Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File:                     KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier:          sriAs4s/iwCtSyLfS5DiIvLrlN9Kt4yrmxIEX/IcwT4=
Subject key identifier:   94:87:58:34:39:38:28:CB:F8:9C:1A:E4:12:37:E3:C2:30:CB:9D:71
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer:       /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial:       01962E2ABF4E1B7EB62237D9F96BC5613C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number:          0DF5
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: yZk0/UnJFzVifv/IQXhWM1sqc2Ud46BkBnb82HSjItE=)
                          2: UZvnE-CaTB9qoHVdVXMgB-LiNEM.roa (hash: Ycg6B0Rffq0DfziTHdPyE76c/wB4R/dWXA7Fjbacvbs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:4e:1b:7e:b6:22:37:d9:f9:6b:c5:61:3c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=94875834393828cbf89c1ae41237e3c230cb9d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:ce:76:a0:95:57:d0:ec:d0:45:34:0f:79:
                    cd:ad:b9:9f:12:f2:13:d9:91:3d:8f:a0:6a:5f:f2:
                    67:17:9a:64:9b:0f:24:3c:31:2b:1a:3d:a2:04:e9:
                    77:ca:b1:50:98:3e:da:5c:08:d9:8d:7c:f1:0c:5b:
                    42:88:c3:82:aa:da:9d:aa:b2:d0:de:a7:ff:16:ee:
                    4a:41:41:45:8b:b0:13:d4:f2:13:2e:70:3d:70:2d:
                    e9:ec:88:d2:3f:1b:c6:f9:4d:f3:02:89:b0:72:19:
                    05:41:a2:1d:59:ab:06:c2:9d:1f:c1:97:be:81:26:
                    67:e8:71:e9:6c:14:24:4f:8a:a0:6e:f5:ce:41:ff:
                    c6:7f:d5:43:0e:4e:e5:37:86:f6:45:62:c2:87:6c:
                    e3:6c:22:d7:a3:fa:a7:9c:65:91:55:52:a0:7e:d0:
                    e5:cf:a3:dc:73:99:9a:ee:34:a4:1d:a7:e8:81:94:
                    bc:3d:49:24:6c:03:f4:55:48:a3:67:9c:b2:fb:6a:
                    1a:f7:81:bc:a7:28:e0:8c:76:47:15:17:93:ec:8d:
                    2b:28:a3:d6:ba:9f:57:d6:fd:47:1c:b0:ad:85:9d:
                    da:eb:a7:21:85:35:5a:95:ae:db:ea:28:69:95:ae:
                    50:21:b5:70:09:4b:d3:6f:84:58:81:71:41:1a:a1:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:58:34:39:38:28:CB:F8:9C:1A:E4:12:37:E3:C2:30:CB:9D:71
            X509v3 Authority Key Identifier:
                keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:46:19:70:d8:98:4f:98:9b:e8:e3:d5:c7:69:01:bc:a0:
         f2:3d:a6:10:b2:60:12:f8:ec:ff:5b:f7:45:5d:65:5a:23:b1:
         c4:25:dc:ff:2a:5d:d3:61:8c:4a:f1:25:73:da:b0:62:fd:83:
         ef:53:29:03:37:36:5c:99:ed:c4:86:63:66:d6:a4:8a:09:3e:
         52:af:eb:88:84:7a:1d:94:ac:52:ea:b8:56:bd:a2:1f:5d:3e:
         79:8d:60:3a:dc:f4:f4:8d:cd:8e:a2:57:16:56:21:62:0e:86:
         7c:ea:8c:87:0b:f0:6e:b4:57:c5:ef:fd:d7:d6:50:32:63:3d:
         20:f8:a8:f2:8d:52:61:38:4e:18:49:f9:5d:08:39:75:48:90:
         d3:c6:e3:97:0b:b1:ca:15:05:ef:6b:eb:19:dd:80:ba:e1:e6:
         01:50:e4:48:99:c9:ca:62:c3:60:e9:dc:81:0a:58:c9:41:bf:
         ea:45:eb:94:b4:54:99:2d:97:38:1f:e1:92:ff:0e:ef:42:d9:
         5a:26:7d:94:20:7d:25:45:18:30:5d:65:17:a5:5b:34:52:eb:
         d9:2f:d7:b7:7d:2e:88:61:f4:4f:a7:02:b6:7b:d7:79:94:d5:
         95:b9:6b:03:a0:ab:60:4b:b8:08:54:d3:44:2e:d0:b9:73:80:
         4a:cb:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----