Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File:                     khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier:          RQ7cWMCTjve8D4wrhnwYD8VzBeePgxR350tzdYixkts=
Subject key identifier:   22:E8:2F:9B:60:10:9E:A4:C3:C6:A5:73:98:AF:2F:E9:CD:D3:4F:B9
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer:       /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial:       01962F3D4FCEBFECECD18E6DE9F7B6B2403F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number:          0318
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (hash: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=)
                          2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: uveTAS+XoRedxy2CPNbvOkHWM2w4jOX2fN1X6g0eAeM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4f:ce:bf:ec:ec:d1:8e:6d:e9:f7:b6:b2:40:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=22e82f9b60109ea4c3c6a57398af2fe9cdd34fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:7e:9f:55:26:ed:49:a8:e4:de:bc:00:05:
                    d0:12:13:1c:0a:08:fd:d4:f2:93:ba:d4:e4:5f:8a:
                    c4:5b:aa:ca:99:0d:0f:aa:b5:d2:37:1c:e6:7b:eb:
                    35:3d:1f:1c:77:3e:cf:91:83:b0:b2:93:b1:4e:e9:
                    7d:fe:51:39:a4:06:59:8f:14:87:99:1e:97:cb:99:
                    0b:d6:44:30:3b:6d:c3:50:c2:fa:41:e4:1a:c1:4e:
                    fc:57:87:f0:d3:b9:78:aa:21:08:c8:ad:b4:e3:25:
                    1c:26:07:2f:20:22:08:eb:6c:31:75:2c:c8:35:28:
                    64:84:ea:95:36:eb:ef:3d:92:91:10:5a:62:93:35:
                    a8:b4:50:8b:f7:6e:23:00:d0:8d:0f:d9:8d:5d:28:
                    29:6c:b2:e2:97:b5:b7:00:51:ba:f4:f0:e9:dc:28:
                    c7:39:97:96:04:43:32:1d:c5:6f:cc:76:11:51:e6:
                    20:aa:a6:36:4a:4c:b0:0e:f2:53:f0:b8:cd:d4:b7:
                    56:6c:fe:d0:a1:bb:f2:e8:81:c3:b1:84:37:80:c4:
                    c0:43:fb:a4:89:42:bf:b2:b9:b5:e0:c3:67:08:48:
                    6b:40:68:4e:a5:28:ca:26:69:b7:d9:37:46:26:68:
                    51:a7:7f:a7:49:b1:6c:5f:8f:03:e0:ec:22:de:1a:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:2F:9B:60:10:9E:A4:C3:C6:A5:73:98:AF:2F:E9:CD:D3:4F:B9
            X509v3 Authority Key Identifier:
                keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:52:73:74:ee:32:7a:51:31:3f:db:7b:1c:5a:e0:32:5f:f3:
         43:b0:a7:66:73:a6:ae:ec:fd:ff:92:7a:bd:51:93:9b:51:f2:
         1d:4a:eb:d1:6b:30:5c:69:88:fb:c1:07:2a:db:0e:f2:c3:89:
         b3:7b:49:56:0e:40:08:ee:54:1e:1e:58:9e:bf:3d:3e:93:ff:
         a6:85:e2:49:6d:44:c1:7e:5e:d4:0a:86:9d:d3:64:50:55:1b:
         71:9c:5d:79:99:03:48:22:25:b2:b0:e8:42:07:cd:0c:87:f7:
         e9:18:c7:3a:7e:5c:2c:35:d7:22:fd:b8:87:33:fa:cd:fa:39:
         0f:5a:a7:cc:a6:95:20:b2:8c:12:18:e8:40:08:6f:02:5b:2b:
         d5:29:09:1e:50:49:85:8a:3a:45:d0:dd:dd:a0:9e:06:a1:1e:
         e6:94:a6:8c:bf:44:03:df:eb:b0:c6:dc:d9:2b:f0:03:f7:cc:
         66:5d:cd:95:cf:95:18:81:48:46:d4:3f:b4:2e:f1:96:6c:82:
         1b:e1:9d:cc:61:11:6f:8a:d9:18:d9:bd:8c:34:fa:d4:ad:3f:
         09:d1:87:d2:9b:61:62:11:58:e4:a4:32:4d:d6:1c:c4:53:c3:
         17:ce:41:53:a5:dc:27:7e:99:79:22:c5:96:23:33:a8:bc:ec:
         9d:f5:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----