Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File:                     kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier:          newmgXEWrJ/PungpKKuAYQ/1rOmWatkdmqlpErTPZMU=
Subject key identifier:   73:48:6A:DE:5C:16:86:41:10:53:F2:F4:52:57:A8:E6:8A:F8:23:F4
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer:       /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial:       01962F066DE78A764956A617D8D17E081B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number:          03B7
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
                          2: hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa (hash: sfqipOVEI136CQV9RrCQ/2MEEAOWtOAMvL1rCoXPDGQ=)
                          3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: EC4jImIXQ4O9OU43UPYHaEkkS9BISM3AJTuHmL9O2bU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:e7:8a:76:49:56:a6:17:d8:d1:7e:08:1b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=73486ade5c1686411053f2f45257a8e68af823f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:7a:1d:3b:48:66:62:43:bf:9e:c1:08:71:
                    08:4d:2d:fd:3c:bf:d0:7b:46:47:4d:a1:7b:50:3a:
                    62:00:c5:ef:98:35:9d:1e:d6:18:31:c3:1e:07:b1:
                    3c:d5:40:ff:f5:4e:45:2b:c6:20:16:9d:87:ab:ba:
                    93:9a:91:ee:70:e1:26:62:9f:1a:25:29:53:63:98:
                    58:6a:b3:d6:11:05:58:e3:79:7e:f6:d4:4a:9c:38:
                    c9:c1:f5:30:c0:b2:44:3a:98:21:90:9e:8b:8f:fb:
                    54:47:14:f6:09:98:fc:38:08:0e:98:d1:be:b9:78:
                    8a:f7:78:7e:3a:38:86:e5:ff:e0:5e:e9:92:11:57:
                    22:59:55:85:24:bd:6f:15:d9:75:9f:82:51:d2:0e:
                    d6:04:aa:c5:20:78:c2:7a:dd:a5:92:7e:cd:5e:fd:
                    04:17:7e:a9:44:b6:ef:c7:18:5f:4d:21:78:d5:e4:
                    2c:53:4e:a4:44:2e:2c:fe:55:00:d5:f9:a4:4a:0a:
                    93:e6:d8:38:b6:24:15:fe:20:be:b5:31:c4:ee:da:
                    ae:05:a2:e3:17:3e:f9:d4:22:54:08:eb:12:be:6f:
                    28:3c:35:49:b4:91:f9:50:b6:3d:91:ba:78:f4:e8:
                    b3:e6:17:b7:cc:49:ec:a8:dd:d1:dd:ff:6e:65:b2:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:6A:DE:5C:16:86:41:10:53:F2:F4:52:57:A8:E6:8A:F8:23:F4
            X509v3 Authority Key Identifier:
                keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a3:5f:65:73:bc:80:39:4c:4d:6a:1a:dc:90:0c:a3:6b:33:
         1e:a2:56:ae:84:bb:3d:a9:ed:24:ee:a6:71:2f:7b:56:cf:8c:
         09:e5:ac:84:43:be:2e:ad:31:cf:a5:b5:d2:05:05:51:ad:19:
         ab:3b:d9:66:3e:ab:b6:81:a4:9f:5e:5f:b7:f8:5d:bf:04:aa:
         72:24:21:82:00:11:15:6d:a7:47:0a:fb:55:b2:ed:93:7e:19:
         3c:9c:26:6f:d1:57:80:00:00:40:a4:46:fd:39:39:e9:90:e0:
         61:30:b3:59:d1:f9:0a:b5:90:e7:bf:3a:75:83:84:88:1f:1a:
         80:2c:32:68:cc:2c:c1:8c:20:0c:5d:d3:ba:47:7f:20:68:d3:
         fb:f3:9b:bc:ee:28:6b:a9:43:eb:ea:83:e4:12:65:1c:fd:39:
         0f:bb:1b:d3:25:80:ea:e7:9f:c5:50:ea:cc:9b:46:cc:aa:b5:
         f3:9d:78:70:16:3a:c1:47:7b:ea:08:0a:c4:25:37:3e:57:5e:
         d0:46:91:a9:f0:fc:c6:b0:fb:a3:12:20:06:a8:65:f5:4a:70:
         f8:2c:34:be:a6:d6:04:33:70:d2:75:05:42:22:70:6c:39:d7:
         75:64:88:1e:fb:e0:7d:b2:33:09:64:5e:cf:34:ca:9b:0b:22:
         46:16:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----