Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File:                     KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier:          Y3hUdXCgxnd1tmBHjkyjSnveH7EO5Qp2HrLX4OAd0as=
Subject key identifier:   81:65:40:06:95:06:03:9E:42:FB:0F:01:13:A3:9E:33:B5:8E:0A:0B
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer:       /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial:       01962E61F34EA8749BBBAD00EDB85F4A77C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number:          0989
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
                          2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: aqX7EBBxA/hiYzZ2aQw3kSL6n9FvpCx8fAfpHNrMiCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:4e:a8:74:9b:bb:ad:00:ed:b8:5f:4a:77:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=816540069506039e42fb0f0113a39e33b58e0a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c9:f6:46:19:50:32:cb:02:37:7b:a7:df:76:
                    77:ce:e4:e9:7b:91:f1:9f:83:2e:ea:db:81:a5:2a:
                    55:ba:a5:f1:a6:c7:c2:79:27:c1:46:d0:47:1b:f2:
                    d5:9d:4d:1a:7e:e2:44:1f:bf:9c:5e:6a:44:80:41:
                    df:4d:06:44:d5:b0:1b:bb:84:11:9a:32:87:3e:d1:
                    4b:5d:52:bc:4b:eb:bd:8d:7c:7e:54:be:83:8e:42:
                    50:51:a5:46:60:78:cf:92:dc:e0:4d:e7:74:b3:39:
                    1d:81:cb:9e:0f:f2:c0:08:3f:97:60:e7:05:57:1b:
                    ea:eb:c7:0a:7c:8a:9a:6e:14:1e:17:4f:dc:52:8f:
                    0b:70:45:f4:26:fa:99:87:b9:4a:2c:4e:47:86:0b:
                    f1:c5:4e:c1:54:6f:79:71:1e:92:5c:6a:06:12:ab:
                    f9:84:d7:a5:85:f6:b4:44:ea:5a:61:fc:b4:4e:4c:
                    20:05:a7:12:de:94:ce:30:77:ec:3b:56:b8:d2:68:
                    96:fc:fe:5d:2a:b0:33:49:23:bc:cb:66:a9:e7:90:
                    c8:88:7d:51:6d:a0:fb:e3:d7:f9:8c:c2:7b:e3:97:
                    63:aa:8e:00:05:49:04:0d:ec:94:c8:56:d1:31:03:
                    00:53:98:28:5e:fb:46:ec:fa:b2:af:2c:3a:71:94:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:65:40:06:95:06:03:9E:42:FB:0F:01:13:A3:9E:33:B5:8E:0A:0B
            X509v3 Authority Key Identifier:
                keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f0:fb:d7:23:21:91:df:77:4d:82:23:24:de:d6:1d:9e:7c:
         31:f5:91:72:0f:f9:5e:b3:07:3c:6c:f3:36:43:fe:f8:ec:d3:
         32:cd:46:da:ff:9c:3b:62:d0:f0:c0:ba:3a:59:93:98:10:e3:
         6b:5e:ed:03:d2:2a:13:35:bf:5d:0a:7c:18:0a:77:1f:4a:9a:
         49:1c:e6:76:b0:29:0a:01:ed:7a:ae:00:07:ec:a8:7f:d1:e7:
         99:c6:51:f8:d0:0a:2b:70:4c:6d:a3:35:33:fd:c8:49:a9:c4:
         c5:a8:b9:54:29:50:cc:1a:ee:41:a4:91:00:2d:9a:f4:23:77:
         b3:5b:54:a8:83:d4:94:0c:40:14:02:7e:6b:48:e7:43:11:73:
         36:31:0e:09:91:64:3f:0d:af:b1:26:dd:4c:1e:fb:79:92:d9:
         c7:00:21:93:c4:d3:12:b9:7a:70:04:29:a3:34:75:30:50:d9:
         85:b4:fb:62:d7:55:bf:5b:9f:0c:77:c4:67:7e:4a:b2:30:aa:
         cb:4f:fb:e4:2f:3a:5f:fd:f7:16:b8:35:a1:c7:95:81:ea:59:
         3a:f5:84:1c:4e:09:15:e4:4d:77:b2:6c:69:69:c3:34:d7:4c:
         da:d5:31:fa:27:c5:a3:b2:78:15:64:6d:e4:8a:0a:99:95:50:
         26:0c:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----