Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File:                     kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier:          EapSLeAc4AMWFfCOcb4CfmCBzqZ93gsXb3xZnwF5YTQ=
Subject key identifier:   C0:7B:23:67:77:BD:B5:20:D7:8F:4D:B2:1E:2E:E1:39:DC:00:AE:EC
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer:       /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial:       01962E61F71B7EFB77B6CCA352EBAC58CDA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number:          12A3
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (hash: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=)
                          2: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (hash: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=)
                          3: iRTljilS88fdbTnqXefNcD2KdQw.roa (hash: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=)
                          4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: oiKDC4OmtDtqLasJfh2T1GX3F72uVDYDaMmmMGjyc4I=)
                          5: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (hash: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:1b:7e:fb:77:b6:cc:a3:52:eb:ac:58:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=c07b236777bdb520d78f4db21e2ee139dc00aeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:38:1f:ea:c6:41:13:b3:ec:27:e1:47:ad:
                    a6:8a:39:64:44:8b:c1:0b:ec:79:2b:97:fe:d9:7b:
                    fc:3c:62:7a:ca:49:1b:59:d3:4f:02:ee:fa:55:39:
                    88:61:89:6d:ee:51:98:0e:cd:a0:7d:3d:e7:7d:13:
                    d1:1e:42:b1:90:47:41:05:18:d3:23:8c:80:8f:05:
                    09:14:60:3a:88:a0:42:d2:05:b3:c0:8d:db:e6:cd:
                    02:b5:6d:5b:b3:a1:09:77:08:15:1d:2a:cc:d7:5b:
                    a3:c2:4c:c7:bb:37:6e:c9:15:0a:ec:06:3b:1d:a4:
                    f9:b0:a4:e4:8a:5a:b8:90:8a:5b:2e:59:b0:a6:ae:
                    a7:a1:15:91:45:33:e8:3d:b0:53:5e:7f:d9:9b:00:
                    ba:f3:af:7c:ff:6c:77:dd:50:cd:6e:1a:20:1b:f4:
                    3e:02:fc:a8:cd:b2:45:56:f5:73:42:5c:6a:0b:41:
                    d6:e8:73:38:89:1e:34:1d:59:ce:8c:35:c7:d1:ff:
                    7d:50:00:f9:c4:bc:fb:ae:58:09:f2:6e:49:46:62:
                    9a:3b:34:44:61:4e:d6:02:ae:b3:05:bc:d4:37:ea:
                    3b:67:16:da:13:53:30:21:b5:90:db:b9:61:6d:dd:
                    eb:1b:0c:53:c8:09:00:15:65:15:52:10:c8:ff:cb:
                    5b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:23:67:77:BD:B5:20:D7:8F:4D:B2:1E:2E:E1:39:DC:00:AE:EC
            X509v3 Authority Key Identifier:
                keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:f4:7b:25:55:d2:3d:2f:00:4a:3f:69:08:45:2f:b5:71:
         db:bd:74:aa:2f:08:c2:d0:cc:79:59:da:ae:86:20:93:8c:bf:
         17:bd:b5:5a:83:85:78:ca:45:2a:bb:52:95:3e:f8:de:1c:28:
         14:c0:8d:93:8e:f6:6c:45:ce:15:54:ad:fb:03:98:eb:d2:8f:
         3e:e3:55:d9:d6:5d:e9:8e:61:0b:3c:25:61:82:6d:92:6d:f9:
         68:84:13:ed:9d:78:da:35:ee:32:ff:5f:87:8b:c0:1a:ed:d3:
         be:59:6c:00:4e:ea:fa:0f:e3:18:36:9c:88:16:1c:0a:9a:d3:
         ad:3a:52:3a:89:d8:1d:9d:1c:0e:60:ef:eb:ae:e8:15:a7:61:
         62:e5:94:87:7e:fc:bc:aa:e2:7e:3d:3c:6b:72:22:cc:fb:cc:
         76:0e:36:fa:df:b7:08:25:8b:d8:6f:5d:00:56:e3:9c:de:b5:
         3f:b2:14:c7:f3:fc:18:cf:29:05:6c:d3:fb:5d:91:08:95:99:
         b6:f7:51:eb:d7:a5:fc:58:ca:da:f6:5f:10:19:be:9c:d5:b4:
         3f:4c:59:08:55:73:28:ac:a6:aa:69:29:dd:d1:99:77:96:2e:
         d6:08:8f:54:e0:2b:71:bd:ad:8f:a2:0d:8f:aa:41:8d:59:2d:
         ef:a8:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----