Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          ue2TkS8aSbipEMTLFf6XaubRSCEmKRZpxpnpqiDekKE=
Subject key identifier:   96:9F:0D:9F:18:FC:63:EE:BB:CC:A8:CD:FC:BE:19:0F:41:41:1C:0E
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       01962FAB34345DCD1453306CD61C7130DA0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: hR21fKiKpk6AkBkHuxVYIo+a+XoJ9CchqSacCl+NDjk=)
                          2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:34:5d:cd:14:53:30:6c:d6:1c:71:30:da:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=969f0d9f18fc63eebbcca8cdfcbe190f41411c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:20:37:91:26:70:b3:e1:42:f4:b9:3a:61:
                    2e:94:37:30:4a:fd:21:91:5d:80:88:0f:37:a9:05:
                    39:8c:98:12:1b:47:e9:36:ca:61:52:ae:34:ef:0c:
                    ff:e0:21:32:d0:95:2d:90:d1:fa:16:0a:91:a6:2b:
                    af:38:c9:28:da:66:91:82:f2:e8:19:f9:55:56:4c:
                    81:8b:88:a9:03:5d:d5:0a:ab:ce:8b:88:8c:89:e6:
                    1e:c5:d6:c9:bf:b3:b0:69:b9:55:ad:73:94:86:22:
                    22:dc:36:f3:4e:33:5a:af:1d:c0:7c:84:60:c4:6f:
                    5e:ea:4b:77:ee:4f:e5:10:a1:51:92:3d:fb:01:d2:
                    69:bf:b9:b8:4b:6c:21:8f:db:43:db:11:c5:77:8a:
                    14:2c:74:f0:0a:3b:a7:7e:c2:9c:a5:35:61:38:cb:
                    9f:2d:fe:dd:01:8f:00:d5:63:59:7f:c5:1b:05:ba:
                    bf:40:95:10:2b:1c:37:5b:77:9d:56:9c:10:ef:3e:
                    98:bb:dd:0c:31:61:6e:21:58:e1:0b:33:59:5a:a0:
                    40:1e:a0:07:bd:49:56:60:74:dc:2c:65:21:4c:8d:
                    d6:c4:7d:8e:a8:3c:ce:47:4c:5e:e2:b3:b1:f6:ff:
                    65:d7:40:30:17:87:2a:c6:e5:87:e4:79:a3:39:ae:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:0D:9F:18:FC:63:EE:BB:CC:A8:CD:FC:BE:19:0F:41:41:1C:0E
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:49:e4:1b:8b:c7:80:78:3e:5a:da:e0:6f:94:46:ed:ac:c7:
         99:b9:20:61:75:da:87:8d:be:a0:33:57:58:c7:02:34:a9:1c:
         0c:97:4d:38:6f:92:2f:97:b5:9b:f3:9b:34:8b:e6:07:ef:90:
         6d:12:d9:e4:d2:a8:ff:81:b9:a9:77:fd:a8:5b:0c:06:bc:d7:
         9b:f9:4e:75:e5:28:3b:7d:7d:8c:29:70:66:38:92:41:9e:17:
         98:50:3e:82:27:df:fc:6d:95:1e:4e:5c:08:8f:7c:5c:75:2a:
         26:ca:db:ab:59:86:6e:18:d8:57:f4:9a:96:33:c3:db:86:66:
         eb:0b:e5:3a:74:6d:ba:a4:38:c5:cd:3b:23:0a:c4:b7:b6:67:
         2a:36:a5:f4:b0:2a:9c:ff:3b:b7:1c:31:dc:92:2d:bd:5b:36:
         5f:f3:81:9a:3a:88:e1:20:1b:ae:a5:be:b1:d2:64:72:85:10:
         96:d5:4a:d9:db:af:b8:fb:db:b0:a4:fb:d0:35:7e:ce:78:93:
         f6:a6:9b:3c:f5:02:2e:f8:9b:e5:c0:f6:89:5e:2d:a5:fe:a1:
         6a:22:7f:6f:24:f8:db:e1:f2:4b:b1:3e:51:8f:35:72:23:1b:
         83:cb:aa:0b:70:fc:12:e3:e6:21:92:e1:e7:99:25:5d:17:ea:
         46:60:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----