Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File:                     KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier:          9U2ILA27tpy2u3vcv53aZzWKn0flL9O5VTEMnwPRgS8=
Subject key identifier:   9C:D9:57:C9:C7:56:CC:B6:3B:CE:E7:87:4D:22:B3:AE:A3:A9:5A:F6
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer:       /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial:       01962F7424764FB4E89AE53EF54CE7A74F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number:          122A
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: 5r4roNSh8TWW8XLP5gLpTUYEtC8.roa (hash: AktxI+V17na/V+Hz9k9ha+hVm279Tijdqa0CvwmI/7Q=)
                          2: Gxhnb8KOTrVvxDF8yuKOv2GjqtU.roa (hash: QO/QE2IRS/pPOvcN+3PpcsYmJwErYvPF742Zst4rEP8=)
                          3: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: ttLbTztSYtockl8NsYSRr+s61nR2PP8saFvFCQYa5Q8=)
                          4: TtvNTrhsW3wjOkk9eOHVRXZxsEg.roa (hash: gPmUeUcfbob5JNxYnTxCOkrudyCPlteleGt+PSj2/00=)
                          5: ekdDszvqGt_eJ_hGO_xIWYzbzAA.roa (hash: zqr+o3bWODGGGIrhIMHHh91Y/JEASXYkOBODwzmfRz8=)
                          6: iIQaeGWo37d4w_fiU_R29carNk8.roa (hash: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:24:76:4f:b4:e8:9a:e5:3e:f5:4c:e7:a7:4f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=9cd957c9c756ccb63bcee7874d22b3aea3a95af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:08:3c:e9:d3:b4:8c:cc:33:da:07:6f:88:
                    16:be:cf:55:3e:f8:71:91:49:c6:10:be:4f:d1:bc:
                    40:82:5a:80:95:a5:5c:74:fa:50:88:63:a3:7a:46:
                    d6:18:23:84:ad:c1:57:97:6b:83:d4:2b:d9:c5:46:
                    4d:76:7f:05:f6:4d:10:9f:9b:19:88:b3:09:d4:4d:
                    56:31:3a:ec:54:a6:f3:b7:73:6a:6c:4c:00:d9:5c:
                    3b:e4:9f:dc:96:16:e2:04:3b:4f:11:b7:7a:00:89:
                    65:40:e4:0b:06:82:14:a8:38:d1:c0:1d:ab:f8:06:
                    bf:60:ce:76:c4:b3:04:e0:72:53:6a:67:ee:c0:a9:
                    42:fb:17:6c:d0:b8:52:6b:b1:d9:c3:d1:f1:07:b3:
                    2e:7a:11:fc:b3:ff:80:08:e6:aa:b1:0f:38:03:ae:
                    e7:93:f7:23:bc:31:ea:29:02:50:c4:82:fd:95:e2:
                    dc:59:02:ec:7e:fb:be:e7:95:01:5b:f1:29:ed:06:
                    ab:e7:50:ca:45:84:15:4b:a4:6d:e6:16:22:37:8e:
                    e5:37:96:ad:de:96:e2:f8:74:27:28:cc:33:5a:79:
                    c0:22:6e:8a:b0:a3:7c:97:7a:a0:12:dc:2e:c7:68:
                    3f:9e:9d:92:58:0a:37:c3:4d:63:28:c3:24:e1:44:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D9:57:C9:C7:56:CC:B6:3B:CE:E7:87:4D:22:B3:AE:A3:A9:5A:F6
            X509v3 Authority Key Identifier:
                keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:99:87:db:7d:f3:4a:bd:63:d8:5f:6f:3b:3a:c8:46:3a:
         11:37:bd:14:ba:07:11:44:af:01:22:30:a2:dc:a9:f6:40:32:
         73:5e:a7:b1:66:60:bd:c2:47:13:6b:c3:ad:6f:97:e9:ed:c4:
         9f:47:fa:3e:14:c9:b4:67:6e:17:39:f6:7d:40:05:69:a3:fc:
         a5:8d:15:f0:f7:26:c2:97:d6:fd:b8:72:8e:1f:c3:b1:67:cc:
         05:00:32:b2:1c:33:be:9d:0d:76:8f:69:d6:8e:b7:6f:e9:06:
         7a:2c:3b:31:6d:f7:fe:78:c9:df:f4:f1:42:1d:41:27:7d:0d:
         8d:c3:0b:43:7f:e5:94:0f:97:21:74:31:a6:bf:10:7d:d0:38:
         f8:7a:ac:b4:83:4e:b9:58:4e:e3:0d:cc:46:a9:70:a7:08:dc:
         f0:62:32:59:f3:77:5d:26:c3:0d:78:3e:9b:c1:b0:27:95:27:
         06:ea:38:6b:82:3d:ee:c6:27:ff:2d:36:b1:f5:9e:55:c5:d6:
         39:e7:80:f0:b4:85:bc:c3:d1:9c:0a:8d:63:01:4d:15:1b:f4:
         d3:fd:4d:8f:62:04:0d:78:fe:43:50:15:06:4e:97:30:51:5e:
         3b:94:bc:6a:f1:d5:b3:04:30:ba:a4:bb:6e:49:e4:a9:6b:13:
         ea:be:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----