Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File:                     rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier:          wy+fGEyIK7IdpQe5vdqTB9+h8Py6mv9Z6D6BBjaah+Q=
Subject key identifier:   D6:BF:CB:6C:8B:7F:FD:36:3B:75:D4:2A:6C:40:9E:BB:AC:C4:74:EA
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer:       /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial:       01962F065C83E6216D2AE7D526B52291B8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number:          0E08
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
                          2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
                          3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
                          4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
                          5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: rYuqNCDq4R4LdSs/fnL6JwZBTGQaR7ESDe7UeOYzs2E=)
                          6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
                          7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5c:83:e6:21:6d:2a:e7:d5:26:b5:22:91:b8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=d6bfcb6c8b7ffd363b75d42a6c409ebbacc474ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:35:59:56:c6:6e:32:99:2c:20:f4:92:86:63:
                    a1:76:ae:45:8d:63:6e:0b:5a:17:8d:c2:88:f6:be:
                    7f:96:68:3e:28:15:db:4c:d3:9d:6b:f9:83:56:7d:
                    7a:1c:26:97:8d:e4:02:6c:53:2c:ee:01:e4:43:be:
                    01:e6:54:53:c5:3b:7f:1d:60:7e:1d:dd:4f:9f:10:
                    b6:4b:41:55:29:15:a6:d7:95:fe:3c:ac:cd:27:39:
                    85:79:20:99:b8:53:58:ab:21:0d:ae:57:0d:a2:d7:
                    c1:92:a8:18:d7:94:30:ce:88:a8:d8:e5:77:96:9d:
                    dc:27:d6:24:5b:c7:6a:1e:29:bc:4c:d1:26:b6:0c:
                    1e:58:b1:0a:cd:d1:bc:0a:2a:5b:7c:78:82:cb:a0:
                    9a:d0:79:e0:c6:11:35:90:72:5d:75:bd:60:ed:30:
                    3f:39:11:48:eb:7b:80:30:8b:be:16:a9:27:78:59:
                    94:44:7f:e7:54:e0:dc:49:74:fd:3b:92:dd:30:08:
                    89:ed:3a:ed:b7:bf:cc:aa:d1:a8:97:be:03:f7:24:
                    81:c5:75:91:8b:eb:79:bc:90:68:95:28:c0:b4:e8:
                    97:7d:19:d5:c7:4b:9d:77:0e:c9:1f:2e:54:85:48:
                    fd:8d:3c:13:cb:29:05:57:10:ba:89:55:ba:a9:13:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BF:CB:6C:8B:7F:FD:36:3B:75:D4:2A:6C:40:9E:BB:AC:C4:74:EA
            X509v3 Authority Key Identifier:
                keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:a1:9f:fa:1b:26:a7:ae:92:5f:68:51:f7:27:ce:63:3a:
         19:8d:0a:5b:94:ef:d7:62:81:0d:ae:7f:4d:75:5b:78:ac:47:
         2a:6d:18:04:f5:fe:de:44:26:0d:26:f1:48:14:90:a1:9a:be:
         0e:bf:28:bf:77:5f:24:7b:6a:e3:75:a3:a4:be:4d:a0:c6:40:
         fc:b4:cb:6c:37:b5:bf:d8:91:d3:01:15:1a:a3:3e:b1:ef:ce:
         14:48:58:df:0b:a5:65:77:7d:9e:67:4b:98:9f:55:ec:62:22:
         55:df:7e:65:fb:84:ce:2b:b9:67:b3:a9:6d:2e:db:80:9a:d4:
         50:56:69:5e:68:d2:fd:55:68:d7:0c:5f:e7:d9:18:0a:85:33:
         04:2d:55:f8:13:8b:c7:52:42:d3:7f:bd:6a:b1:4e:1f:ed:4b:
         8d:c1:1a:da:39:ae:e9:30:8c:08:fd:1f:3f:58:51:21:2f:03:
         b8:75:8a:13:2d:ab:86:6c:10:70:63:e4:13:26:5a:5a:ea:bc:
         a6:a8:f7:da:66:eb:7d:15:8e:e7:bc:b6:ca:99:8a:d8:fc:4d:
         01:3b:8a:60:53:60:71:1f:ef:93:fa:21:41:a5:37:88:10:cb:
         c7:b2:ec:1e:a8:07:36:11:79:b8:cb:ad:da:79:7e:b9:78:a0:
         4c:9c:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----