Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File:                     kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier:          J7ESkq1pd57lPqW0pldXhQUUFuZTDkXAIvPvdjDwV48=
Subject key identifier:   6D:54:C1:EE:EE:29:79:D6:05:AD:A2:60:0B:C3:7A:3A:C5:82:A6:F0
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer:       /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial:       01962F072087A2CC109BF8504679B1012343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
                          2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: jR+N+TTN4DPVa/X+0Rc+JdKnJZEEqhchRNsOO5nuAzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:87:a2:cc:10:9b:f8:50:46:79:b1:01:23:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=6d54c1eeee2979d605ada2600bc37a3ac582a6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:c0:cb:c2:26:ec:6e:73:43:d9:82:60:29:
                    20:dc:34:2b:8c:09:f6:a4:7b:1a:40:e3:66:70:83:
                    4b:96:7b:b7:21:cc:88:93:28:79:60:9b:12:9c:3a:
                    28:da:19:c7:07:38:f3:3c:af:d4:5e:b1:86:5b:52:
                    bf:76:9a:e2:c0:e7:72:e3:8b:85:ad:7b:f4:ca:38:
                    6f:82:de:3b:f7:ee:b6:8c:07:37:72:82:79:7d:bf:
                    85:ee:00:18:5a:87:e4:df:88:0a:29:1f:fb:4b:33:
                    d7:05:65:a2:3d:b2:0c:1a:9a:50:be:f1:3f:6e:02:
                    0a:2e:cf:1c:60:64:d1:6f:fb:b2:01:cc:b4:85:8a:
                    a3:44:e9:27:2a:83:87:a7:c6:81:0b:48:7d:9a:e9:
                    4d:54:68:56:d7:e4:40:9d:84:9b:e5:58:bb:e1:c7:
                    42:44:d5:a0:d5:c2:52:cd:91:7a:8b:c4:7c:ee:ac:
                    94:4c:54:c2:05:ae:93:89:ba:1a:c0:5a:11:04:2a:
                    0c:69:3c:d0:a8:18:15:74:37:83:37:33:b8:8d:a8:
                    48:b7:35:b1:66:23:bf:a1:2b:90:9a:d1:4c:6d:06:
                    f3:0e:eb:df:e8:e8:0f:52:b7:0b:d7:13:3d:ee:93:
                    fd:b9:6e:22:52:3b:88:48:a0:e8:2c:a2:0d:cb:da:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:54:C1:EE:EE:29:79:D6:05:AD:A2:60:0B:C3:7A:3A:C5:82:A6:F0
            X509v3 Authority Key Identifier:
                keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:5a:f5:1d:c0:03:e9:64:73:5d:35:0e:2f:c1:c9:6d:04:
         d1:97:88:ad:6a:ef:51:0e:75:ba:9a:ed:b9:8f:c5:f4:e3:9d:
         9d:89:21:71:02:cd:e2:9d:17:df:79:af:28:dc:40:07:62:92:
         af:a9:c3:8f:75:cb:06:66:c0:d6:7f:1c:16:57:f4:82:a3:bb:
         e4:d4:93:7f:ad:4f:ec:39:2f:b2:c8:ce:48:a3:54:b9:63:35:
         e9:3c:44:b9:a3:cb:81:71:86:e5:4a:02:b0:f6:fc:8f:53:42:
         13:c5:ab:23:56:aa:f3:a2:e7:82:78:d2:2f:5f:0e:79:15:5a:
         ca:38:19:c4:98:89:be:47:8f:10:75:bd:96:a9:65:97:07:80:
         38:47:a8:08:76:9e:1e:e6:17:ce:e7:f9:5b:4b:62:33:ec:13:
         92:e3:8c:59:6a:e5:0b:e2:6e:7f:ca:e3:cc:cc:40:96:78:77:
         fa:29:e3:ac:1c:1e:13:49:86:05:c7:c8:4f:54:93:d5:82:13:
         81:2c:39:f3:7d:fe:cc:9e:b2:2e:23:57:5d:04:32:9f:7d:c8:
         77:cb:f5:30:56:94:4a:51:8a:c6:50:cb:15:fc:19:1c:b5:4f:
         8e:3d:7c:95:13:1c:55:de:9c:b0:1c:84:a3:0f:0c:6c:cd:cf:
         49:41:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----