Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File:                     kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier:          f1vyG4AqT/vzeL4Mt0gYDfAKf+2WeLz9X+9HPkeTOx0=
Subject key identifier:   74:F2:11:61:12:A0:DB:92:47:D8:DA:92:AA:88:2E:D1:CF:A0:9C:33
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer:       /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial:       01962E99C1DE246B484AAB78DB9EDBE3FB3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number:          04A5
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=)
                          2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: vVOZurq1Bc/6CurHfqoOshG/10FRxLJV6zAfGKJgBA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:de:24:6b:48:4a:ab:78:db:9e:db:e3:fb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=74f2116112a0db9247d8da92aa882ed1cfa09c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:4c:37:af:16:42:d9:4d:0c:27:0f:4c:69:
                    3d:b7:74:64:1e:1c:e3:db:50:b0:47:c5:e0:38:02:
                    b9:62:26:ff:35:ca:a4:7e:49:81:14:34:3c:62:c6:
                    e1:38:ab:30:15:02:42:b1:fa:3e:84:ad:97:2d:14:
                    aa:72:f9:bc:c8:26:38:21:56:38:36:46:c1:0a:40:
                    8f:25:56:06:0f:51:9c:e8:30:42:3c:e6:ae:e9:e3:
                    44:ea:71:71:b6:0e:51:c9:d6:f3:ac:a1:c3:0a:fb:
                    56:5d:ad:d1:62:9c:b8:50:4a:6e:55:3d:7f:1d:1f:
                    7f:3a:7e:81:0d:83:d5:49:6e:a8:85:9f:a4:b1:1e:
                    f4:3a:df:d5:da:5d:44:50:1f:19:c6:c5:1a:24:12:
                    ec:ed:2a:08:a5:6e:04:98:00:c8:02:fb:20:d8:e0:
                    50:c4:93:c7:ba:82:ea:5a:18:11:4f:34:4d:f6:67:
                    ad:59:52:6e:c9:23:b7:e3:5c:18:ee:60:4e:2b:be:
                    d5:d5:a1:d4:5d:cc:31:2d:1a:55:4c:73:4a:44:b6:
                    9a:3b:a8:68:69:c8:2a:69:b2:a2:c8:df:b1:06:0c:
                    ea:dc:1a:f7:a7:39:4d:c4:95:f5:8a:87:1c:a8:03:
                    0c:af:6f:c2:29:36:3f:b3:cd:c7:33:d4:43:57:1e:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:11:61:12:A0:DB:92:47:D8:DA:92:AA:88:2E:D1:CF:A0:9C:33
            X509v3 Authority Key Identifier:
                keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:f0:6a:aa:02:ad:25:0f:f9:8d:08:40:e3:c5:3b:92:de:
         6e:14:5d:6f:52:6b:20:e0:1f:83:f0:a8:58:9d:6e:64:63:f4:
         f3:b5:a7:83:b3:e2:bf:35:da:44:83:d2:5e:0d:4e:ab:8a:5f:
         4c:c8:31:16:32:09:d5:ff:9c:2a:b4:54:df:18:dd:ad:60:a8:
         3a:98:c5:94:3e:e3:cb:05:29:c4:e9:04:46:87:f8:62:20:52:
         48:98:60:7f:56:3d:ad:a8:eb:ca:cb:31:12:f4:ed:65:53:4c:
         04:af:44:3c:1b:2b:53:5f:85:2b:7d:cd:be:ad:82:fe:71:3e:
         ac:df:54:21:60:c6:64:db:c0:39:63:7c:48:6a:0e:f9:e2:36:
         4a:fc:2c:64:4f:54:a1:5c:8e:40:08:19:72:19:b6:e9:9e:f0:
         1f:29:1f:85:ff:43:5e:b7:d2:42:ce:5e:3d:89:3d:7e:e3:e8:
         3d:3f:67:0f:c6:0b:ab:1c:34:98:e5:10:6c:8d:ca:d2:10:2f:
         72:6e:c1:d1:8a:b7:8e:f8:ed:6c:1e:fd:ce:8a:dc:e8:3a:85:
         54:99:5b:fd:cb:3b:6b:85:82:65:c5:64:9e:f1:57:2a:81:15:
         d9:69:d8:52:21:70:a7:7e:eb:ef:96:ca:81:9e:8c:74:c1:8d:
         48:bf:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----