Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File:                     kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier:          QZQpLsAp9/WyQ1YNMdHkEcMFWdcgC6EukNN5rGepr4I=
Subject key identifier:   89:97:F6:74:50:39:81:CE:C5:DE:75:90:13:70:26:0B:79:30:EA:13
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer:       /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial:       01962E9910DC289294FC3044210261524CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number:          07F5
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: 8uCLO1htJMBUWgwM4rYkQdz7bXIZmQgJGDFwxSBtc0k=)
                          2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:dc:28:92:94:fc:30:44:21:02:61:52:4c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=8997f674503981cec5de75901370260b7930ea13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:f1:ab:91:86:d8:82:ae:d5:f6:78:8e:f0:
                    16:b6:c3:48:04:82:75:c4:08:75:52:69:df:58:a0:
                    07:12:72:4b:cc:4c:47:1f:3e:dc:28:e8:2d:3c:0e:
                    a8:b6:67:46:ec:04:97:f2:73:27:62:75:b3:31:d1:
                    83:2e:20:65:7c:1b:18:74:44:cb:6f:09:76:2b:0f:
                    9a:55:66:33:db:53:06:36:a4:ce:2f:47:00:72:a2:
                    fc:df:98:32:5a:3d:74:52:22:d5:2b:06:27:e3:26:
                    89:e2:39:b3:df:92:c8:d3:7f:fa:5a:10:a5:b2:32:
                    33:b0:5b:ec:87:fa:4a:98:8b:dd:a6:7f:e3:95:5d:
                    03:39:01:57:43:1a:dc:4f:75:61:95:22:77:22:70:
                    79:9f:71:6e:21:7e:b6:ab:0e:78:f3:f9:64:23:bd:
                    e3:de:6a:5f:c7:46:d8:e7:7d:b3:cb:2c:48:92:87:
                    f1:6d:1e:29:08:69:ef:8c:89:a3:46:4f:23:08:e2:
                    00:1a:16:45:16:a9:73:7c:73:85:b6:b6:89:12:eb:
                    b7:a2:ca:cb:f6:82:df:2d:50:44:0c:80:37:28:07:
                    4c:9e:37:d9:19:20:ea:04:61:41:8b:18:ea:04:e3:
                    19:ce:a8:0f:35:f7:9d:1c:a2:82:14:52:5a:08:53:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:F6:74:50:39:81:CE:C5:DE:75:90:13:70:26:0B:79:30:EA:13
            X509v3 Authority Key Identifier:
                keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:de:f0:ef:29:6e:6d:01:a3:10:55:35:78:d1:e4:f4:07:56:
         ed:b9:e1:cb:26:d4:0f:ef:fe:fa:90:27:8d:74:f6:38:92:64:
         5f:fa:96:76:c2:08:9a:8f:a6:30:ba:d9:72:9d:d8:6a:76:b9:
         17:24:f2:f2:63:53:ec:46:97:c9:07:ea:5e:d1:b9:e7:4f:3e:
         6b:65:9d:97:1a:af:9d:f1:86:a4:1e:a8:16:bc:a3:97:26:c9:
         ca:03:36:80:bb:89:f6:71:24:4d:b1:3c:b5:f7:5e:e7:c5:b7:
         c1:a1:1e:20:08:cc:54:25:d8:d0:e1:a3:3e:4f:c4:41:0f:d0:
         37:60:40:2e:e6:ff:f2:34:2e:33:43:a5:57:89:c5:58:00:a0:
         67:4a:06:2f:7e:f7:e6:b9:90:ff:6f:6c:0d:6c:c7:5b:ce:aa:
         15:5f:15:27:26:25:4f:d6:3f:e1:a0:08:72:d0:ce:e3:86:e3:
         ec:88:6a:fc:db:a2:01:a6:61:f2:17:17:48:34:a2:cf:ec:22:
         42:30:06:22:ea:43:08:cd:08:d0:d2:5d:34:d8:f6:8f:f8:57:
         82:2c:97:fc:1e:bf:57:95:75:45:6e:23:92:80:a5:e8:e4:29:
         14:69:9a:48:f0:be:c4:fa:92:2a:2d:aa:a8:95:fb:da:e6:df:
         7d:de:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----