Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
File:                     k4yI3syI92r_E7wIWNs4eDS-FxE.mft (raw, json)
Hash identifier:          HsxqzS7Gm44NXc2CKMlxrG5+ihcVFYj4C6M4gE1SB98=
Subject key identifier:   A2:00:B2:3B:38:93:83:B7:1D:21:45:8D:50:E8:50:C0:09:21:68:D2
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Certificate issuer:       /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial:       01962E2B1D0B771D6F29F632419603AD1C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
Manifest number:          0F8B
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (hash: DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=)
                          2: k4yI3syI92r_E7wIWNs4eDS-FxE.crl (hash: KKx2ctrZbrxwpb+yqUCHDc0SK9QRV/ZGq5FyjMKkFgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:0b:77:1d:6f:29:f6:32:41:96:03:ad:1c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=a200b23b389383b71d21458d50e850c0092168d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:28:26:3b:c1:15:5f:53:c0:cf:91:3b:9e:
                    68:8e:fb:d0:75:06:9f:20:33:94:46:e6:bb:05:97:
                    2d:5f:a1:d3:aa:80:c8:87:3f:c0:c1:3a:c7:44:84:
                    c1:0d:24:49:e2:cc:aa:7b:9d:e0:5f:92:91:6b:38:
                    d4:d8:33:18:0e:df:67:ff:68:b3:a8:5f:46:b0:e3:
                    c2:6f:58:85:dc:56:ec:c1:8d:93:58:48:e4:98:77:
                    4c:10:66:8a:c9:66:18:7a:27:64:7f:a1:8e:e5:93:
                    94:09:96:d1:f8:a6:cc:46:b2:e6:ed:e8:34:a9:6f:
                    d5:54:84:49:44:32:9e:ad:51:5d:d4:83:54:ee:42:
                    af:ae:fd:83:54:e9:cb:40:1a:49:7d:dc:76:7e:26:
                    25:65:18:44:60:7f:bd:57:6c:4e:46:a0:73:79:ce:
                    13:61:3d:67:42:a9:16:72:ba:a8:03:01:87:c8:0c:
                    d4:3d:47:9c:a0:e2:98:92:e4:ee:32:dc:c7:d1:c7:
                    26:91:e7:be:c6:a2:66:ff:e8:b7:86:07:91:47:2c:
                    65:32:c6:73:36:e3:f8:49:ca:da:90:95:b9:f6:f4:
                    8d:e1:0e:39:a2:ca:1b:2f:94:32:da:ad:c6:cb:b9:
                    84:f8:58:76:8e:d0:ca:91:ae:b6:51:12:e7:e5:b3:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:B2:3B:38:93:83:B7:1D:21:45:8D:50:E8:50:C0:09:21:68:D2
            X509v3 Authority Key Identifier:
                keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:7d:03:86:bc:95:fa:94:33:b5:f0:65:0f:02:b0:a7:a9:
         b3:2a:3d:a1:2e:3a:05:b6:a2:de:6b:62:82:30:55:81:54:81:
         1d:6f:89:97:dc:c4:90:7d:aa:bb:23:90:37:d4:81:d9:89:3c:
         aa:43:1f:b0:1e:5c:17:a6:c4:30:0b:f6:c8:2c:4a:16:da:af:
         a8:a5:fd:8c:25:99:c5:77:bc:49:bc:02:30:0a:51:95:0d:6c:
         11:13:35:4b:4a:e5:bc:6d:03:98:5e:36:1a:bf:a4:ee:a6:96:
         48:83:19:01:e2:f9:25:bd:ff:54:9b:f0:93:e3:51:74:29:b0:
         78:1c:ab:a6:30:68:79:35:cf:58:35:fd:6e:db:57:ce:d2:af:
         8c:c7:51:a3:a7:6d:e8:4a:79:2c:7b:76:3c:e4:be:50:aa:3c:
         f6:e7:b4:a3:da:08:99:71:42:9b:c5:3b:0d:2f:e1:c8:6c:74:
         2d:f1:b7:25:60:5c:ea:6b:a5:34:05:19:22:55:ae:c7:42:81:
         e8:dd:de:2f:5a:c3:86:04:2e:69:82:b1:70:a2:f4:d4:f9:af:
         29:c7:60:4b:5a:26:6c:42:5d:dc:d8:90:53:80:cb:e3:e5:d1:
         c8:5b:c1:55:d6:ad:57:4c:e6:90:9a:10:b8:ad:95:d4:93:1d:
         80:97:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----