Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File:                     mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier:          5CpuC41TSZv2yvpjU2lk3eoZqkbakcJrnqBcYVuSF/I=
Subject key identifier:   8D:A8:F6:99:C5:BE:9F:6D:89:14:72:19:F9:D0:9B:D1:02:E2:6C:8D
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer:       /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial:       01962E9965D21B6B9CC60C3F046E55BC71B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number:          107E
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
                          2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: bi+xFZcUYgINtF1wmOv/8xMd3O/4coZJZDQeYMeH3GE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:d2:1b:6b:9c:c6:0c:3f:04:6e:55:bc:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=8da8f699c5be9f6d89147219f9d09bd102e26c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:e8:50:49:4f:6f:07:4b:51:e6:1e:1d:8d:
                    3d:2f:27:12:ac:bd:8a:19:85:f5:c0:35:ec:d5:65:
                    b1:70:08:0f:06:8a:59:d9:f4:4d:be:fc:38:26:78:
                    e6:ec:af:4e:46:35:da:98:d4:46:35:22:dc:c8:25:
                    13:8a:bc:dd:0d:e0:57:fb:c1:a0:2e:4b:8d:fe:8f:
                    39:7b:45:83:22:3f:07:ee:db:f3:49:c4:0c:4b:d0:
                    0f:cd:35:cd:1a:5b:1f:b1:4e:6c:fa:a4:5e:3e:a5:
                    84:ce:60:79:30:bf:a3:cd:7d:be:e2:b2:a3:b8:97:
                    d8:c7:c0:81:eb:24:5a:53:82:c3:28:22:40:0d:d8:
                    35:4f:e0:a6:ae:6c:c8:e2:30:fb:0d:22:61:90:de:
                    06:da:a1:99:9b:31:f4:f7:ce:b8:87:be:a6:6e:2b:
                    0f:92:05:28:65:fc:22:b6:9a:c7:5a:2a:b9:c1:ff:
                    4d:58:48:f4:c9:24:3c:3a:ed:83:fd:ee:32:ef:d8:
                    92:4a:7d:4d:8e:72:8d:0b:6e:01:c4:4d:1c:63:96:
                    15:da:2a:98:88:ac:4d:b8:5c:33:ff:c1:79:42:da:
                    d0:f3:11:9c:3c:32:f0:90:82:c0:2f:30:e8:ed:3b:
                    10:92:86:f4:f0:e6:8f:cc:9f:ab:c3:4a:e9:13:58:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A8:F6:99:C5:BE:9F:6D:89:14:72:19:F9:D0:9B:D1:02:E2:6C:8D
            X509v3 Authority Key Identifier:
                keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:e7:cd:82:a2:1b:df:d4:72:ce:bd:a7:d0:f9:6e:f9:1b:
         ff:c7:40:b1:cf:4d:93:1b:06:a9:b3:db:91:73:d2:0e:84:57:
         fd:e0:12:fd:50:8a:f0:82:e9:e8:8d:78:da:2d:58:cf:c7:9a:
         78:a6:eb:b0:ca:dd:d9:d0:d7:41:7a:64:7b:de:c5:58:b5:f5:
         98:c1:8b:1d:7f:88:c0:05:3a:40:bb:96:79:1d:bd:f6:4a:b9:
         4a:16:e3:8b:15:26:3f:e3:e5:27:ec:23:e8:eb:11:d6:a7:f4:
         a1:47:d8:9a:1d:2b:bb:38:c8:88:b4:27:08:02:b2:ec:f7:6a:
         3c:72:eb:15:6c:2b:bd:e8:76:92:a2:55:75:1b:76:47:5a:33:
         15:31:dd:5f:e7:38:cd:e0:53:5a:a3:46:d7:a4:e4:26:37:b8:
         77:ce:80:6d:af:d8:01:e6:ec:75:1e:61:ff:f2:bc:67:76:07:
         17:a4:18:9c:19:ca:33:27:18:af:ac:98:89:d8:d4:b4:e3:73:
         d5:f1:5e:60:3f:9d:ec:4e:42:24:c2:00:0e:19:19:c9:b7:c0:
         6a:7e:19:e2:79:11:0c:4c:3c:c6:16:0f:40:6a:d0:19:84:50:
         9f:12:7d:8a:d7:3c:4e:b8:e1:c5:a3:e7:0c:0e:ef:1b:db:76:
         3f:eb:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----