Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File:                     k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier:          bzx0WEikicULCuyxrLG+dpP1l3UKR4iRPuDjLMxXcpc=
Subject key identifier:   65:BB:A4:94:2D:30:63:E1:6C:81:6A:4C:3C:FC:49:C8:2D:D0:7C:6C
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer:       /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial:       01962E2B4262A874A4B6726258D0CDEB26B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
                          2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: gNcw8OIAcCJKgSN2aK1RfLKc4utMBszTEEYHH+ZlKkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:62:a8:74:a4:b6:72:62:58:d0:cd:eb:26:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=65bba4942d3063e16c816a4c3cfc49c82dd07c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:93:ef:8f:dd:74:42:54:8a:38:7b:14:3a:
                    79:48:74:69:90:d5:56:35:3c:13:b3:9b:c0:ef:71:
                    77:78:7e:86:cf:27:4f:04:d4:61:99:b1:cd:15:1f:
                    3a:64:c0:e0:ea:9d:fa:f4:bf:39:5a:c1:bf:5e:b1:
                    ea:2a:6a:2e:9f:42:23:89:c2:32:6a:80:1a:9e:21:
                    c9:93:b3:99:c4:a6:fe:e6:a9:58:9b:2c:ac:d2:2d:
                    ca:15:91:79:f5:d2:4a:e1:a6:52:8e:cd:07:d6:0a:
                    f7:92:b9:f1:68:25:99:8a:1b:72:bc:32:e0:74:b8:
                    b0:06:4f:4c:9d:78:30:e9:9c:f9:bc:fd:e6:a7:14:
                    8d:16:5a:dd:b4:06:a4:cb:25:58:fe:89:a6:ba:f5:
                    d4:59:a5:9a:d1:26:64:30:cf:39:bc:44:d1:13:57:
                    7e:b7:46:a4:c2:fb:fc:a2:eb:71:e5:ff:5c:32:92:
                    02:9f:29:24:88:ed:56:06:ee:65:e4:ba:52:7e:0d:
                    0b:96:cc:48:77:3e:12:f0:21:1b:dc:90:5f:00:28:
                    00:7c:c4:66:27:42:ee:77:d4:fe:e1:30:b5:92:61:
                    5e:5d:0d:e6:43:de:e7:d6:a3:4b:35:89:f7:5c:e7:
                    c8:75:1d:4b:eb:03:44:79:74:75:13:da:18:b1:8c:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:A4:94:2D:30:63:E1:6C:81:6A:4C:3C:FC:49:C8:2D:D0:7C:6C
            X509v3 Authority Key Identifier:
                keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:db:f7:f0:5e:c9:43:d4:bf:71:6e:d6:f9:04:7d:7c:e9:
         a7:a0:ac:92:26:70:11:ff:53:6f:bb:2d:a1:3f:46:78:99:c6:
         b2:4c:95:f9:04:b1:5b:04:74:49:e6:db:68:38:60:a0:d9:67:
         45:a2:d6:55:52:6e:bb:ef:19:97:f1:2f:13:9e:c7:27:75:95:
         fc:91:3c:d6:2a:c1:2c:23:94:52:51:ce:14:3c:28:33:7e:a8:
         7f:d8:2d:54:31:a1:39:90:ef:e0:56:f3:22:14:60:d5:a5:fa:
         8d:01:7c:9a:a4:7b:86:c6:4f:65:92:29:bd:4d:c5:9a:83:6b:
         65:04:79:52:54:8f:d1:3d:6b:c3:32:5e:57:13:2a:1f:c7:c0:
         c0:52:93:8c:9e:cd:f4:38:f5:42:f0:ae:81:dd:bd:05:91:22:
         07:af:19:46:3e:09:1e:34:8f:74:7f:5f:a1:99:99:64:fe:ce:
         dc:5a:93:30:0e:18:da:8d:b6:b1:c5:b2:92:b2:fa:de:0c:b9:
         61:ed:48:96:de:80:7e:91:36:26:bd:ea:70:f8:0e:7e:f4:b3:
         28:a3:ca:b2:24:ce:ed:ca:46:2c:f5:d7:8d:81:6e:5f:7c:a1:
         73:65:e4:66:bd:68:9e:10:94:f7:bd:ea:21:44:02:09:f8:c4:
         bc:87:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----