Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft
File:                     K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft (raw, json)
Hash identifier:          QAfaLwlxPxDORTBXp5Vw/R0hEuwoyUJFnzNOkfIlj9g=
Subject key identifier:   08:A2:90:E9:61:53:85:05:49:C0:78:82:F0:48:97:60:D2:52:16:D5
Authority key identifier: 2B:B2:D0:23:41:C1:19:49:A8:C8:71:53:F8:66:C0:F6:8F:1B:BD:73
Certificate issuer:       /CN=2bb2d02341c11949a8c87153f866c0f68f1bbd73
Certificate serial:       01962F3D5C028176B9A59414C653E01BBFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7LQI0HBGUmoyHFT-GbA9o8bvXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft
Manifest number:          06B7
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: K7LQI0HBGUmoyHFT-GbA9o8bvXM.crl (hash: OfLLOt7Otwa4kWhlrzUbA1orOWAyEDmAqRbr1rQyfLg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:02:81:76:b9:a5:94:14:c6:53:e0:1b:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bb2d02341c11949a8c87153f866c0f68f1bbd73
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=08a290e96153850549c07882f0489760d25216d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:c6:b0:2c:e6:70:34:11:c1:0c:78:92:26:
                    fd:7c:c6:a1:de:7c:a0:e7:db:ba:2c:c2:0f:ad:31:
                    58:3e:8d:f7:00:d0:b2:d6:ef:36:31:2a:97:33:a8:
                    bf:e8:21:2c:d8:fc:f7:25:7a:24:6e:7b:e3:97:ab:
                    30:cb:9a:ad:07:52:7d:16:73:28:a5:b8:d1:b8:42:
                    c1:e0:88:e0:4e:7b:20:6e:8a:cd:e4:c9:e8:89:6a:
                    c0:50:f3:b6:36:e1:3b:6a:cb:d9:88:36:7f:cc:70:
                    5e:8f:e8:09:35:75:1f:a9:23:03:f0:82:48:a8:ba:
                    49:2e:5a:73:39:12:fc:b7:ea:d4:da:cf:bf:6c:42:
                    2e:c3:14:26:b5:73:3c:06:70:a4:8b:a1:56:5c:15:
                    05:99:8d:66:ca:a2:54:05:3d:35:43:d5:28:60:23:
                    d0:36:88:25:16:ce:5c:7b:52:25:cf:4d:18:18:b7:
                    7d:dc:81:36:e7:cc:77:c6:f2:c9:11:9d:4c:fc:e6:
                    7c:78:e6:9c:b8:a3:40:b9:5e:36:5e:2f:e7:6b:b8:
                    13:a5:65:21:f4:86:6c:10:26:db:7f:41:9e:50:5f:
                    33:24:1e:67:01:1b:e4:65:bd:f9:fb:5f:85:0c:14:
                    eb:df:a6:ca:dc:ed:e6:85:fd:53:f7:08:e8:92:97:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:90:E9:61:53:85:05:49:C0:78:82:F0:48:97:60:D2:52:16:D5
            X509v3 Authority Key Identifier:
                keyid:2B:B2:D0:23:41:C1:19:49:A8:C8:71:53:F8:66:C0:F6:8F:1B:BD:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7LQI0HBGUmoyHFT-GbA9o8bvXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d7a794-5e38-4e84-8156-460656fe3ab5/1/K7LQI0HBGUmoyHFT-GbA9o8bvXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:0d:0f:da:d0:4f:91:37:8a:cb:fa:c3:3b:50:e2:6c:cb:
         a5:1b:39:72:e6:ef:4e:8e:51:cf:79:01:9f:be:85:ad:bb:e4:
         47:d5:cd:62:7d:2b:d5:5c:30:09:1a:dd:74:30:3e:86:52:71:
         6c:bd:7c:f8:01:9e:9e:85:39:d3:7d:3c:de:14:a9:ca:f4:57:
         f2:4b:92:ce:42:d1:14:6c:80:14:74:08:be:d0:e5:e6:20:0f:
         31:a1:a6:c0:cd:c6:71:2c:ec:7c:91:59:23:a9:9e:4a:87:3f:
         21:8d:ca:5c:78:45:28:9c:99:12:a5:ce:6d:95:dd:f9:32:02:
         6a:a9:ab:87:9a:b0:be:7a:c5:8f:fb:e8:cd:23:53:a6:ea:9c:
         3f:42:ea:de:fa:77:a7:7f:45:4b:99:a9:e1:63:12:2a:5d:dd:
         36:b5:92:f5:db:35:da:98:26:f0:55:58:54:24:ee:14:ef:59:
         af:2b:8f:94:db:9e:cf:bf:53:66:e4:98:41:13:ca:ae:8d:a1:
         ba:6d:a4:c5:84:05:b6:b2:30:93:08:ca:8e:4b:4d:8b:55:9f:
         e7:13:e3:d5:6e:10:c5:a3:08:59:54:67:bc:5e:04:d1:5e:1d:
         a7:dc:77:5b:60:95:bc:d5:5f:dd:38:d1:25:d5:76:cc:6f:3b:
         aa:2e:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----