Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
File:                     kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft (raw, json)
Hash identifier:          YUamPvEoiTkfugcdbz3HcsUjnQ6puCYIF6sDm5+CdOo=
Subject key identifier:   70:23:67:2E:35:77:3D:4E:67:8C:03:EC:76:69:BC:F2:29:D4:45:13
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Certificate issuer:       /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial:       01962FAB0B2F11DC91A03808D83B96AAAF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft
Manifest number:          097E
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: JyQo8VWrljsbu7fdBUyCLnp2fRo.roa (hash: PYNlAKDVxyxJWLdDPpsz5WMXt3MO3ZloO8y7DclxK3I=)
                          2: kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl (hash: 9GCUCqPWT8ZqZlerdFBtNJQBE7NeV67u6PUNTGdKslc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0b:2f:11:dc:91:a0:38:08:d8:3b:96:aa:af:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=7023672e35773d4e678c03ec7669bcf229d44513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:02:f9:0a:0b:8f:11:4d:e5:c9:b4:d9:85:
                    50:93:4a:5f:5f:2c:7e:94:dd:f0:d0:9a:6d:36:f1:
                    02:34:1c:8c:d8:a0:ba:e2:bd:12:ce:b5:f0:be:59:
                    32:f8:28:06:0f:fb:f5:b6:97:e3:29:f7:4c:6e:de:
                    5a:72:c4:34:4f:bc:a9:e9:2f:c6:70:af:e8:f6:ac:
                    9b:68:ee:26:00:22:85:97:ee:1c:7a:ad:d5:d0:de:
                    9c:f7:0d:68:81:a8:63:c2:e6:c5:42:ea:5a:3d:84:
                    66:c3:6a:2f:51:94:b4:9c:e8:99:9f:7e:63:bb:72:
                    c6:90:a0:4f:bc:96:5e:f1:03:3c:c5:b5:0c:49:be:
                    fa:c2:d4:63:51:26:9c:31:97:77:2e:e4:62:61:f6:
                    59:af:a3:63:2e:1d:60:a3:45:bf:7e:5d:5c:e8:ff:
                    e0:8f:bf:9b:52:24:67:f4:d0:a5:40:e1:59:3d:15:
                    5b:05:1f:f9:b3:0c:84:ef:f3:f8:f3:8d:ac:8c:2a:
                    e8:52:c0:5f:11:d3:de:09:d9:6f:23:cd:a8:90:2b:
                    d5:5a:33:bf:a5:01:3a:bd:26:b8:8f:6b:a7:48:66:
                    a7:03:a1:fe:34:8c:96:cb:11:8a:d4:ea:df:4c:b3:
                    5b:ad:27:f3:63:cb:b9:c3:a3:3b:32:9e:3e:11:14:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:23:67:2E:35:77:3D:4E:67:8C:03:EC:76:69:BC:F2:29:D4:45:13
            X509v3 Authority Key Identifier:
                keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5d:13:03:38:47:60:4e:df:14:3e:d8:55:08:36:4a:33:6d:
         a6:aa:16:90:0f:55:ae:59:d6:83:71:cc:ce:9d:15:0f:0f:46:
         59:70:0f:de:41:6c:2d:3b:47:16:64:44:68:33:2a:67:d4:43:
         56:66:11:a3:c8:6a:61:83:4e:0c:66:4c:a6:57:e5:a6:45:e0:
         0a:1f:49:c7:64:68:92:65:48:f1:36:3e:76:da:09:39:67:b4:
         ae:92:51:c2:3a:f5:2a:a0:57:f4:68:e6:57:ef:6a:90:73:f3:
         7c:0b:f0:04:71:37:8b:9f:90:bf:c8:b6:93:1f:a4:e1:13:0b:
         90:3b:2e:2f:3d:0f:d2:ac:97:e1:c5:b3:88:9f:ad:8d:c4:10:
         f2:4b:bb:f5:7e:df:be:2f:4a:40:ec:da:14:31:fc:3a:1b:0c:
         69:51:e4:57:b0:50:5e:a4:18:23:b2:33:b0:4c:70:ae:4f:eb:
         5d:40:b8:79:97:b9:5b:e2:00:e9:4f:49:f6:d3:0a:94:35:d6:
         4a:9c:22:06:05:e2:2b:26:0e:88:e7:5f:6c:3d:79:21:e6:11:
         2d:fe:a3:53:52:7a:95:e1:fd:69:9d:0c:29:43:ff:09:df:8e:
         6e:6f:88:44:08:22:ac:86:7a:45:48:7c:e1:ef:a8:a2:87:db:
         fa:14:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----