Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File:                     k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier:          Km/Kn3IyeLgDMmJsxy0sVBUt+lhrV3zo9tic7MVLPWM=
Subject key identifier:   0E:34:16:84:20:68:44:62:D3:0D:E0:11:1D:E4:E9:23:8F:67:17:3E
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer:       /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial:       01962E98E652916B3F102DF9B0553AA2A558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
                          2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: D4JO8/ljrxo7gh3v55NMJqF/2tcNOfutNXafmHFNEx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:52:91:6b:3f:10:2d:f9:b0:55:3a:a2:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=0e34168420684462d30de0111de4e9238f67173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:18:1a:54:64:4a:0d:2a:d2:6f:13:86:bf:
                    9a:a6:19:8b:cd:5b:8b:b4:bc:d9:c9:71:0e:1a:12:
                    b6:fc:00:d9:e0:ef:86:23:6a:aa:1a:05:42:25:3f:
                    3d:7b:fe:1d:ca:6e:e0:9f:ce:6d:21:8b:34:04:70:
                    09:ed:0a:19:b0:dc:37:5c:52:c2:07:02:16:c5:6e:
                    ea:57:db:61:4d:55:f4:48:d2:0c:d2:b2:8e:e4:36:
                    77:dc:9b:ed:0d:cc:c0:13:85:21:82:fa:34:c8:a6:
                    92:fe:2c:03:01:ba:db:d0:c5:0c:f9:43:dc:8c:84:
                    0e:d4:20:4a:cc:d8:74:31:1e:4b:7b:b6:f3:4b:62:
                    e8:ee:99:c1:f7:f3:3e:01:e2:c7:16:5c:86:d3:45:
                    43:ec:e2:dc:eb:b1:da:78:67:49:37:ac:44:43:0c:
                    a3:90:e8:93:6f:6e:92:e1:fe:10:b9:82:6e:23:25:
                    a4:3b:29:c8:29:f4:9b:10:c9:de:f0:1e:6d:37:ad:
                    33:e7:fa:01:d1:bf:ae:12:65:12:04:cd:ed:3f:6e:
                    a9:28:6d:7a:de:b1:ef:7d:b1:5f:e4:d9:9b:33:04:
                    68:a3:4f:3a:27:e1:e8:e2:56:ea:cb:47:36:83:4a:
                    5d:ba:b6:70:a8:ed:00:6a:20:64:d7:1f:44:3d:76:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:16:84:20:68:44:62:D3:0D:E0:11:1D:E4:E9:23:8F:67:17:3E
            X509v3 Authority Key Identifier:
                keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:85:ac:6f:8c:41:36:17:86:f5:53:fa:93:55:86:ba:da:
         8a:36:88:84:e6:c8:30:90:a4:c3:5d:20:05:2c:0c:01:f5:84:
         55:5e:cd:65:b5:1d:d3:c6:e7:f1:4c:e2:db:7a:01:a2:dd:52:
         46:15:22:b9:56:7e:12:6a:b6:db:06:af:b0:84:a6:0f:d7:55:
         d1:34:3b:68:6a:e3:9b:ea:2a:d0:a5:f5:ad:b4:59:e5:9c:e6:
         36:da:3d:9b:24:4a:25:e0:d3:ad:4b:cd:98:d5:a0:12:c0:56:
         e3:7b:00:52:36:ea:e4:0c:76:b1:67:15:18:b8:60:10:eb:8d:
         bc:07:cb:3c:0a:d8:de:df:0b:e2:e3:27:39:22:67:56:e1:e2:
         db:d7:ba:81:3f:07:9e:0f:22:66:16:b6:79:c8:dd:c6:ee:db:
         46:71:b0:82:61:9f:06:0e:81:af:90:2e:d3:d5:63:c2:be:62:
         a8:28:8f:2c:54:fb:36:67:3b:bb:19:ff:eb:fa:b3:ff:41:7b:
         77:b8:7a:7c:c7:24:fe:48:fe:30:8e:75:9b:a0:37:d3:45:af:
         a3:e7:10:c4:1e:8a:d9:3c:44:bf:d7:c9:d1:c4:6b:5d:51:b9:
         af:3d:22:a0:04:18:17:f9:19:2c:de:59:c3:56:78:83:a1:89:
         9a:96:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----