Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
File:                     kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json)
Hash identifier:          Sr5WkQX84ej3VqKs2FqW/cDR1geglnIJWBpC9aTamCY=
Subject key identifier:   6A:40:B5:E6:64:0D:4A:AF:87:F2:EA:43:DF:D5:45:77:EE:4D:C9:02
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Certificate issuer:       /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial:       01962FAB1BFD25AAA3046E1A016F19831C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:05 +0000
Files and hashes:         1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=)
                          2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=)
                          3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=)
                          4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=)
                          5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=)
                          6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=)
                          7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=)
                          8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=)
                          9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: 0eVStns5c5zBNstfI3vG5rMB5Zesebu3/eLOe/Rfg0w=)
                          10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=)
                          11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1b:fd:25:aa:a3:04:6e:1a:01:6f:19:83:1c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
        Validity
            Not Before: Apr 13 15:01:05 2025 GMT
            Not After : Apr 14 15:01:05 2025 GMT
        Subject: CN=6a40b5e6640d4aaf87f2ea43dfd54577ee4dc902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:12:47:e2:2d:90:8a:fe:e7:c8:d2:72:41:
                    a5:87:b7:9f:5f:c1:f2:70:7b:b2:99:de:5a:a0:81:
                    c1:8b:7f:a3:af:67:0f:ef:44:ca:0b:b8:a1:10:fc:
                    df:cc:07:65:29:aa:3e:70:3b:18:86:cd:34:2f:01:
                    0b:10:8a:a2:48:95:17:5f:64:56:0f:c4:c5:ea:2a:
                    1d:10:e7:50:a8:a2:df:cf:29:5b:3e:ef:4f:be:65:
                    34:a5:5e:73:1f:12:e6:99:d3:b4:04:5a:75:58:45:
                    a6:fc:15:8c:7a:43:a2:71:9c:21:f8:b6:ae:25:e5:
                    8f:90:d7:9a:f2:47:88:63:89:24:b9:5b:6d:34:c5:
                    6c:96:f7:53:a2:54:80:d5:c1:11:23:87:e0:73:0d:
                    fc:51:f8:9c:09:32:78:f1:71:ab:86:ff:a6:46:66:
                    6e:ff:93:91:2f:ad:13:c0:fc:01:38:94:a8:c1:0b:
                    57:c9:55:4c:74:c5:ad:17:c1:82:c2:22:38:eb:93:
                    46:d2:30:77:00:5c:5d:07:4e:6c:24:20:04:3c:37:
                    2c:3b:64:25:f8:90:99:32:be:d3:1e:90:20:5e:7b:
                    7d:5a:3e:b4:9e:88:d9:c4:06:44:f7:87:5f:d5:35:
                    83:af:91:47:92:1b:be:41:2d:d4:35:97:76:c7:3c:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:B5:E6:64:0D:4A:AF:87:F2:EA:43:DF:D5:45:77:EE:4D:C9:02
            X509v3 Authority Key Identifier:
                keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:25:8b:f4:ec:64:82:99:79:75:31:bc:f0:6d:36:0a:2a:68:
         c1:b1:2a:ef:a1:d3:ef:1c:1f:50:65:b0:8a:cd:dc:2f:4a:d6:
         b8:7d:8e:be:7c:56:85:a2:5d:20:cb:af:0f:ae:9a:cb:66:0b:
         58:84:6c:0c:45:fa:1d:b5:19:b8:11:53:71:71:82:54:13:d8:
         45:4b:a5:ae:01:5f:fa:33:4f:79:57:82:99:f6:85:28:3c:f4:
         5e:cb:f3:fc:13:14:4f:5d:0c:de:dc:09:4b:4b:4d:88:90:d9:
         12:a7:17:fd:fb:91:de:52:1d:38:e5:a2:2f:1a:f4:14:f2:4a:
         6b:23:94:b8:b5:d1:3b:39:18:8c:ee:d6:af:36:a0:4b:d3:be:
         1f:65:6d:56:69:14:0f:92:0e:08:c4:ac:24:bd:dc:26:e7:ca:
         17:91:6c:84:35:fc:fc:85:2b:76:ad:f1:71:45:88:7d:27:b2:
         42:42:91:6c:c1:8e:77:91:2c:e5:18:1d:05:c0:94:a2:e9:c2:
         96:07:5b:f3:a5:7a:b7:38:80:da:2a:21:06:85:4b:20:b3:54:
         25:f4:71:4e:7b:02:73:38:db:1e:53:9b:c3:60:cd:92:2e:b2:
         b4:14:26:fe:04:92:e7:68:b1:39:d3:0a:8d:b1:04:40:22:b5:
         a2:22:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----