Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File:                     MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier:          nKjxy3XbVz8DMAntA2LGtgxJAB6RWlH4Wg9/1lUHoq0=
Subject key identifier:   AB:E1:EA:93:5A:7B:23:3A:46:6D:65:00:F6:4B:0F:C1:9F:F4:3B:C4
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer:       /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial:       01962DF3E174F632DEC07C348E96766D8A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number:          059D
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: 7W19wMQ0zBNFhmmd3NKH0T9SNVtyEUE9CV7Y3IaaRoQ=)
                          2: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:74:f6:32:de:c0:7c:34:8e:96:76:6d:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=abe1ea935a7b233a466d6500f64b0fc19ff43bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:10:2e:e9:ca:e4:e6:b4:5e:54:be:01:9c:
                    b0:e3:fb:cc:ac:99:cd:e2:a0:fa:87:05:85:3e:5b:
                    ef:fb:5f:a4:c0:b4:25:a8:c4:39:ae:2a:43:04:17:
                    da:78:e4:9b:20:8d:21:f3:c6:40:da:68:65:f6:ff:
                    85:ce:e3:09:26:f2:eb:3d:46:8a:32:69:dc:16:d3:
                    09:a9:c7:25:2e:f2:b5:fa:11:e0:5d:93:3c:91:0a:
                    2c:c9:2d:85:77:34:9a:02:15:bc:71:72:4f:d5:56:
                    0e:96:9f:e8:85:35:d9:28:48:c2:71:78:b7:3c:00:
                    34:e0:6c:0a:4a:d1:bb:cd:23:d7:fb:9a:e2:cf:13:
                    61:7b:0c:91:49:9b:a2:35:5a:51:80:07:e4:8f:3f:
                    b6:d9:d7:cf:86:42:fd:f2:ca:27:5a:8a:e3:cd:c9:
                    44:82:2e:9e:be:95:0b:e2:29:a7:ed:d1:f1:da:38:
                    51:ac:dc:62:bb:c0:b7:f7:03:4f:6e:cb:a9:cb:25:
                    6f:ce:fc:47:08:ab:4e:9a:44:42:d9:0d:15:cd:cd:
                    96:de:b6:10:2c:be:91:fb:09:bc:ee:ed:58:38:bd:
                    54:98:b6:52:8d:c8:86:f8:97:d4:02:f3:5f:0f:5d:
                    7a:dd:ce:fb:39:55:a4:90:3a:b8:c6:0e:0f:00:58:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:EA:93:5A:7B:23:3A:46:6D:65:00:F6:4B:0F:C1:9F:F4:3B:C4
            X509v3 Authority Key Identifier:
                keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:65:fb:b1:f2:18:e3:9b:fe:9b:5e:07:20:d6:7b:f0:34:02:
         fc:62:38:7e:b5:d2:4a:1d:0e:8e:02:a6:17:71:1e:86:ed:b5:
         ba:d9:10:90:1b:bd:35:6f:22:c7:bc:a7:7e:c9:cb:7a:df:9e:
         bf:ff:90:09:53:db:8f:c3:bc:c3:4c:6b:8d:f6:0f:32:be:b6:
         da:4b:85:0d:6a:a8:88:d9:ef:aa:f4:e8:09:64:8d:90:0c:c6:
         d7:2d:85:af:03:4b:62:83:20:92:3b:b0:99:a4:43:09:0b:21:
         97:40:9e:a4:51:5c:76:f4:43:39:b7:fe:f0:1b:04:20:d0:6f:
         f9:e1:55:5d:9e:2b:54:c7:88:da:e0:77:10:ea:8a:0b:35:d8:
         38:9c:aa:2d:b9:b9:6e:f0:90:a8:a7:e3:9a:75:ba:a9:b0:b2:
         d1:42:b9:22:bd:b4:eb:60:bd:47:21:d9:ef:6b:4c:b9:26:56:
         c8:d0:33:05:7d:c7:fa:67:fa:8f:6f:3a:62:46:bb:be:8a:01:
         cb:6f:0c:4f:ae:74:34:9c:07:60:70:93:0b:b5:86:8b:26:2e:
         4f:17:d6:dc:dd:07:17:e7:34:b3:31:be:69:7f:dc:18:71:aa:
         e9:6b:41:34:a1:34:98:e7:94:09:af:79:f6:87:17:bc:18:f8:
         62:31:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----