Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File:                     khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier:          4m/3jbp7TMDM60c1AFWrF2Hb7nisscD+kvXXfyWQ3js=
Subject key identifier:   75:B1:E5:57:C2:63:5C:11:B9:D0:1F:C4:A3:07:6E:6C:CF:4A:8D:A3
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer:       /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial:       01962E619921B7BA88603EA000633A1460CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number:          0F2D
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: CYRiwsvlGigoQBsXKYZFSvjCFZ4.roa (hash: 1euU+VHnS5Oa5hqA8L1mrnNan71ITE/IgrolWt9qYq0=)
                          2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
                          3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: oKHAPkV3c5zdgufOmLlJprHx2Fjc97IDskWgB/kGg+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:21:b7:ba:88:60:3e:a0:00:63:3a:14:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=75b1e557c2635c11b9d01fc4a3076e6ccf4a8da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:08:2c:73:7e:0e:c5:8d:f9:d9:3c:0b:0b:
                    54:4a:9b:9a:d4:e8:53:ad:a2:b6:b4:e6:50:98:e9:
                    fb:27:cf:f8:f1:e3:c0:2f:2e:c4:19:1d:5d:c0:16:
                    7c:e6:f4:a4:d1:8c:e1:33:be:cb:61:27:9e:52:98:
                    a4:e2:2f:a4:e8:07:7f:70:63:4b:d1:c9:af:5b:90:
                    70:9a:08:d5:55:a4:ee:9a:0e:18:ba:6f:70:60:ae:
                    b3:9f:53:7a:86:fb:12:3a:7d:b1:19:fc:79:80:3c:
                    cb:b7:84:66:23:32:d8:a7:f4:aa:35:5a:72:7c:e7:
                    78:b1:7c:e1:63:23:2c:24:d6:fd:8c:fc:de:3a:ac:
                    0d:38:17:07:42:36:b4:1d:f8:91:f2:e2:ec:63:0c:
                    d9:9e:cd:26:ac:13:a2:d6:48:6b:65:8a:47:23:dc:
                    88:68:e3:7e:36:55:cd:c1:d1:3e:43:24:0e:e2:89:
                    44:00:36:72:51:88:14:4d:a3:26:70:db:df:ae:b6:
                    7c:9a:31:c6:a3:8f:b6:24:4e:c8:c4:26:b7:f2:6d:
                    31:af:ef:1d:5e:d9:29:c3:f3:58:34:ea:0e:1c:fa:
                    69:e6:1e:df:25:96:68:ef:a2:c3:4d:b6:c6:eb:e6:
                    32:29:80:fc:92:e0:49:72:1d:82:84:06:d2:07:20:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:E5:57:C2:63:5C:11:B9:D0:1F:C4:A3:07:6E:6C:CF:4A:8D:A3
            X509v3 Authority Key Identifier:
                keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:85:ef:fe:ce:a6:d2:0f:dd:eb:27:37:1c:11:7e:42:e3:
         40:a1:88:90:4b:e7:7e:54:d8:86:1f:51:d0:88:71:88:e0:bd:
         62:99:28:c7:e2:d2:73:37:a5:c4:41:d6:cc:25:54:d4:40:55:
         36:f1:ef:75:69:d4:3a:52:3a:a8:3f:0b:5a:b9:ff:3f:47:fb:
         b3:5a:91:cd:68:03:51:35:f1:bc:f9:5c:62:14:55:6a:f6:4d:
         89:6e:0e:28:93:38:89:00:f4:d8:8e:74:b9:68:65:69:cb:3e:
         0e:2e:a6:f3:61:40:cb:6b:da:58:5b:20:a7:b9:1e:49:db:15:
         2b:28:a2:cc:d6:03:0e:36:10:12:c1:af:f6:49:43:0e:b4:a6:
         a4:9f:09:dc:a4:dd:90:b7:c3:fd:bb:25:95:59:5b:58:5e:04:
         9e:f3:c0:0c:43:1b:2b:56:35:ed:7c:6a:50:ec:61:e7:de:37:
         90:89:94:18:4b:eb:7f:0a:1d:bd:96:06:bc:70:9f:96:a6:7e:
         ab:5e:b6:ef:3b:f0:69:e9:03:a9:4e:e2:51:22:b8:b7:b3:4c:
         37:24:b9:9f:b2:3e:e4:07:28:d4:50:27:82:c1:03:c2:37:c8:
         46:a2:a4:ad:37:f0:ea:20:70:04:4d:0f:37:c7:69:d6:c4:82:
         d7:41:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----