Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File:                     khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier:          yugxysjDWj7Xyz0WkxgKBSyeptmPSxqVevjVa5g5DU8=
Subject key identifier:   7E:2C:E5:14:7D:AB:C9:61:BD:1E:99:8A:EF:40:16:C2:01:88:74:DF
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer:       /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial:       01962E9983D1ED99F5BF1C530248B4128C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
                          2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
                          3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: z+4sG35e7TAlq2zOHginEKK4N7DLQjKLEA0GDvIwwhk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:83:d1:ed:99:f5:bf:1c:53:02:48:b4:12:8c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=7e2ce5147dabc961bd1e998aef4016c2018874df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:65:23:80:6e:6e:1b:c0:58:cd:93:cf:33:
                    ec:39:6a:8d:7c:a4:86:27:b3:da:f3:24:8f:c3:bd:
                    94:16:6c:fe:c8:25:df:de:55:ee:27:47:88:51:7e:
                    1e:ae:74:a2:01:ce:aa:f1:cc:b1:0c:40:a9:d4:08:
                    e2:56:7c:2f:de:f0:d0:7b:84:2e:ea:3f:33:e8:12:
                    af:b5:65:75:12:96:3a:74:6b:16:8e:7c:b3:0e:99:
                    5d:ce:6b:4b:57:70:6b:a2:6b:b2:28:14:62:77:cc:
                    88:12:a8:08:7b:b7:6f:5c:d0:27:18:3e:d6:87:2d:
                    2d:c8:25:90:01:6e:36:b0:3a:06:d8:9c:7f:81:a5:
                    c1:d4:29:75:77:06:2b:f9:e0:09:73:f4:df:c3:c5:
                    3c:e6:2a:a3:5c:84:0e:d4:6e:d9:d5:10:4b:e3:39:
                    06:94:b1:3c:57:b8:5b:19:89:84:a4:f5:67:dc:27:
                    d8:d8:95:22:c7:85:41:ed:75:fd:75:14:b3:aa:fe:
                    32:10:21:88:bf:f7:b3:74:de:ae:0d:5d:01:66:ca:
                    cd:65:81:f1:fc:65:2f:25:28:64:73:18:0c:64:35:
                    21:69:6e:40:1b:30:73:d8:a9:8b:74:d3:e9:79:ab:
                    ee:de:d3:cc:09:d8:44:6c:04:b5:a5:c6:62:6f:31:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:E5:14:7D:AB:C9:61:BD:1E:99:8A:EF:40:16:C2:01:88:74:DF
            X509v3 Authority Key Identifier:
                keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:76:59:82:ff:a3:12:fe:fa:36:aa:38:a6:87:27:de:d6:ea:
         7b:a2:02:8b:23:9c:5a:8b:df:f6:bc:27:4f:bf:08:00:98:2c:
         17:28:d3:ad:04:ae:60:d3:03:19:d2:6c:9e:c8:bd:49:b2:2e:
         68:1b:10:07:0b:c8:98:e2:67:11:9b:b0:a4:94:1d:9e:65:5f:
         51:2c:f4:ad:7e:c6:b4:e4:c3:6c:9e:42:2a:40:7b:56:d3:73:
         fb:4b:fc:e5:5c:94:76:d6:5b:66:7c:b8:fb:a4:3d:e7:4a:03:
         c8:85:7b:66:c2:a6:0a:8d:97:73:2f:3a:a1:0e:92:31:f4:77:
         46:3f:b4:5e:a2:d8:67:b2:60:3b:99:3f:2d:a1:fc:6a:95:e4:
         ff:ce:53:37:2d:1e:46:aa:4c:80:2b:39:bb:8c:f6:72:7b:98:
         52:02:07:ab:43:be:82:92:e0:7a:ca:81:94:ef:07:0e:69:a9:
         e9:1a:6e:6f:b6:3f:30:67:59:3f:69:da:3a:d2:7a:76:be:0d:
         60:51:19:3c:3f:29:70:30:9a:aa:c6:71:ec:ab:ac:cb:f8:bd:
         98:58:62:1f:7e:c0:7d:4c:ed:5d:fa:77:50:53:f5:17:cc:4a:
         16:c9:68:7f:68:ee:c4:ab:f2:0c:a1:86:85:d5:38:2c:7a:e0:
         71:66:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----