Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File:                     ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier:          Rtj8yzdVe7hOLy+s7d2/49cXZnXSUPSQa32LNbeKyts=
Subject key identifier:   0F:8A:C2:F2:7E:15:61:2F:42:E6:64:FA:0B:B2:57:19:4B:64:57:AA
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer:       /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial:       01962F068993C814401916355E0ACDB3EEC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number:          07DF
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: FCAVJY9fWYnUnJFFGrm9T+DcEdEugsYBvyOjPiPRn8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:93:c8:14:40:19:16:35:5e:0a:cd:b3:ee:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=0f8ac2f27e15612f42e664fa0bb257194b6457aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:fa:d2:58:06:88:b4:8f:7c:96:bd:b3:e2:
                    07:e0:75:91:7b:75:12:a8:43:a7:9f:28:2e:58:60:
                    23:40:9f:a2:82:ac:da:bf:b5:22:e4:42:e9:11:be:
                    12:a0:8d:3b:6e:bf:bc:2a:44:34:a0:b6:b9:91:51:
                    a5:c2:84:1a:05:4c:9a:3d:71:5b:d4:34:6a:d3:e6:
                    46:ff:4a:65:ca:eb:ec:cb:1c:da:6c:01:76:39:ed:
                    3c:d5:f5:34:06:47:c8:08:6f:a3:9d:28:5d:62:07:
                    11:13:41:61:50:11:92:30:1e:f3:e8:f9:d5:82:1e:
                    ca:ad:a1:50:5c:1b:35:65:e9:87:a7:5e:fd:b3:9a:
                    87:65:23:52:3e:e1:97:68:02:29:a2:1e:77:f9:1d:
                    82:8f:a2:44:6f:e0:3f:f2:66:39:9d:25:4f:52:90:
                    d0:ec:47:88:2f:b1:73:b9:79:bc:2f:78:78:be:74:
                    cf:c8:64:10:30:c5:b4:91:81:cf:c0:70:8d:17:5d:
                    69:40:c9:62:bf:17:6a:57:d3:51:b7:27:34:72:a3:
                    0a:b5:69:83:48:da:59:a4:6c:0e:9f:67:80:49:a0:
                    4a:37:05:13:8f:51:f9:51:45:12:89:4b:94:a1:df:
                    da:34:a0:d3:45:2c:dc:af:fb:f3:95:e4:9d:d9:51:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:C2:F2:7E:15:61:2F:42:E6:64:FA:0B:B2:57:19:4B:64:57:AA
            X509v3 Authority Key Identifier:
                keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:04:b9:84:9d:d5:a9:80:74:d4:be:15:b8:5d:9d:65:c8:
         25:5c:c3:2e:42:f4:7e:20:5b:fa:4e:85:64:cb:87:e6:d5:0d:
         2f:45:88:f2:45:79:b4:f2:12:de:93:8b:af:35:0e:56:6d:c7:
         f9:73:23:2f:34:19:24:60:1b:7c:73:30:d2:a6:d4:63:cf:4a:
         94:15:f0:62:be:52:e3:03:7c:0f:5d:93:04:a9:dc:0e:99:61:
         13:ad:be:d8:48:12:a7:37:3b:1d:e8:ce:8c:99:49:ff:1c:12:
         ff:96:29:7b:7f:94:98:9e:75:1f:e8:e0:10:b1:0c:85:d5:19:
         77:b7:42:40:88:c6:07:dd:21:14:12:41:b5:95:40:39:e1:2e:
         de:18:81:8b:7a:8a:ee:eb:14:d5:f5:9f:4a:9d:42:b9:1a:ea:
         80:dc:59:0b:93:0f:37:55:b3:f9:96:19:eb:3f:a6:23:07:4a:
         6c:1a:6b:6c:26:b6:ac:0e:13:63:8b:aa:84:c7:c4:46:36:7e:
         7c:98:5e:fe:7f:29:8e:f6:dc:75:5c:35:10:2b:8c:19:e5:94:
         3b:a5:86:39:0f:66:96:81:18:3f:2b:73:d7:ba:41:11:c3:95:
         28:4e:16:cb:c5:4a:47:7a:db:9e:f0:84:85:93:f3:3a:8b:b9:
         ea:cb:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----