Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File:                     KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier:          4gfJ0sG93L3b6YDzHwBAlaMYTsdjRQMj0GfTKP6zDjU=
Subject key identifier:   6E:86:A5:55:C1:EB:91:BB:A0:C1:39:21:D6:F2:DF:1D:EF:7D:80:A9
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer:       /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial:       01962F06541299877019294F89AC7B90E34D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: fQcBIDhzSNODkgZ1JXuggg3V6Iphj97q9nzI/+KxQTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:12:99:87:70:19:29:4f:89:ac:7b:90:e3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=6e86a555c1eb91bba0c13921d6f2df1def7d80a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:ed:cd:a8:07:48:8f:6e:cb:25:6a:34:9e:
                    a6:7f:26:45:27:96:37:64:9c:19:02:e8:2f:4d:42:
                    d6:ff:c2:95:eb:43:07:a3:62:7a:8f:79:e8:20:fa:
                    1b:5b:b9:ef:f9:18:24:13:64:9d:71:75:0b:aa:12:
                    d5:c0:da:a5:b6:ce:10:97:83:9d:87:f8:9f:84:c4:
                    a8:66:b3:07:bf:15:85:70:9c:42:4e:89:95:bc:9a:
                    df:90:68:e8:d9:83:db:31:66:b0:25:83:ea:74:07:
                    0a:74:d2:a1:2a:d9:45:e1:07:a4:12:18:e6:27:6a:
                    d8:52:16:ef:58:c6:39:fb:41:f9:1d:4f:fc:87:bc:
                    62:70:34:41:0d:6d:d7:8e:f6:94:86:1d:e5:60:34:
                    e2:1f:f8:ce:90:58:a2:70:69:21:d7:71:ad:a4:99:
                    3f:6c:d4:92:ce:fb:cf:a7:06:05:2a:6a:e4:e3:3e:
                    e1:71:c7:b4:5b:bf:7d:51:45:fd:5d:a6:56:a5:7e:
                    c5:60:b5:8c:60:75:e3:49:7c:67:96:be:6a:14:2d:
                    44:97:b4:94:bb:3b:c6:b6:45:26:e8:a8:f7:ce:4f:
                    96:4f:e3:65:a8:c6:d9:96:e9:f6:f1:1a:48:da:24:
                    34:a1:00:8c:0d:e3:8b:36:5f:4e:66:d8:f5:0c:2e:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:A5:55:C1:EB:91:BB:A0:C1:39:21:D6:F2:DF:1D:EF:7D:80:A9
            X509v3 Authority Key Identifier:
                keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:17:ea:62:58:db:c8:b6:d8:25:7a:21:1b:8b:ed:15:08:f1:
         1f:0d:5a:8d:fd:95:dc:6b:19:4e:da:88:fa:7f:49:e6:b2:ea:
         b3:11:65:3d:22:a2:25:d7:bb:89:99:fd:c7:98:9f:98:e1:b2:
         5b:bf:0e:f2:2a:e4:95:a7:01:7f:3c:60:92:54:b9:c9:98:5d:
         38:8c:f0:e9:2a:3e:5a:6a:37:e3:eb:84:f5:3c:d7:4a:af:53:
         d7:39:3d:90:56:33:4f:6f:5a:18:f8:d1:dd:8c:2a:04:da:7b:
         74:95:44:9c:2b:1b:5a:e7:5a:88:34:70:29:c0:c8:11:81:69:
         d0:29:30:ff:a1:6d:eb:9a:77:7d:48:c2:7b:93:96:5b:ee:ef:
         f1:cc:db:9a:94:ca:bd:10:d5:5c:b3:cb:4d:39:a2:92:df:d3:
         9f:c7:43:26:c6:d5:d6:0a:a6:af:32:31:3c:dd:88:91:b8:f5:
         ab:15:c3:d7:7c:f3:26:09:86:56:da:47:b7:9b:d9:99:1c:f9:
         0e:57:06:68:da:74:c6:2d:ca:e4:50:7e:3a:41:7f:4d:2d:ce:
         3a:91:f3:94:98:75:a2:f7:4d:41:6f:1c:e6:33:45:7c:1a:70:
         95:18:fa:2d:1c:fd:8d:0f:e4:68:43:f1:86:33:4a:67:5d:58:
         75:85:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----