Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File:                     kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier:          dKUD/6Qppc4CZSGBfyghgZnsUVAKtK96WpJ1Con/wTw=
Subject key identifier:   AE:48:71:37:7F:A0:50:04:A2:CC:98:D8:38:B0:C3:42:BD:78:17:BF
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer:       /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial:       01962ECFD816B7B942CC364F7C551F71B588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
                          2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
                          3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 4TpqL7hcFYVEGlrHsEPJWTrt8iMqxK6Yq9YKkIhDkcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:16:b7:b9:42:cc:36:4f:7c:55:1f:71:b5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=ae4871377fa05004a2cc98d838b0c342bd7817bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:4e:36:db:62:d9:64:5a:59:4e:c2:fa:5d:
                    0f:0c:c3:eb:25:9f:36:0a:10:f0:bf:ab:d3:d4:f1:
                    fa:06:3e:89:63:55:36:fa:d8:6d:21:7a:29:eb:6e:
                    3d:c8:b9:17:d2:d6:6b:18:12:ab:30:8d:1b:7f:35:
                    49:53:79:72:0a:a6:00:18:f8:59:38:ab:da:31:59:
                    5d:40:3a:7a:b6:16:21:a6:74:49:30:1f:35:16:aa:
                    8f:3a:11:d6:fa:fa:6e:01:be:13:e2:4e:66:0d:3d:
                    e2:f6:dd:13:40:25:e9:ec:65:4a:6a:3f:90:b0:d1:
                    38:da:ab:22:41:35:b5:f2:c9:40:ae:dc:7b:11:a4:
                    ce:be:e6:bd:66:0b:72:05:d8:10:2d:90:df:ec:58:
                    cf:4a:5b:bc:26:c7:9b:03:76:30:0e:24:38:40:de:
                    51:0d:96:b7:09:38:07:98:4c:19:5f:bb:8a:02:55:
                    26:65:1d:e7:be:c5:57:eb:78:1a:24:3a:ef:69:ba:
                    9f:3b:a7:ee:9b:a9:50:eb:92:b5:1f:e9:18:29:ba:
                    50:3b:2b:d6:51:92:4b:0d:86:42:2a:a1:ad:90:9a:
                    83:5f:11:ee:96:49:9b:36:92:bd:62:91:cf:52:75:
                    61:b3:df:f6:49:97:a0:27:f8:86:42:ba:b4:fd:b1:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:71:37:7F:A0:50:04:A2:CC:98:D8:38:B0:C3:42:BD:78:17:BF
            X509v3 Authority Key Identifier:
                keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:93:a3:f6:e8:65:2a:fe:ab:85:31:9b:e2:8f:ef:74:9d:
         9d:3d:d6:31:27:2b:06:4b:c5:9b:66:c3:b3:e7:62:3e:2c:d4:
         71:34:ec:1b:7d:03:3d:5c:73:55:bc:ba:18:3e:99:73:9d:07:
         3a:8f:de:28:06:35:71:c1:22:3d:0d:f6:cf:ae:e3:84:17:54:
         25:da:17:30:f2:13:7e:a6:f7:d6:80:9c:44:44:65:e2:f8:0d:
         86:22:37:c1:29:3d:b7:33:45:7a:d3:98:f0:79:cf:a1:99:0b:
         f1:c4:b0:d4:b5:c1:6f:20:85:2e:7d:a4:ae:6a:4a:e8:f0:ab:
         16:2f:13:e6:69:0e:8b:7d:f8:e7:de:34:20:ee:cf:7d:dc:a4:
         4c:88:87:af:a3:4b:9d:20:a1:41:20:88:c1:74:c7:5e:dc:4a:
         df:bd:63:e8:27:c4:02:91:2b:bc:49:ef:ba:0e:d3:ba:8b:f2:
         bb:3e:57:fe:24:f9:8f:8f:c3:ea:a1:00:b6:ad:c9:1e:e4:5e:
         d5:ac:b8:06:e5:fd:1b:b2:4d:16:dc:87:b6:62:7b:b2:76:fe:
         5b:63:4c:31:46:f4:99:3d:df:a7:05:35:2f:d6:ea:ed:9a:02:
         f6:7a:68:7a:9b:a1:fc:e3:13:da:54:80:dd:5f:97:df:67:de:
         1c:a0:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----