Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File:                     KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier:          U/q1N5inYraGOGzB1s3aMWNrpByGPT7uHpiQ1849DWk=
Subject key identifier:   87:4F:11:16:13:B3:6E:AE:37:16:89:7B:F2:B4:1B:93:1D:AF:BD:B0
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer:       /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial:       01962E99ABE19BEAF37E4F4778D53824A192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number:          0A26
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: 1lrtH8qIV5e3th4jMCPobjKiYaU.roa (hash: xgADT5hDJzpgst28AckBVIlM/BW2ECMOC24fNQS3BL0=)
                          2: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: UhGDMfKVdeRJIpazQTXxjbwJs7k7RrZw+OUFy9IPsnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:e1:9b:ea:f3:7e:4f:47:78:d5:38:24:a1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=874f111613b36eae3716897bf2b41b931dafbdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:67:dd:62:54:4c:33:bd:a7:8c:3e:26:19:
                    4d:59:4b:16:fc:27:05:69:47:93:d0:1e:d8:e2:fb:
                    29:ec:e6:05:3f:cc:84:6e:dc:29:b7:63:d1:15:58:
                    3d:e7:a2:cf:13:e1:ff:f3:ed:c4:ea:46:34:b8:49:
                    64:3f:52:cf:be:71:ca:ef:77:f7:ba:0a:ae:2e:b3:
                    e5:14:8a:fe:3a:a0:8e:40:54:14:03:e7:23:a8:f6:
                    30:90:24:e2:ea:a9:81:62:68:dd:db:d6:52:f2:a9:
                    d0:76:fa:0e:6b:3b:b1:bf:6b:61:12:ae:d6:19:a7:
                    72:cc:9f:b2:28:bf:f2:56:ef:4a:37:10:af:13:80:
                    fa:11:ee:0a:ea:b2:e9:8b:3c:eb:37:9a:21:08:a1:
                    1c:8a:35:c1:b1:2e:47:7e:51:d0:77:75:d3:2d:c3:
                    f1:8d:24:cc:3a:a6:5f:33:dc:ea:6c:0b:c9:5a:34:
                    bd:fe:12:3f:78:23:81:ff:7d:78:ac:8c:47:45:b1:
                    be:df:64:c7:27:15:82:10:b2:9c:d3:46:1e:99:47:
                    ae:89:d5:3a:12:ae:44:6f:75:83:95:aa:78:25:42:
                    e2:f5:96:27:5b:cf:2b:31:88:d9:cc:fc:56:5f:a3:
                    bc:99:16:1e:e2:71:94:6f:93:35:b7:e5:6e:67:4a:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:11:16:13:B3:6E:AE:37:16:89:7B:F2:B4:1B:93:1D:AF:BD:B0
            X509v3 Authority Key Identifier:
                keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:86:91:0f:38:2e:71:0e:c3:46:7a:9a:1f:b8:a0:9c:d1:
         26:47:f8:9b:8a:40:6d:44:ba:ae:62:93:00:cc:85:75:e9:2a:
         bc:73:e7:6a:9b:66:65:6c:94:74:01:9b:db:cd:5d:18:82:e2:
         16:46:f3:0e:b4:a9:77:25:b7:3e:15:68:b2:ef:a1:17:51:da:
         e5:bd:9d:31:2a:ed:2c:bd:e2:6d:af:3d:6f:81:24:52:e9:0f:
         0e:8c:24:ff:31:10:92:55:b4:a9:93:d8:1c:83:f3:6c:38:bb:
         36:f2:9c:23:84:c8:85:9e:2a:1c:90:c3:3c:a2:11:81:b0:b7:
         08:2b:c1:78:db:d7:f0:a8:40:99:0d:a5:ab:31:75:49:19:ea:
         2c:3d:88:1d:58:36:62:86:18:f0:13:bc:4d:64:77:5e:de:d6:
         68:7f:fe:32:f7:e3:db:f1:66:c6:37:7f:1d:99:ee:04:5c:56:
         85:05:50:bd:16:2e:bb:79:3a:c8:52:1a:5b:35:df:b2:36:08:
         fa:d2:cd:e9:f0:f7:e1:e9:da:72:d3:31:39:11:0c:ad:bb:0e:
         e0:28:a4:3e:dd:84:67:26:3b:8b:5c:7c:41:ff:95:6a:f9:7b:
         d6:1c:bd:e8:1e:7c:9a:e2:28:f8:04:ba:c4:ca:87:e1:9c:a5:
         27:da:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----