Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft
File:                     KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft (raw, json)
Hash identifier:          1RHSu+U+0uEL8irKTEdR9Gpu7tbNhjXT5QHG1zbQ8ZM=
Subject key identifier:   1B:A2:FC:EA:C3:26:B1:9C:4E:86:7C:51:B6:50:D1:C0:0F:81:F0:1C
Authority key identifier: 29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A
Certificate issuer:       /CN=29337fd8db864bf3ebfcbe799d8af9a230449b1a
Certificate serial:       0187095D8662650EACA53B241C7849DA8892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTN_2NuGS_Pr_L55nYr5ojBEmxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft
Manifest number:          065A
Signing time:             Wed 22 Mar 2023 12:48:56 +0000
Manifest this update:     Wed 22 Mar 2023 12:48:56 +0000
Manifest next update:     Thu 23 Mar 2023 12:48:56 +0000
Files and hashes:         1: KTN_2NuGS_Pr_L55nYr5ojBEmxo.crl (hash: A4orgrjcdhFajK06q4SVO4Wgue4Epu0R7rkH5buo61Y=)
                          2: NMiMFjicC1uFUHAE44WLIVYmN7E.roa (hash: x/ZBuq17rsoYgbBD6C0XvqSH6tCLX5fF4ahzee25GMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:5d:86:62:65:0e:ac:a5:3b:24:1c:78:49:da:88:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29337fd8db864bf3ebfcbe799d8af9a230449b1a
        Validity
            Not Before: Mar 22 12:48:56 2023 GMT
            Not After : Mar 23 12:48:56 2023 GMT
        Subject: CN=1ba2fceac326b19c4e867c51b650d1c00f81f01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:bc:42:b2:79:01:03:b8:30:6b:08:2c:87:
                    ef:5b:16:12:b4:fe:e4:2c:13:49:cd:36:22:8b:bb:
                    73:de:17:a0:52:7a:49:56:49:68:a6:01:fd:24:24:
                    06:72:05:e1:6a:c2:3c:eb:29:71:f5:98:c1:63:2d:
                    c7:63:53:07:07:85:ac:24:6e:c1:d6:21:e6:86:97:
                    b3:af:24:e9:c5:9f:e7:af:bb:c4:26:4c:0c:17:67:
                    16:c0:b6:09:1b:aa:0a:25:4a:5f:56:09:d0:4a:02:
                    bf:f1:9b:d3:01:f0:43:31:1e:30:c2:4d:56:18:63:
                    75:f3:37:7f:cc:e5:0c:1c:98:ed:15:40:f7:b2:41:
                    f9:ff:26:f6:ad:16:fe:5e:98:55:b9:e5:81:0c:a9:
                    03:46:d3:df:a9:94:3e:85:65:38:38:37:39:e3:0f:
                    29:8a:5f:5e:0a:01:ce:60:8a:ea:46:29:e4:66:db:
                    13:9e:84:54:cb:f9:aa:9c:af:8f:69:cb:5e:23:e8:
                    65:fd:ca:52:dc:6e:79:1a:f3:fc:2d:31:d1:75:64:
                    d7:5b:fb:50:e5:ea:7b:2f:db:6e:6e:79:35:89:2e:
                    3d:d1:37:2d:4a:41:2f:92:b4:be:e1:c3:6e:d6:d9:
                    be:dd:8d:b9:85:b4:29:ed:51:4d:cf:78:d6:32:ed:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:FC:EA:C3:26:B1:9C:4E:86:7C:51:B6:50:D1:C0:0F:81:F0:1C
            X509v3 Authority Key Identifier:
                keyid:29:33:7F:D8:DB:86:4B:F3:EB:FC:BE:79:9D:8A:F9:A2:30:44:9B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTN_2NuGS_Pr_L55nYr5ojBEmxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/09d340-f3ea-4aef-b7d2-b1276e45c788/1/KTN_2NuGS_Pr_L55nYr5ojBEmxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:23:65:4a:78:28:e0:ad:6a:c7:5f:d5:a1:7d:37:1f:31:1d:
         ad:77:5a:b7:bb:da:ce:e7:aa:90:f8:c6:65:ba:7d:91:ef:3a:
         d9:0f:92:f4:46:b4:e6:0d:cc:2e:90:01:28:71:30:b3:33:44:
         f8:e2:08:5d:fd:cb:14:9f:2c:22:b5:44:7c:91:c0:8d:95:32:
         60:fa:1f:26:20:5e:22:99:d8:5d:ce:c6:56:65:e1:c2:8c:d7:
         fc:8b:76:33:e5:b6:31:91:f2:56:b6:b9:8d:fc:90:ef:fd:f6:
         51:a9:82:7b:1e:c0:98:8c:40:0d:db:6c:b4:b3:4a:0c:d6:86:
         32:f9:31:db:62:e5:87:27:a6:49:fd:d1:d5:73:6a:a3:28:8b:
         2b:7b:3f:4a:a8:4d:d6:78:7f:2d:82:be:3e:7b:cf:2c:da:31:
         b7:c9:9b:20:11:62:16:01:0b:a2:5e:cc:e3:c8:16:f3:c7:3b:
         3f:1e:2c:59:ae:35:c4:94:bc:5d:70:b3:08:f9:2a:11:d8:42:
         5e:7d:54:da:38:b2:b3:7c:48:fb:9e:25:c1:26:08:6c:c0:0d:
         74:f9:50:43:df:34:cb:a2:97:c9:ec:5d:e9:5b:99:44:34:e3:
         8f:31:fa:90:09:8c:30:e4:28:17:06:72:6c:1f:11:00:a3:6c:
         a9:7a:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----