Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File:                     KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier:          2zeltgr1zrzRvP+kB4w8XkTGnCUpZ9oPXYBWFwZOlOg=
Subject key identifier:   89:BC:E2:F8:08:9E:8C:BC:17:96:20:BD:2D:13:7B:FE:87:AB:01:74
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer:       /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial:       01962ECF7FB30E3BFAF529C3ADC6524AE8AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number:          0B7D
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: r7UyDE4I72Ddk7Z6PpNMA36MB9lWgI3tlHcWoNn3nGI=)
                          2: Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa (hash: iHt82QR12LPpEvZ7uiS/6X3yVLGKHgczSuxvhMOvlug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:b3:0e:3b:fa:f5:29:c3:ad:c6:52:4a:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=89bce2f8089e8cbc179620bd2d137bfe87ab0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:51:43:fa:33:1e:72:4d:ff:44:b8:cc:b9:
                    3c:c6:c9:9d:ef:db:1f:23:0a:91:4e:e6:14:66:4f:
                    9a:ab:e8:c2:c5:7a:c3:0c:90:2e:f9:95:74:f3:05:
                    76:da:a9:8c:55:6a:2f:25:86:bf:0f:72:2c:c7:d4:
                    4d:3b:39:11:d5:66:5b:b2:f3:38:3f:bf:bd:cd:4e:
                    4e:02:a7:c3:5e:3e:6d:68:a8:db:8a:69:fd:69:74:
                    e1:fe:09:89:bd:a7:3f:7b:32:08:1d:75:cd:c9:2e:
                    c2:8f:ba:d6:1b:d6:93:d2:e8:38:52:24:24:4c:7d:
                    de:20:76:8a:18:4e:dc:9f:7c:7a:79:fc:03:26:c6:
                    b7:f4:73:d1:07:11:4c:bf:17:c6:5b:b8:e8:be:67:
                    31:57:0b:44:60:93:5e:99:cf:99:75:72:e5:d6:b3:
                    96:29:33:90:01:ae:c3:f5:34:06:27:68:64:0c:81:
                    13:a8:82:73:27:b0:10:f5:4a:37:49:59:72:6c:26:
                    b7:c6:e3:5a:23:f7:64:a5:51:1b:bc:3d:68:fa:b0:
                    21:a9:52:4f:a4:2e:15:61:17:a1:80:51:1e:74:b3:
                    84:49:71:d3:f7:e7:64:b5:ee:e5:08:00:3d:49:50:
                    af:0a:a5:99:1e:1b:ea:f8:06:06:07:84:23:c1:e7:
                    8a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BC:E2:F8:08:9E:8C:BC:17:96:20:BD:2D:13:7B:FE:87:AB:01:74
            X509v3 Authority Key Identifier:
                keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:9e:05:dc:05:20:d9:76:ed:59:dd:0b:f6:d8:85:a5:61:
         48:b1:32:42:4a:a0:d3:2d:2d:b5:ba:a3:66:a4:b3:cb:81:a6:
         46:1f:cb:85:0a:20:f5:3d:22:cf:d7:4c:9c:61:5a:70:3d:31:
         e0:a9:0b:d8:a3:0a:a9:65:f8:7d:bb:23:14:b4:64:ab:94:bf:
         80:e5:83:74:64:74:cb:6a:4f:f5:06:17:97:ee:e6:06:82:fe:
         79:4b:b1:69:f1:70:18:96:0f:d3:57:15:71:6e:7f:6e:e1:3c:
         bd:85:03:3a:d2:3b:6a:e6:60:72:ac:8d:89:e0:e4:bc:17:8a:
         e3:31:e9:de:dd:0f:bd:f2:6d:50:af:61:49:52:e7:08:ce:a2:
         8d:13:36:a4:cf:c3:5d:78:ca:7b:98:17:48:72:1e:cf:b8:3f:
         0e:a7:b9:6b:ce:85:23:24:60:94:60:f1:39:f4:8c:f3:9d:e4:
         37:45:04:65:73:c6:f5:c4:76:01:2f:7e:79:f6:0e:67:bc:21:
         75:41:ff:a9:b7:88:21:db:a9:7f:43:39:03:96:f9:4b:92:b9:
         c4:b9:6a:4e:44:72:07:59:7c:04:25:0c:4b:84:77:33:50:7d:
         e4:08:d0:87:43:b0:2c:8c:8d:4a:36:40:56:5a:f0:4a:55:84:
         49:94:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----