Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File:                     K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier:          H+zlE14x4fqWDJP+SwrTXRTZWjzqhj/cx0EqNTdjONE=
Subject key identifier:   20:A8:4F:AB:37:C7:D6:E6:E4:2A:97:D3:9E:14:54:11:DD:C3:C4:1A
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer:       /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial:       01962ECFBDE0805D50CD47AF9221DDDB008D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number:          0940
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: aMmp8lUdjIy7oOVTjYqwuy5kFLCv5pJC1KC3MvOKgWw=)
                          2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
                          3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
                          4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bd:e0:80:5d:50:cd:47:af:92:21:dd:db:00:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=20a84fab37c7d6e6e42a97d39e145411ddc3c41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:28:ec:4f:43:3e:70:f8:c2:92:6b:3c:7c:
                    50:b0:a2:84:fd:81:cb:43:51:f6:3f:df:0b:2b:35:
                    55:9b:d5:f3:cc:4c:41:fc:a9:b7:00:de:2b:42:7a:
                    dc:a8:7f:8f:0f:e2:7a:64:dd:d1:c3:2b:35:00:c0:
                    bd:e5:e8:c7:64:ae:d3:81:1b:a8:18:3a:05:5b:ce:
                    82:c0:a0:8e:a4:f4:41:ba:4b:b6:6b:92:50:c2:b7:
                    0b:c6:01:97:df:30:3c:9f:70:23:3f:12:96:2d:c3:
                    81:a4:e3:08:7a:26:cc:63:e8:fb:35:9a:89:6f:6c:
                    c6:76:60:45:0d:1c:7b:84:e8:50:d9:1c:c8:05:91:
                    67:62:95:1b:07:c7:81:4e:0e:87:5e:7a:e9:3c:ad:
                    8e:df:26:f2:6d:c9:6e:98:95:af:ed:55:2c:02:59:
                    22:88:df:67:3e:ed:1e:89:1d:db:fe:3a:22:15:f5:
                    aa:46:25:f8:79:35:61:59:73:3b:5c:82:1b:42:69:
                    f5:c0:7f:36:ec:12:d0:2d:aa:a3:00:8f:71:e1:c5:
                    63:85:33:9c:c8:88:a6:cc:6c:7f:39:84:a8:b1:73:
                    a4:0d:fc:e7:26:02:c1:a2:af:da:19:d9:85:2f:72:
                    01:94:88:a2:a0:f2:35:54:7f:a1:cb:52:00:66:ed:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A8:4F:AB:37:C7:D6:E6:E4:2A:97:D3:9E:14:54:11:DD:C3:C4:1A
            X509v3 Authority Key Identifier:
                keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:f2:1b:1c:1a:56:f2:16:51:3c:87:40:f1:a6:69:e5:2f:
         2b:e0:6f:8c:e1:2e:81:6a:58:3b:7e:b6:93:7c:54:50:6a:c6:
         c7:88:6e:78:5b:83:1d:75:a3:50:f7:38:fe:e8:45:55:01:10:
         39:96:ad:12:18:c5:ed:1b:40:20:2a:b2:74:c5:c1:a8:2c:87:
         b1:02:3d:93:c9:c1:af:13:e5:3e:f8:6d:4e:64:c2:44:6b:e8:
         73:22:97:8b:8a:20:48:28:ad:5b:84:4d:e2:64:ac:7e:ca:bf:
         6f:08:1e:d9:91:b3:e6:e1:7d:89:40:0b:3f:82:91:6d:a9:cb:
         be:84:aa:44:68:eb:51:a7:be:19:d1:d1:00:e0:eb:96:fe:7f:
         a5:20:a1:1a:55:f5:1a:b7:9b:d0:1c:2f:36:e4:53:dc:d0:34:
         ad:95:54:cf:94:65:2e:c7:70:d1:33:52:1b:ec:e6:25:37:e0:
         71:6f:bc:e1:3a:ee:34:5c:43:a6:80:f9:0b:87:ec:6b:98:b5:
         63:c3:55:fc:21:6f:d1:ca:65:e7:12:e4:70:db:ea:54:e4:4a:
         99:fd:d6:e5:7d:cb:be:60:3e:e2:67:c0:f3:70:b4:9e:e7:5e:
         9d:e5:5a:c1:aa:f8:e3:9a:fe:17:e5:ce:62:69:81:dd:61:4e:
         3b:7a:fa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----