Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          1RPf0ZSG1wSCDQ7sh4jrsIdq7h78MgGs/v5711dUe+E=
Subject key identifier:   44:CC:AB:38:35:60:1E:AC:F2:6C:A1:BE:2F:B9:94:76:81:F3:30:B3
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       01962F070554A71A344F8FDF328EDF83E17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0A0C
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
                          2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: qzFjuJYzO5FtUjQF9M7WKBsVH5tkKOBZ0YoqaD+mqEU=)
                          3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:54:a7:1a:34:4f:8f:df:32:8e:df:83:e1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=44ccab3835601eacf26ca1be2fb9947681f330b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:8d:be:d9:90:00:af:42:e3:be:fb:ba:af:
                    60:b2:e9:15:a4:62:75:c7:22:07:02:f6:4f:f4:2b:
                    c6:4e:fa:27:15:7d:ce:89:2a:b9:11:b7:f3:04:71:
                    4a:3a:bb:7e:25:2e:c4:6b:5e:23:3c:0b:c5:76:e8:
                    08:f7:46:b7:b6:85:4a:b4:dd:67:47:81:3a:18:c2:
                    50:c2:da:24:e9:25:0c:f5:d8:91:a2:f6:99:d8:12:
                    3b:44:df:08:d1:dd:21:a1:df:e4:ea:bb:ab:ee:30:
                    aa:3b:3e:a5:07:a8:ac:f3:dd:ed:53:c0:2a:85:f4:
                    fe:45:fa:41:68:df:d3:2a:14:03:48:fd:62:89:e8:
                    de:42:b8:16:5e:00:84:f3:28:e1:3e:45:8f:f4:04:
                    b1:4b:40:c9:1d:fb:e2:6e:69:70:4c:66:17:ba:d4:
                    14:ad:5d:19:33:6c:32:54:6f:0e:7c:eb:0a:1b:42:
                    67:ed:78:86:2a:41:0c:fb:b0:30:0c:2d:c6:3d:c6:
                    27:92:84:cb:63:a0:a9:41:c1:ba:3d:1a:92:5d:50:
                    97:88:a2:23:c2:dd:87:c9:4e:9a:29:ae:50:74:22:
                    2d:6d:c0:60:b9:cd:56:f7:f9:3c:a2:e9:b5:cf:c5:
                    f5:b9:92:2c:c4:49:e6:32:f1:0e:8f:35:27:f2:42:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CC:AB:38:35:60:1E:AC:F2:6C:A1:BE:2F:B9:94:76:81:F3:30:B3
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:e2:87:fb:b7:27:fb:46:81:c2:50:71:96:4c:25:be:77:
         35:ed:c4:c0:4c:cc:22:58:31:4f:33:5f:44:22:f0:54:94:99:
         af:9e:e1:3e:db:8b:15:57:5e:a7:91:37:39:a6:e2:04:59:20:
         0e:31:3a:16:5f:5e:f5:9c:5b:7f:d8:f4:56:72:44:0c:f3:2c:
         16:07:e2:89:c3:1a:54:65:32:9a:82:69:1d:94:cc:a3:1a:7d:
         2c:74:e4:7b:71:33:fe:9d:f7:6c:4f:19:a4:6b:54:d3:89:2a:
         a3:ea:1f:c5:38:b0:76:1c:5d:1c:73:2d:8f:4a:a5:b2:91:78:
         86:f6:3f:71:4c:40:07:6f:72:c5:28:33:0a:90:d6:e3:ad:34:
         64:81:83:4d:7d:87:64:6a:87:04:61:38:32:81:a7:7d:46:8e:
         04:f9:d6:15:77:ee:8d:49:d3:c1:70:65:63:34:3e:23:cd:89:
         2c:26:ab:f2:0f:ac:54:39:ad:a3:30:72:89:bf:70:eb:52:25:
         61:fe:5f:ba:9e:79:45:31:e4:0c:92:f5:6e:c5:c4:ec:fb:15:
         f7:77:41:85:37:53:5d:3b:51:96:a1:52:9d:cd:62:d3:68:40:
         6c:d2:8a:1f:a3:5d:6e:1a:f9:54:9d:21:55:1e:64:6e:dc:37:
         6d:36:f4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----