Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File:                     khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier:          pEHK6S/sYpuqpaXJLe639GTIABxyaTieqyszPJk0Joo=
Subject key identifier:   1C:17:D9:B4:0D:FF:05:D9:4B:AB:2D:1A:9C:EE:27:22:35:07:CA:B0
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer:       /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial:       01962F3D93F86B565752F8A61FD9ADD82B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number:          11FD
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
                          2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: pXobZYtHuch1WKpyslIWWHmFmMmwNKYNPZ14I3sQGzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:93:f8:6b:56:57:52:f8:a6:1f:d9:ad:d8:2b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=1c17d9b40dff05d94bab2d1a9cee27223507cab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:25:b6:85:eb:54:32:25:37:1c:e3:fa:1c:
                    dc:27:2e:94:e5:31:0b:53:de:b5:f8:88:d2:3c:53:
                    53:8e:04:db:6d:36:47:72:b3:4b:e4:59:c4:1d:60:
                    87:c2:f3:42:87:d0:ee:61:2b:09:b6:0b:65:90:76:
                    f1:89:e1:c5:cb:68:7c:43:e0:65:d4:7f:0f:bd:f6:
                    b1:80:66:1d:c0:d0:f3:27:82:50:47:fc:82:1c:51:
                    3b:81:31:65:e5:25:10:9a:cf:fa:3f:b7:a9:ce:1c:
                    72:d5:1d:8a:7e:ba:4f:b8:f3:a3:c8:30:6f:17:91:
                    18:88:a0:d9:0d:0e:6f:26:a8:51:08:c2:15:31:20:
                    60:fb:25:da:87:a2:c4:96:6b:cf:a9:65:5f:62:f0:
                    c4:f9:f5:c1:14:41:46:59:96:d6:3e:bd:46:ee:6e:
                    5d:93:b1:c4:56:1c:80:c9:8c:6d:83:75:4a:0e:fa:
                    47:75:a0:35:9c:c3:0c:01:95:95:67:1d:28:a8:b7:
                    e0:2f:3e:dc:76:a3:30:b1:93:5d:f8:20:f0:56:d6:
                    20:33:34:05:0b:6e:c1:85:44:21:cd:ab:db:f3:81:
                    51:2f:c7:00:6d:b0:b4:37:4a:79:48:62:74:21:a5:
                    87:27:bb:04:34:5d:7f:bf:0a:a9:53:61:2a:b2:14:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:D9:B4:0D:FF:05:D9:4B:AB:2D:1A:9C:EE:27:22:35:07:CA:B0
            X509v3 Authority Key Identifier:
                keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:33:b1:61:8a:c0:ef:3a:bf:b4:aa:e7:50:1f:90:9a:86:63:
         47:35:9e:c8:2e:f1:0a:a5:9b:43:44:0d:58:a6:55:78:09:27:
         d1:09:e4:d7:ed:28:c4:9d:d1:86:e7:b8:a9:69:4e:84:29:58:
         ce:ef:a5:6b:e6:49:fd:8b:5f:2f:e0:5a:e4:f7:15:4a:a3:31:
         b3:76:2d:23:47:b1:1f:bd:e6:f0:0a:43:14:03:af:a3:df:bf:
         ca:81:1a:2c:6b:1e:51:44:23:ed:23:7c:6a:21:cb:ae:0a:5c:
         85:38:e4:65:76:c2:90:35:34:af:5f:22:33:d6:fb:78:26:43:
         65:a9:04:dd:98:a6:30:c8:c2:f3:4e:7a:7c:ff:bc:0d:46:80:
         9f:fe:2c:d2:13:2c:1c:7d:f2:30:83:f1:50:81:10:c6:d8:6a:
         16:63:08:44:8d:d1:c5:ec:ee:74:6f:51:56:25:c8:92:16:87:
         ba:5e:d3:43:9b:9c:8a:40:60:47:ca:c6:ae:60:01:0e:ef:0a:
         95:c1:a9:da:f9:27:e4:c8:70:29:85:19:82:da:56:ef:c5:54:
         82:52:10:d0:4f:51:f2:46:00:c5:bb:eb:c1:82:4a:0b:e9:42:
         90:f8:15:85:1d:f3:5b:b9:96:8a:1d:06:e0:e3:bc:cb:17:c9:
         94:d2:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----