Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File:                     KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier:          tLSMcH2ju6XDkL9rlyFChQmk5Pv25iVtvw1dMV7HhLg=
Subject key identifier:   BE:E1:EA:CE:7F:DE:93:B2:F5:32:4E:8D:93:DC:4D:71:B5:B8:40:15
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer:       /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial:       01962F3D8866D25E13D12A0A01A3A413F014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number:          0AD8
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: X6DQ5srtUYh4xCO95VtLalhIA37dJlaSTHXeqUZ4bEc=)
                          2: kA_OSzYdIA2vmO2YYor5kHVNHTQ.roa (hash: na+fNS4+KPnZVKtvI9VPkmEDxvmlZJBhohUxDwUJWbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:66:d2:5e:13:d1:2a:0a:01:a3:a4:13:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=bee1eace7fde93b2f5324e8d93dc4d71b5b84015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:54:64:20:f4:6a:d6:d5:20:7a:5a:7d:05:
                    05:89:0f:8c:28:ce:64:82:19:d2:c4:15:6e:5a:93:
                    d4:86:85:a8:bb:62:10:11:e0:ba:c0:6c:78:95:37:
                    90:a9:d6:b9:6d:4e:06:24:a8:83:b6:0f:c9:a9:96:
                    55:8a:01:24:e0:c9:7e:60:e8:0d:cf:a4:b4:b2:93:
                    8b:9e:d4:4d:97:0a:65:8b:0f:59:2a:e8:56:8b:4f:
                    aa:fb:4c:06:f4:d1:7e:9f:f6:19:90:4b:b2:2b:9d:
                    67:eb:5c:57:ce:e3:69:f5:61:ca:ce:36:af:42:c8:
                    d0:ee:dd:37:34:83:1b:a6:25:86:3c:22:ba:b9:39:
                    37:cf:29:37:fa:96:f2:8a:37:52:0c:f5:2a:23:56:
                    a2:c4:b5:6d:f1:37:55:7a:05:be:c3:24:71:04:1c:
                    38:94:52:95:c4:aa:f1:72:29:c5:05:83:0c:c3:e3:
                    8d:0e:36:5b:ad:5b:04:dd:56:28:76:bb:e0:58:58:
                    f7:42:13:7d:a3:c7:36:ac:71:5a:bd:40:e6:35:2e:
                    a5:cb:a0:7a:20:8c:4e:09:7d:05:49:40:5c:28:c1:
                    8d:71:d1:dd:19:56:6a:de:ae:54:77:37:56:59:a3:
                    fe:9d:de:43:66:48:44:76:ea:b5:6e:42:1a:08:4b:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:EA:CE:7F:DE:93:B2:F5:32:4E:8D:93:DC:4D:71:B5:B8:40:15
            X509v3 Authority Key Identifier:
                keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:52:fb:fb:23:f2:7b:cc:e8:ba:f2:dd:3d:c9:00:25:b8:13:
         a1:2c:01:93:80:30:ce:2c:3d:a0:67:a9:98:7c:91:ec:95:e4:
         a3:fe:c3:da:67:82:d5:38:8e:f4:d7:08:c8:3b:75:21:aa:d8:
         bf:4f:f5:2e:a9:8c:c4:c3:88:8c:70:79:15:1b:1c:4d:51:91:
         d7:f6:78:0a:7f:51:31:d7:12:f0:7d:6d:f4:4a:98:52:95:af:
         14:20:55:d3:fe:9e:a5:1f:75:d3:f3:e8:48:67:ee:40:9e:57:
         33:a7:4b:79:bb:64:69:cd:4a:c1:dc:70:0a:96:ae:af:60:50:
         0b:09:e4:b7:07:15:4c:05:e5:9b:1c:74:b9:3e:2d:b9:18:e8:
         35:d3:5d:41:10:23:38:19:93:80:de:40:b1:e2:09:74:a0:3f:
         8f:a6:da:a7:a6:29:f8:62:8a:e8:dd:8f:8c:44:20:fb:18:f3:
         81:94:27:61:7a:95:02:9e:9a:44:a2:57:4a:81:2d:2e:35:f1:
         9a:8f:08:0d:fb:7c:36:fd:b9:ec:f9:82:a2:34:f5:41:d0:51:
         af:03:06:f2:94:0d:97:2f:2b:1a:16:20:81:c2:5d:5b:0a:42:
         6c:cc:a7:e2:ab:4e:fc:8b:34:d4:1d:75:c1:be:fd:d0:3d:5b:
         5c:1f:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----