Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File:                     kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier:          uQitZ5xjF39FdVQaBn1By8UjrFyYAijw9W13vE++2xM=
Subject key identifier:   BA:69:B0:22:06:6F:51:E3:57:BF:3C:92:F5:FD:56:67:F8:A6:6B:00
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer:       /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial:       01962FAB36E5D402546884FA9F3DE425460D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number:          0447
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
                          2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: PMvJoF3jN54wiLVCXcVr0o3zkxI0RhyjQdO9RaX3ETY=)
                          3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
                          4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:e5:d4:02:54:68:84:fa:9f:3d:e4:25:46:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92253353ba649debee927998ba02c8614399f961
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=ba69b022066f51e357bf3c92f5fd5667f8a66b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:71:75:e3:46:41:63:34:fd:0b:62:ac:13:
                    54:c0:ae:3f:5b:7d:01:65:1c:49:90:76:83:12:d4:
                    8c:af:0e:34:c8:15:36:35:49:36:e9:12:42:b0:89:
                    26:5e:9b:da:22:b9:e1:3e:67:c4:b8:0f:ce:42:21:
                    1e:7f:71:dc:78:cd:9f:9b:67:13:60:05:f9:6a:3c:
                    6a:2f:f1:89:75:dc:1e:43:f9:7e:01:7f:13:4f:7f:
                    36:08:16:7d:6a:cf:0d:a7:dc:3a:c1:c1:f1:5a:55:
                    22:fc:b8:6a:88:71:12:f6:74:af:0f:54:40:be:bc:
                    22:ab:ca:3f:2a:76:26:7d:f5:95:a3:a6:c4:c3:40:
                    55:e1:52:f9:a2:d5:61:7c:b7:3c:9f:c0:eb:a9:23:
                    d3:01:ce:b4:0e:03:c7:72:40:e3:d0:59:af:cd:f6:
                    d8:b6:27:b5:94:3b:e8:a2:83:42:db:42:8f:6e:c7:
                    f6:c8:eb:0a:df:e3:fc:ac:df:82:b2:49:49:63:1c:
                    9f:be:cf:fd:4e:14:9e:55:32:86:43:dd:61:65:2d:
                    5a:86:8e:4f:03:e4:9a:1b:46:45:0d:24:28:66:01:
                    35:02:f2:f9:b0:f5:64:a5:0a:13:f5:e4:d6:aa:32:
                    de:f9:82:72:3e:6c:d5:5c:8b:08:2d:9e:d9:7a:c0:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:69:B0:22:06:6F:51:E3:57:BF:3C:92:F5:FD:56:67:F8:A6:6B:00
            X509v3 Authority Key Identifier:
                keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:02:8f:1d:8c:f0:0f:d2:30:64:d4:59:7a:b0:07:8b:32:
         15:78:ed:28:59:93:ca:6a:f3:27:04:c4:26:3e:83:4d:3b:85:
         8a:ca:51:7b:ee:b0:b6:83:c9:94:bf:aa:9a:26:49:44:03:4f:
         a5:1f:77:c6:00:8b:cf:4e:77:a1:b2:db:f4:93:b2:2a:ef:c6:
         37:28:2d:61:1a:94:f0:99:40:e1:07:47:13:55:d4:65:3b:89:
         c0:4f:a2:54:13:79:cf:03:cd:8b:60:c8:b0:c2:21:d7:92:5c:
         54:45:28:c1:7b:4b:84:da:9c:9b:b1:da:6b:5d:98:58:ee:06:
         94:9e:a1:d1:26:7f:50:ff:8a:48:d8:53:eb:d7:79:75:a3:16:
         81:63:f1:95:1e:2b:8f:df:ca:1a:e4:04:ce:ee:59:34:81:aa:
         bd:59:83:79:eb:9a:f6:10:f0:5e:89:76:2b:33:87:6e:86:a9:
         2d:2e:0d:ea:d2:c6:33:78:6d:8f:fe:8b:97:62:19:ba:65:9b:
         a6:dd:54:43:11:80:e8:d6:05:16:09:2d:bf:7a:c7:b3:0d:a8:
         c5:19:36:93:65:4f:69:d4:7a:d1:2f:af:44:09:76:8a:1d:4c:
         81:50:4a:f8:71:ca:55:cd:77:ca:62:aa:8b:f7:d0:71:a1:2d:
         2c:a0:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----