Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File:                     kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier:          0WvHYgB3KbeY1Y/oIlU6b7gXUAUEcTf46FlYyYmUQZA=
Subject key identifier:   9E:70:02:EA:BF:F1:C4:82:98:F6:0C:34:1E:F8:CE:99:19:B1:12:1D
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer:       /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial:       01962F06EB4085548E74236381731EFA485B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
                          2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
                          3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: UX9+BTtkrSbnKhJ2C7kxLr/MVXnc0K2V2QBSap/H2Ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:eb:40:85:54:8e:74:23:63:81:73:1e:fa:48:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=9e7002eabff1c48298f60c341ef8ce9919b1121d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:b8:8f:53:35:3f:9f:66:59:e9:94:6b:36:
                    fa:9f:47:f6:81:07:49:35:2b:2f:0b:27:da:3b:e3:
                    5f:5a:67:c1:1f:30:86:78:6e:ff:5e:fc:d1:5f:b3:
                    98:e6:6d:b2:03:30:10:44:7a:c4:4d:4c:b3:59:65:
                    75:56:95:2a:d0:83:c5:ed:cf:34:55:c7:04:74:1d:
                    86:4b:86:54:2d:39:ec:c8:9e:96:3f:a5:5e:a0:8e:
                    81:df:0d:fa:18:3c:07:2f:5c:7e:18:0b:48:fe:67:
                    bf:ca:fa:a4:d1:1f:aa:94:04:91:00:ac:94:06:2e:
                    fd:9e:ce:48:68:89:7c:b7:9c:29:64:67:ad:64:c1:
                    d4:3f:92:be:82:a5:62:60:07:2e:70:a3:ce:9c:3a:
                    90:db:27:df:29:17:d4:44:00:7a:2f:82:5b:8b:06:
                    c4:18:aa:8f:6b:67:d4:cb:a6:1d:27:2e:80:24:3c:
                    5c:20:7d:97:71:5a:d9:dc:a6:dc:c3:e7:aa:d3:b1:
                    25:06:0d:4b:bd:1e:12:66:3e:3d:18:1b:40:1f:dc:
                    59:7f:74:33:58:13:cd:99:8c:81:8e:ed:9e:c3:46:
                    ff:29:8a:35:3a:e3:35:4d:60:c0:c5:21:5f:da:34:
                    44:e5:0b:7a:6b:16:b3:98:cd:b3:1f:1c:ac:c3:66:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:70:02:EA:BF:F1:C4:82:98:F6:0C:34:1E:F8:CE:99:19:B1:12:1D
            X509v3 Authority Key Identifier:
                keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:08:6e:a0:ab:46:96:5f:05:ec:09:08:26:03:47:d5:a2:75:
         ab:fc:49:95:54:5b:c3:b8:cb:05:79:17:8a:22:76:6b:4e:17:
         0c:e6:11:98:e9:38:16:06:0f:8d:2d:3f:5e:eb:2d:f7:87:58:
         c4:e8:a0:fc:23:66:d9:bc:1f:c9:78:4f:41:4c:10:bf:5c:53:
         b4:ec:e4:ae:fd:14:83:f4:a3:7b:0c:7f:c8:27:db:c1:0d:4e:
         4d:1f:b1:fb:c5:26:6b:ad:08:d7:66:6b:31:f9:a5:5b:94:0f:
         e3:54:c9:34:ca:2b:68:7f:94:a9:f1:5b:dc:46:a7:e8:22:51:
         ab:58:6b:59:d6:b2:d1:74:ec:95:b9:ef:32:83:67:88:a1:f0:
         16:ea:0d:04:2d:91:6a:e7:97:fd:8b:b9:c6:f4:84:65:f5:15:
         0f:8d:9a:4d:55:ea:0c:96:58:c0:4d:a3:8b:8a:8b:46:9f:72:
         cd:ab:3f:2b:0e:03:01:0d:3b:7b:cf:96:41:b5:c6:8d:dc:52:
         74:0f:51:67:74:47:53:53:fa:de:ef:d1:ca:83:7a:1c:4b:38:
         48:9a:e7:cb:e6:32:a2:8d:9f:0d:fd:70:f2:ad:24:63:87:70:
         dd:53:fe:d1:08:1f:dc:c7:5b:43:e9:e6:fc:48:ea:e4:dd:9a:
         02:de:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----