Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File:                     kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier:          2QYoapStIfU1gG2oLXgHEQtL3XgxrZiC60Z4/Nf0+Yg=
Subject key identifier:   87:98:5A:01:C8:45:E8:05:66:CF:E8:E9:E0:FF:58:0C:B3:3F:CB:D9
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer:       /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial:       01962F071563A746B233C7BFDE4027048F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 0TCji7zd0PXuI4tY1/BolazofiJ8tAz51cILx1KKURE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:15:63:a7:46:b2:33:c7:bf:de:40:27:04:8f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=87985a01c845e80566cfe8e9e0ff580cb33fcbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:4a:f8:5c:f4:16:df:39:5f:fe:50:d9:d2:
                    9a:79:ba:5b:60:db:42:dc:89:3d:7c:1a:a7:cf:8f:
                    67:cd:d4:97:ff:91:aa:79:00:de:6d:51:bd:af:45:
                    ef:25:a0:92:d4:58:cf:65:2b:02:24:78:6a:04:ce:
                    14:93:59:3e:4b:ee:df:2e:61:99:c2:e2:10:fa:04:
                    46:8d:53:89:d9:f2:39:57:06:d1:3d:e4:41:02:6d:
                    f5:b8:35:8e:55:42:21:b0:8f:fa:45:57:71:c2:3d:
                    26:d4:44:fa:8d:d7:1d:cf:6f:32:28:50:fd:a4:e6:
                    af:b3:c3:ef:c7:e7:7a:97:ff:6d:ca:f1:b1:2e:f1:
                    09:56:46:9d:36:e8:3a:4b:e1:f6:31:04:8e:6e:5b:
                    ac:d7:a7:21:3a:ca:3f:1c:48:95:0f:93:ba:2b:02:
                    11:6f:55:9d:ea:57:66:6e:22:04:b2:db:77:80:c5:
                    0e:9e:32:af:b2:93:9f:cf:9c:5a:5c:e4:20:cb:d8:
                    83:8e:d4:ca:54:ba:0d:ae:3d:9c:84:68:75:e8:58:
                    a7:ab:29:47:d9:2e:63:63:62:ce:a6:45:3b:f2:e5:
                    2c:6a:2c:84:8e:4c:08:ca:4b:9a:ab:95:07:fe:ff:
                    26:4a:59:66:35:e2:ba:05:f7:a3:3f:2d:5d:14:12:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:5A:01:C8:45:E8:05:66:CF:E8:E9:E0:FF:58:0C:B3:3F:CB:D9
            X509v3 Authority Key Identifier:
                keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:58:16:4c:c4:03:a5:12:7c:1d:4e:18:7c:3b:8c:c4:c6:89:
         9d:b7:57:09:56:fe:ad:4b:5c:aa:cf:d7:14:38:c5:f6:79:03:
         8e:11:81:d4:ed:cb:01:13:ca:48:6c:0a:5b:63:bb:cf:50:93:
         71:1d:d1:d3:e1:a5:0e:f0:a7:e1:43:cb:b0:98:f0:0b:17:6e:
         f9:15:e8:9c:0a:94:a8:ed:ea:f9:3a:c8:ae:64:d0:ed:df:70:
         7e:57:ca:8a:42:26:58:f8:36:7e:80:af:42:ec:1e:8e:21:6a:
         8e:c9:f5:da:0a:a8:ed:17:16:65:58:2b:ac:c1:a3:c1:b4:fb:
         bd:c3:2d:46:e0:d7:76:9d:9b:eb:15:7d:f6:f5:2e:28:96:89:
         d7:ef:8f:da:ce:f6:11:ab:d3:50:f2:a5:9b:7a:99:8d:8f:9f:
         1c:6e:d9:24:95:3f:2f:2e:5d:12:c3:31:7e:06:91:08:e2:22:
         2a:70:10:94:4a:19:ea:e7:bf:0a:9c:92:5a:fe:69:25:d2:83:
         38:7c:8c:3c:72:ca:d3:7e:d8:47:d0:f8:09:61:43:53:bc:32:
         8c:0e:40:07:d5:7e:0b:d9:de:4a:6a:16:a0:37:ee:62:5f:b4:
         77:29:a6:38:8c:43:18:55:bc:b0:c0:dd:84:a1:31:85:af:f9:
         f6:5a:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----