Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File:                     KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier:          9DKvH4IxhcZSCXdxfi3ZPRDRoC9f0uG8ylDjo6bAccg=
Subject key identifier:   25:8F:1A:93:64:E8:69:4A:8F:E3:7A:7F:08:D2:C8:A6:F4:F8:13:C1
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer:       /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial:       01962E98AFD4EC2BD76971D50EAB5EB38092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number:          0A25
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: 3hY1zHwJfhigy5DV14hx6Nreon9FCkIllhVZUYnYtIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:d4:ec:2b:d7:69:71:d5:0e:ab:5e:b3:80:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=258f1a9364e8694a8fe37a7f08d2c8a6f4f813c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:96:be:a4:84:4d:d7:49:ee:90:6c:68:da:
                    7a:e7:77:1b:2a:5f:f6:ca:09:3a:3e:78:b0:d0:d9:
                    57:85:45:84:b4:38:c9:3b:ba:9f:8d:65:2e:42:2a:
                    02:bc:33:d6:7c:26:41:86:7f:f5:28:0b:00:01:58:
                    71:b5:4b:6c:4d:58:90:94:de:49:3d:34:7f:a9:0d:
                    cb:b2:38:4f:94:ba:ad:26:60:ad:09:4e:8c:5e:61:
                    b2:d2:12:26:5c:14:67:5b:90:58:95:9d:4e:d3:fd:
                    36:28:32:b2:ea:15:54:85:dc:fe:c6:17:ec:0f:8d:
                    68:74:20:3f:69:36:6d:4a:c2:5d:e0:ee:b0:2f:31:
                    e8:0b:a5:c5:45:c3:92:b3:10:fe:85:5e:f2:0c:1b:
                    3a:2b:65:88:92:52:79:5c:58:cb:35:7d:63:89:8e:
                    6b:03:95:48:5f:46:02:57:d9:51:97:10:02:f6:d3:
                    7b:61:c3:60:ca:73:e8:fa:5a:86:ef:00:ab:46:5e:
                    38:7a:92:45:8b:fc:67:e8:9e:60:de:66:e8:b2:2e:
                    a6:97:5f:b3:6b:24:db:5b:98:69:e8:6c:65:26:b2:
                    7c:dd:71:0c:76:94:75:a8:7a:f9:41:c9:11:2a:69:
                    91:dd:d7:8c:54:70:fd:19:1e:1f:d1:8b:46:46:30:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8F:1A:93:64:E8:69:4A:8F:E3:7A:7F:08:D2:C8:A6:F4:F8:13:C1
            X509v3 Authority Key Identifier:
                keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:50:80:a6:45:5d:da:95:cf:9b:ed:a7:dd:25:7e:ef:8c:2e:
         78:f4:3d:6e:01:9b:50:cc:8d:9b:cb:a0:6d:d9:85:a1:79:78:
         20:98:b6:cc:f1:62:75:24:bc:d1:7f:a4:41:a9:30:32:62:c7:
         24:c9:62:bc:94:1c:e0:f5:7c:fc:58:08:fb:d3:ce:47:99:c2:
         f0:64:52:7b:0e:b7:8f:c9:15:3f:9b:77:b3:e0:db:da:32:8f:
         73:74:90:50:53:5d:36:ae:cc:d1:50:8c:45:f2:72:91:1a:6f:
         8b:0f:9b:23:a0:d1:0c:53:5d:2e:a6:89:d1:45:cf:11:d7:14:
         26:b0:e9:10:f0:86:a5:7c:57:73:48:5a:75:6f:5a:d2:f0:a4:
         f4:4d:e9:76:41:b3:26:0e:ba:93:7b:22:3a:74:08:90:3d:e3:
         b4:d2:50:9d:1c:f0:1b:94:94:7d:e2:96:5e:73:83:fc:20:d0:
         bc:42:71:fa:02:17:6d:ee:0e:fb:50:f1:6b:9b:b7:c1:7c:33:
         54:80:2d:39:d4:e0:d5:73:48:84:dc:d5:c1:2e:6b:2d:3d:62:
         98:36:3b:a1:b5:95:70:8a:4e:4b:43:59:17:88:10:40:90:cb:
         f4:62:57:76:1c:2b:6e:16:94:cb:33:3d:c9:d5:3c:95:fa:e3:
         94:d4:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----