Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
File:                     kHpNEpJLU1fjAmev48XMc2QkEVg.mft (raw, json)
Hash identifier:          xKgwihfDeL0Jyfuc/i8B2cTUt1nQZIcpI2r0PbIDuTs=
Subject key identifier:   C0:23:74:F2:AC:6D:9A:44:D2:8C:ED:90:AD:BF:FD:D5:4F:F7:F1:7B
Authority key identifier: 90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58
Certificate issuer:       /CN=907a4d12924b5357e30267afe3c5cc7364241158
Certificate serial:       01962E98A4FA08BF0C0A2F6E2AC440CA8E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft
Manifest number:          0EFF
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: kHpNEpJLU1fjAmev48XMc2QkEVg.crl (hash: HCmCPkZ2rCVYQTooHiCjPI3NKL9jAclnHAw1RA86SUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:fa:08:bf:0c:0a:2f:6e:2a:c4:40:ca:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907a4d12924b5357e30267afe3c5cc7364241158
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=c02374f2ac6d9a44d28ced90adbffdd54ff7f17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b2:6f:83:3e:d0:a7:61:c7:93:f0:3f:95:fc:
                    42:d6:af:ba:ee:c7:fa:51:39:e9:ce:c7:68:69:ec:
                    80:06:c3:99:66:b0:44:d9:e0:89:e4:5c:74:86:33:
                    70:a9:57:ee:a1:2d:42:03:6e:fc:bd:cf:a7:a0:06:
                    42:76:ce:6e:9e:75:40:85:f3:09:13:87:bd:42:ee:
                    a1:c6:05:24:fe:8e:d3:f3:1b:73:a3:43:d8:0e:e8:
                    58:c4:62:47:dd:d0:af:87:af:6a:80:a3:33:e9:da:
                    26:cc:ec:9c:8e:8a:00:dd:30:28:7a:be:5d:9f:ac:
                    01:b5:29:45:2d:f9:a3:0d:ae:bb:7d:21:86:43:46:
                    4c:09:99:3c:fd:dd:b7:b8:9a:6c:29:67:16:d8:32:
                    e5:db:7d:09:f0:19:01:a3:25:7a:48:3b:1e:03:6b:
                    e0:a1:6b:e2:1a:33:43:82:8c:b3:f3:c9:47:c8:84:
                    da:12:03:fa:37:8e:41:15:96:d4:82:32:a2:fa:0e:
                    a8:76:19:e3:8f:97:57:a6:e1:36:bf:77:41:c1:c4:
                    70:94:69:84:66:cf:43:e9:e1:37:08:2a:d7:ad:b5:
                    e6:ad:38:66:a9:27:07:47:a7:0d:43:b9:cb:d6:b4:
                    4e:33:02:43:a0:83:d5:24:46:cc:3f:5d:99:7f:59:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:74:F2:AC:6D:9A:44:D2:8C:ED:90:AD:BF:FD:D5:4F:F7:F1:7B
            X509v3 Authority Key Identifier:
                keyid:90:7A:4D:12:92:4B:53:57:E3:02:67:AF:E3:C5:CC:73:64:24:11:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpNEpJLU1fjAmev48XMc2QkEVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/aef44f-cbdf-4120-84f1-621a2bb40c66/1/kHpNEpJLU1fjAmev48XMc2QkEVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:62:65:bd:87:55:ba:96:27:54:20:b8:c9:b5:94:2c:22:
         62:09:6a:91:18:2c:a7:e7:1e:d2:b3:6a:fc:34:56:86:fe:bf:
         ea:1f:dc:ff:64:c7:ed:ed:bd:38:5a:f6:0a:d7:93:35:c9:0a:
         b9:d6:42:75:e7:11:4f:99:d3:5c:13:c5:5b:eb:c3:b1:3c:b7:
         37:04:61:e1:9a:3d:86:2f:f3:bf:09:40:4e:e9:94:90:b0:90:
         1f:54:a1:ec:5a:49:21:d9:57:dc:e3:3d:e5:05:59:95:87:f7:
         82:b9:c8:3a:2f:80:b5:ec:cf:87:c2:a0:02:73:4e:59:29:19:
         8a:e7:3d:8d:27:02:9c:fc:b3:09:d1:9e:b6:c2:41:8b:71:a2:
         61:a4:78:77:38:de:97:a9:18:e7:89:4b:4c:7f:ea:ec:30:50:
         18:97:cb:e3:53:18:7a:51:d9:66:50:99:54:79:ce:d3:7b:e4:
         a8:e2:88:28:33:2b:ce:a8:c1:6a:8d:80:39:a0:09:75:7b:96:
         25:01:f2:7f:51:26:91:7a:71:54:45:90:79:7e:24:7f:b4:f9:
         1b:ce:ad:83:22:c9:7d:9f:08:8d:3d:f7:0a:21:29:24:7a:b6:
         f5:f8:24:57:6b:e8:94:4d:cc:f9:ef:b4:0c:11:bb:5c:39:a5:
         e3:ca:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----