Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File:                     k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier:          DSSG4Ph/vIrygVRGb5yBYWtTUWpid/B7crXibYZe9Mw=
Subject key identifier:   E4:00:7C:E8:D6:69:98:6F:7F:7A:98:8B:D7:2A:46:4B:E4:83:40:D9
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer:       /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial:       01962F74C1CF845B8720E32B3A8ECE95645B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: HSgrrGtxJ7cZquXnC6OEFj6+WsVWWYRi/TKc+PlSADI=)
                          2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:cf:84:5b:87:20:e3:2b:3a:8e:ce:95:64:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=e4007ce8d669986f7f7a988bd72a464be48340d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:73:03:9a:15:66:f9:48:fe:d9:d2:d0:1f:
                    bf:cc:eb:f9:82:38:0b:29:75:81:f3:48:9e:1d:3c:
                    b4:8e:0e:36:93:d7:79:af:a1:3a:2b:88:96:7b:22:
                    ee:02:a1:72:6c:9d:4a:67:fc:7e:e6:5b:74:40:fe:
                    b1:de:57:d7:e4:b3:26:b4:b5:0e:8b:44:4f:e8:4c:
                    25:f5:cd:3a:64:fe:43:75:59:50:2b:85:d1:4d:94:
                    f8:41:cf:a0:6a:18:5d:dd:5d:4c:95:a1:9b:9b:04:
                    c7:1e:a5:fd:c7:23:92:c1:8a:17:4a:30:d4:f5:94:
                    6b:a1:60:c8:49:46:3d:72:45:15:79:07:6f:2f:52:
                    94:e1:f8:c9:6b:d3:da:ac:68:24:b0:da:87:94:0b:
                    8b:e0:13:cc:65:e6:b6:15:6d:5d:a0:6a:b8:fd:b0:
                    50:81:b8:0e:85:e6:12:be:89:6f:de:0b:ef:ca:bc:
                    6c:60:8f:28:77:b0:77:34:b9:ed:e1:ba:99:82:ab:
                    58:0c:d9:ab:8a:19:7c:dd:48:57:18:3f:f2:19:19:
                    2e:88:f0:ad:55:c8:70:cf:09:84:8e:75:b2:2c:05:
                    c3:99:c3:14:09:fc:1c:75:86:0e:52:ee:49:b3:4e:
                    7d:93:46:97:89:aa:0d:4e:7e:c7:99:0b:60:93:d1:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:7C:E8:D6:69:98:6F:7F:7A:98:8B:D7:2A:46:4B:E4:83:40:D9
            X509v3 Authority Key Identifier:
                keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:54:5b:aa:59:60:5a:f0:27:4f:13:8f:e1:71:90:30:ff:f2:
         b5:92:ef:9e:59:83:53:c8:56:7a:63:86:c3:5b:54:b9:95:9a:
         e7:24:e2:11:7f:d1:fd:d5:51:17:8e:63:93:53:c4:6d:5b:e9:
         63:16:8b:0f:a6:cb:03:ad:9c:59:90:7e:09:d4:b1:8c:58:a7:
         2a:25:ed:9c:69:6f:7a:01:c0:e3:69:52:2e:a8:28:53:7a:8f:
         20:73:98:ee:7f:b9:79:52:81:cb:0b:d9:2e:16:2f:af:71:22:
         36:20:86:78:6f:9b:76:3c:1d:c4:72:4d:c2:1a:9e:a3:17:74:
         74:c1:77:31:aa:57:fe:d6:50:f5:37:e0:40:71:fa:cd:c4:b7:
         d4:91:a3:23:ec:77:11:71:c5:c9:b0:71:68:07:43:2f:1f:50:
         1d:f0:c9:bb:a4:09:76:16:e3:6c:ca:aa:ca:a8:1c:b7:27:eb:
         4f:45:7e:90:07:ad:bb:0b:55:1c:f4:75:89:f4:49:64:fb:e1:
         04:c9:68:24:d8:29:b3:bc:67:6d:a7:c4:05:1e:cf:d1:39:8b:
         d2:f2:19:fe:09:6d:a5:3a:f7:9d:de:8f:84:1f:3b:80:40:c4:
         40:23:79:81:95:1d:28:b7:b8:45:46:e3:08:b3:06:46:97:b5:
         ef:69:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----