Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
File:                     KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json)
Hash identifier:          9+0ZnuRQxPdwRnSKn5bpgDvs/fagZ2ypymx1DzDRc8w=
Subject key identifier:   A3:5A:D4:AE:4C:DE:48:48:70:75:15:76:EB:4B:48:B3:C1:37:49:D1
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Certificate issuer:       /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial:       01962F74BA34961AD5A4212B5E9428186935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
Manifest number:          0487
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 95yykwwXcTdfVTNtHSPE4pPfaP4.roa (hash: 1GDUJnazqonbvkMqjJPZO71YIfe2Ck+uEPOiP3nR7HA=)
                          2: Bl_DRAQyNdtxmEDBKvpfIDvc-wY.roa (hash: g79tAYYYtDQoQijPPZ8deh6DLcAkjib/ZnmzHfO10t8=)
                          3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=)
                          4: H_D-F9H9qkVTvnZv4CfQRltBb5w.roa (hash: PiMHHCzc4EPLDkYnKgKADo5O/sWTyR5QCsz73IjSeGQ=)
                          5: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: o0nuIzEnhkmw+Tt1WDe7sYhQ62W3smxtXB3efRb3Ydk=)
                          6: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=)
                          7: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=)
                          8: RFKSTXwXHx_I0X-jgSyyttokIKM.roa (hash: ZJvmGtUNiJYk9+PI2VAh73nS3jxIyV30ghb/19NLU48=)
                          9: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=)
                          10: YYA24Gwpmr6WLrK2sHYyV54Dc0A.roa (hash: y8Fe2VWfAJFVAfPInM4iGd7JSb+2Rg0aP2L6gGF+qEQ=)
                          11: g0Xq41en0MvSc6brqOyCJ-h-0KM.roa (hash: Gw1hdBraaiHJF+U9X5y+4LPKBAd7UP0aCyHshi3rBBU=)
                          12: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=)
                          13: loy5Snyw-iUVPzzHRVWXXXo15_o.roa (hash: HapHLXp4oAYGR81r+nU701ZcjYxsNP2uFcUwMFCofYE=)
                          14: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:34:96:1a:d5:a4:21:2b:5e:94:28:18:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=a35ad4ae4cde484870751576eb4b48b3c13749d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:84:df:bc:63:26:db:29:0d:16:52:2b:34:
                    12:a8:34:c8:4d:30:7f:b1:1c:5d:4b:07:0c:63:97:
                    9a:01:78:d4:8d:01:71:ba:07:78:b3:af:9e:6e:58:
                    70:0b:41:0d:f8:e3:7a:85:f5:15:70:e1:02:df:78:
                    0d:1d:47:eb:2e:db:ee:95:76:27:d6:12:47:0b:50:
                    66:8a:26:35:c3:db:31:59:82:b8:a6:e6:1e:9b:eb:
                    27:7f:c8:75:7c:cd:90:ba:65:47:37:09:8a:c4:fe:
                    99:be:40:10:ad:f5:30:cc:64:4f:01:fe:09:d4:2b:
                    8f:40:f5:51:f6:e1:94:c8:57:7a:16:1e:28:fe:31:
                    72:3c:ed:b6:0e:b0:5c:97:8c:97:84:01:c2:24:cf:
                    e7:22:1c:8e:8c:c7:ea:f9:f0:6f:3e:a3:3b:72:8d:
                    cc:e1:2a:a4:0c:db:eb:98:ca:12:fa:73:16:a7:c3:
                    c7:6f:6a:14:10:7c:6c:95:fe:5b:43:f4:15:89:08:
                    a3:f8:b7:9e:43:36:8e:07:5c:a4:f9:47:de:ed:f7:
                    09:77:de:86:84:87:8e:d8:ef:3b:a0:cb:f0:35:0e:
                    b1:5d:48:98:05:00:79:16:86:d6:85:ab:e0:e0:dd:
                    b7:af:c6:3c:ae:24:35:66:94:92:f9:5b:f0:7d:da:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5A:D4:AE:4C:DE:48:48:70:75:15:76:EB:4B:48:B3:C1:37:49:D1
            X509v3 Authority Key Identifier:
                keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:7b:9e:24:7d:14:f2:23:a2:d5:5e:6c:3c:53:54:4d:cf:
         2c:d0:6d:62:d4:3d:b1:a1:3e:fd:f4:b2:ec:95:9b:57:86:cc:
         23:71:63:d7:e5:8f:f3:0e:db:c8:55:b4:78:00:44:ce:dd:f5:
         01:7a:1c:c1:a3:b3:0f:e9:79:cc:92:a3:ad:46:25:d1:e9:9a:
         03:77:5d:db:a4:36:e6:cc:49:1e:d1:d1:7c:ba:c3:27:70:63:
         a7:62:39:09:a7:1e:f2:dc:16:0f:c2:29:d7:5c:bd:0e:ed:9d:
         8f:63:50:68:53:9d:1f:5d:a1:71:e0:fe:f0:26:7f:2d:8a:da:
         7a:d7:78:4a:64:e2:89:89:f7:81:e6:d7:70:a5:b3:c6:ce:32:
         ef:19:e0:a7:6f:4c:0a:c6:d8:70:54:00:d7:9f:5e:4a:a9:cf:
         b5:7e:be:72:08:24:fd:8f:79:93:b0:e7:fe:35:ea:a8:67:6c:
         70:f3:e7:b4:7c:92:5c:01:51:9e:5a:4d:92:ae:8a:63:50:fd:
         3c:d1:ed:8c:c3:80:9d:46:f9:69:65:67:43:cb:1b:46:09:db:
         51:7c:b9:e8:9a:f4:e3:59:1f:b2:05:18:8f:39:ef:84:27:ea:
         5d:6c:78:ef:96:84:ca:7d:0d:d5:e3:b7:a3:8d:45:d8:f5:1c:
         c6:c7:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----