Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          MEwfUVEZu0Cn60AXiED0TYd2gR0et02KR/seyJovRw0=
Subject key identifier:   BD:5E:1F:E0:7D:E1:46:F9:48:B9:FF:43:16:82:7E:9F:96:81:86:03
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       01962F06C53ADFE29842666FA560A7BFBF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          0887
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: 0XlAvdcP4h1V0hRtnrQ19FLuFI8.roa (hash: +84Jtnm8y8lyPSa7rwRGvIOVFxMyvRwy6vUQccu0gmY=)
                          2: 1-nmX1WTJ49yJbme7KYE3jeC7q4Y.roa (hash: zAEWgizXd30YPkGAc5Kl/PvBR6kbJd2FV8oWGwFvE/I=)
                          3: XUDhKVYUmtZLfcMevlZ9gCG53Sc.roa (hash: 1W1CVZL0BwZJqQJ2Az9Lw99cQ4qD2ObuWZrSKPc6/mA=)
                          4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: UvL50HxujNkhfuYR9dAJnbW7drP9AyilCSE31vLA9ZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:3a:df:e2:98:42:66:6f:a5:60:a7:bf:bf:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=bd5e1fe07de146f948b9ff4316827e9f96818603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:de:47:e9:7b:9c:52:31:bb:87:4b:6f:1d:
                    ff:4a:55:ea:a1:c7:ef:1e:54:2c:23:60:d8:c9:2e:
                    3f:63:82:5c:01:b5:61:3d:7f:d8:5a:00:02:7a:de:
                    24:d1:61:ae:d3:e0:00:14:23:ef:03:10:8f:bd:3a:
                    2a:92:f5:9e:59:fd:c7:4d:43:2d:95:6a:50:65:72:
                    d8:cb:69:02:18:3c:82:86:30:d7:9e:98:7c:03:a4:
                    00:92:a5:5f:57:72:91:74:1b:5e:11:54:59:62:69:
                    d9:6b:f1:6a:96:39:2b:e2:9f:86:f7:ee:c1:bc:09:
                    e8:00:f9:0e:70:ed:83:bd:86:0d:3f:8e:e9:9e:e0:
                    ac:7d:4c:a8:56:87:f6:99:29:3e:69:49:87:ff:91:
                    40:8b:ca:7e:c6:51:24:f1:f8:66:52:90:ba:08:fa:
                    3a:f1:3e:2e:0a:b4:68:70:18:b5:52:53:8c:cb:d8:
                    21:7f:6a:09:05:30:e4:7b:92:16:07:5c:7d:c7:8f:
                    e5:1f:75:90:0b:7c:32:3c:81:89:dd:29:b2:a9:82:
                    f5:b0:59:3c:b5:b6:68:de:fa:78:c3:9f:93:0e:52:
                    24:3f:9e:73:e1:6f:a2:4a:98:13:2c:26:05:3c:3b:
                    fe:2f:f2:0c:6a:85:2e:65:59:bc:00:ba:3f:c2:ad:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5E:1F:E0:7D:E1:46:F9:48:B9:FF:43:16:82:7E:9F:96:81:86:03
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:0b:67:5d:99:d9:a3:86:b0:f0:da:d9:f2:1f:90:a1:15:
         b4:70:d3:04:85:64:1e:82:3d:00:81:9e:2a:1a:66:3e:b5:f3:
         7c:ca:a0:27:30:f4:6e:05:3f:0c:c4:37:a1:fe:88:e9:ad:ea:
         10:4a:1d:4d:80:d8:d2:65:0b:cd:e5:04:53:63:89:d2:6d:3c:
         62:4f:90:1c:52:0f:14:1a:07:b8:c6:c9:db:ed:bf:a8:7c:9f:
         58:9e:8c:13:f3:e5:12:a2:a7:71:c4:18:1d:4c:6d:55:05:69:
         5c:4d:f5:95:aa:54:22:14:ad:39:5c:c6:73:57:e6:a1:27:fd:
         21:6a:60:8c:ff:9f:ae:b3:ec:0b:08:7a:ea:48:46:7b:a6:7f:
         e8:f0:ab:eb:d2:9c:97:38:43:b5:9b:e3:af:5d:ef:d3:77:47:
         f0:a2:9d:c7:62:af:fa:d2:50:0a:89:ac:48:67:ef:6e:a3:60:
         30:9c:c2:ab:78:31:ea:5e:42:fe:d4:88:cf:cb:d6:cc:51:14:
         d3:20:61:7f:0a:9d:b1:a4:20:34:dc:70:5f:a9:5f:64:23:fd:
         3e:1f:60:fe:7c:89:6e:61:e8:8f:a0:b9:1a:76:e1:69:c0:9f:
         09:10:21:85:a5:01:a2:e9:49:b5:e2:74:45:a9:ea:1e:ae:e3:
         4d:19:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----