuObaQmSTc=)
                          8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2c:4e:10:e0:57:2b:da:2b:7c:37:92:f0:5e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=88281b4f6bc6b8a15c200f6a2d5b300836a6f89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:81:aa:a2:4a:75:0b:a5:08:de:d8:cd:1d:
                    f3:5e:ed:19:9b:71:4a:0a:8b:af:db:39:39:c3:f6:
                    ed:1f:5a:e0:89:47:8a:9c:f8:27:97:cc:9c:aa:ff:
                    76:0b:90:85:99:54:4a:45:c9:bb:88:b8:0a:d4:e6:
                    85:57:92:63:e9:1f:4c:5e:04:c4:89:13:95:89:7a:
                    e2:e4:d2:0c:ac:2f:35:af:36:19:d1:29:e5:56:4a:
                    a4:45:20:94:a0:71:8f:a1:90:0d:26:d9:38:4a:01:
                    0e:da:67:c0:1a:30:e3:8c:40:e5:a9:bb:78:f8:64:
                    48:23:9b:6e:c0:ca:8c:05:f2:8e:0b:f8:a6:6c:19:
                    ab:5b:96:49:c8:d0:5d:be:4e:3e:97:c0:e5:4d:7b:
                    d7:c7:35:b1:37:b0:b9:97:8d:a4:c8:5b:c0:48:4c:
                    da:79:b5:d0:06:b1:68:0c:7e:92:d9:7f:b4:be:bd:
                    f6:da:f8:73:ab:74:25:41:f3:27:a1:26:21:db:0f:
                    64:45:99:85:7f:2a:a1:93:7a:94:c9:70:b3:40:c1:
                    f8:46:4a:1b:ae:d2:23:46:da:b3:b6:9c:53:92:25:
                    af:09:63:aa:2d:2e:24:9f:3a:ba:36:03:98:b5:9c:
                    e1:24:c7:07:c3:8f:97:5a:05:8a:30:a8:07:49:19:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:28:1B:4F:6B:C6:B8:A1:5C:20:0F:6A:2D:5B:30:08:36:A6:F8:9B
            X509v3 Authority Key Identifier:
                keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a1:83:21:e0:65:eb:66:23:10:2e:bd:88:99:91:4b:93:01:
         47:fa:fc:a5:ed:ad:0e:cc:5c:1d:cf:24:76:9b:71:65:17:86:
         07:4b:41:2b:21:89:e2:04:16:6e:b6:6a:67:df:36:48:64:07:
         d4:ba:7d:63:45:78:dc:44:f4:36:c6:d2:58:4c:96:88:c5:ac:
         40:ee:0a:f4:41:42:e4:67:f4:da:b0:76:82:4a:47:00:d2:a7:
         71:c3:eb:cc:89:6d:28:8f:89:b7:16:cb:88:60:66:3a:92:92:
         98:af:4a:9a:7c:aa:b8:6f:2c:c5:43:a8:20:c1:bf:bc:26:27:
         c2:cf:2f:13:05:2b:92:7c:7b:8c:75:bf:99:5a:2c:19:6a:6c:
         fc:f3:80:5e:c2:ac:44:35:05:ca:2a:f3:4e:1a:8b:87:84:51:
         20:6d:85:1f:3c:07:ad:2b:8e:8b:bf:41:c0:63:d6:5a:83:97:
         76:f6:e5:31:e3:2a:f6:f6:12:f5:e1:65:67:02:bf:03:3c:7d:
         23:69:40:02:2d:6f:bb:d2:f7:dd:61:52:a2:b8:c4:05:86:ce:
         90:57:f9:23:2a:f4:fa:b3:9d:bb:16:6e:fc:a4:0f:6b:d1:44:
         33:90:1b:50:a6:8d:64:b5:40:2d:75:4e:c1:e1:22:b2:5e:44:
         ef:43:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----