Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File:                     KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier:          NmNKjmK9MNhFMi1CVpYnzDGF2J82BEen6Ctu5VN7Py4=
Subject key identifier:   5A:AD:1C:63:7A:F6:88:A3:08:6F:E3:50:0A:26:63:F4:22:98:0B:0E
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer:       /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial:       01962F06C0B1286AD611DEBCD83DB5F53074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number:          0E56
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: d+gx8s9IRo4X89uLGPifKwsLAW9cFRWmaxHC9T9tBaA=)
                          2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c0:b1:28:6a:d6:11:de:bc:d8:3d:b5:f5:30:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=5aad1c637af688a3086fe3500a2663f422980b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:a6:02:4c:34:b7:fc:24:5c:13:db:57:14:
                    6d:7f:b0:5e:61:52:26:b3:cc:d7:1b:23:5f:23:c6:
                    63:c6:23:30:5b:49:b2:f8:0c:eb:3d:35:66:5d:96:
                    62:c5:77:b6:27:a1:ad:aa:3c:5d:dd:88:b9:d4:30:
                    e0:43:2a:ad:a3:10:1e:bf:f9:d0:cc:59:09:91:f0:
                    0a:14:96:2f:e8:02:e6:c8:b8:1b:9d:b1:99:ee:42:
                    42:8d:bf:cd:77:9f:da:ec:bf:10:29:18:95:c0:8f:
                    d9:2b:24:d5:a0:fa:96:b2:7d:70:fe:70:94:e2:21:
                    60:32:3a:46:3a:dc:0f:11:79:f3:f2:19:1a:93:5a:
                    be:6f:4a:5a:56:a9:03:ef:f4:53:69:17:c6:22:32:
                    68:f4:53:62:47:0e:c2:ba:76:6b:86:d2:1d:da:a8:
                    7f:ed:47:41:fa:0a:27:81:2f:ab:44:d7:2b:2c:75:
                    df:5c:10:da:ca:63:46:62:f7:9b:37:c6:11:43:6e:
                    29:ca:88:51:7d:32:ac:77:56:5d:ff:0c:fd:2b:39:
                    1d:9f:51:71:be:d1:b0:87:61:53:1b:69:e4:70:69:
                    fb:6f:a8:f6:c9:69:3f:67:cf:5f:9f:7f:49:05:2a:
                    6e:6c:27:6d:8f:a1:61:8d:a0:68:15:75:68:38:c0:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:1C:63:7A:F6:88:A3:08:6F:E3:50:0A:26:63:F4:22:98:0B:0E
            X509v3 Authority Key Identifier:
                keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:8a:83:82:7c:b4:6a:1c:00:82:0e:e6:4d:b9:5f:bf:72:
         0c:07:c5:84:7c:c3:7e:fa:85:c0:24:9c:4e:14:60:c5:0f:6c:
         c7:e6:26:cb:c4:18:cb:8e:3d:bf:a1:5a:d9:17:04:59:d6:92:
         1f:4e:a2:89:d2:9a:89:75:f7:ff:e0:b5:9d:a9:5a:77:3e:ce:
         07:32:ec:86:fe:74:44:53:83:2d:cb:b0:01:37:31:87:b2:55:
         db:d4:dc:93:58:37:70:6b:02:5f:7e:e3:56:c7:2b:9d:a4:c3:
         cb:11:4d:1b:39:b6:3e:ba:f1:3d:0d:24:3b:cf:de:5e:e4:29:
         5f:dc:9a:0f:6f:ba:41:41:78:20:08:07:59:a0:e3:15:38:8f:
         34:52:5a:04:b3:e7:68:18:93:35:b2:4f:d1:fb:8e:63:22:83:
         e5:94:29:b0:89:eb:36:5a:16:ba:ec:5c:9d:5f:17:60:f5:63:
         06:73:95:7f:47:91:53:81:56:71:2f:88:3b:fe:32:28:02:06:
         9e:44:11:77:de:4b:df:f3:59:9d:f9:c4:9e:67:82:cb:f9:c9:
         1f:2a:f9:9f:de:c8:7c:7f:b9:2e:27:03:ad:49:98:cc:6e:69:
         ce:ac:2f:ca:15:f8:f8:d2:9f:3f:f3:e0:23:79:15:a1:db:95:
         b0:ea:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----