Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
File:                     kY74I7sEHqOsfIk2x1C2AYE34s0.mft (raw, json)
Hash identifier:          q3GunW6yNBDMh3PzSKHsDhHPatp9dwMUHBONTJQuN38=
Subject key identifier:   4E:06:30:63:21:A0:3E:FB:4E:69:6A:AB:3D:3D:89:6E:B7:13:C9:A7
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Certificate issuer:       /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial:       01962F74B09244CA580AC73CD24F05B37B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: A9fnzzZSIyyk78DkykeGYg11L2Q.roa (hash: jan8f+is44AYa9jG93HTE50pBitsknBS00si8XIMwqI=)
                          2: DHmLK6qv7LDp9GSFF3bVVqiSSSs.roa (hash: 4c04LYJlSQnDFsWUTe3RinfcXPa5HIaLB5gKn1wNfQ8=)
                          3: X2DKxHgU0pJJ7l0RSAZexJQ4yk4.roa (hash: c4ZqtHFp+NEImgqSyGp/s8/x5ohWKo9ZUlSrkI+FleE=)
                          4: kY74I7sEHqOsfIk2x1C2AYE34s0.crl (hash: Yk+cdD5Uvvry4uTMHWzz6RIe5aCwh+kfrgEeDblt2zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:92:44:ca:58:0a:c7:3c:d2:4f:05:b3:7b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=4e06306321a03efb4e696aab3d3d896eb713c9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:bb:fa:be:fb:d4:74:68:5e:7b:d2:87:46:
                    df:56:e2:6b:67:69:c0:08:9b:44:a3:a7:9f:41:dc:
                    e2:45:84:65:a7:20:e4:48:0d:5d:f5:f5:c7:49:63:
                    05:67:6b:5a:9a:0d:51:c9:a6:8b:9b:fb:81:ec:16:
                    35:88:2c:da:8d:39:49:79:70:b8:c1:3c:f5:ad:19:
                    fa:f7:0e:20:88:94:be:ec:9b:8e:bb:d6:f8:c4:17:
                    b5:0a:2b:d6:dc:dd:5c:99:2a:2c:ab:48:14:a5:a0:
                    09:1b:8d:11:cb:47:f8:45:f6:56:56:52:1f:1f:16:
                    e6:6a:73:ae:b6:c2:8d:c4:1f:37:d5:ac:f7:5e:11:
                    d9:8c:27:1d:39:d3:7c:b9:1e:d2:63:4e:bd:6e:d2:
                    1a:8f:cb:8d:5c:b4:15:6c:08:21:36:62:5b:90:74:
                    47:ae:4d:a3:93:15:9f:e9:84:97:7c:c9:c5:a0:9c:
                    81:4b:73:e3:48:c2:5e:c7:3b:f7:69:f4:8c:6f:c6:
                    65:b6:ff:03:c6:d3:2d:bb:6b:73:d6:48:69:e4:7e:
                    f6:35:47:ff:c4:bb:61:d0:f2:0a:59:ce:1a:92:b7:
                    64:c7:23:8e:8b:d8:69:7f:47:18:2f:53:05:9c:0f:
                    0b:5a:ef:ca:37:53:6a:e8:f3:56:6b:ec:3c:2c:52:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:06:30:63:21:A0:3E:FB:4E:69:6A:AB:3D:3D:89:6E:B7:13:C9:A7
            X509v3 Authority Key Identifier:
                keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:f2:61:94:ff:c9:e5:9c:f1:ee:6c:fa:4b:9f:26:34:6b:
         7a:94:55:5f:27:d4:96:36:f4:7e:ad:6c:83:1b:82:e6:5c:dd:
         7a:ca:eb:01:12:41:1b:3c:9b:2c:54:e2:51:01:a4:8b:d0:2a:
         f1:a3:1d:78:ff:40:76:fd:e0:26:13:0d:f5:05:9e:8a:c2:13:
         8e:57:4c:61:d4:2f:26:f7:fb:e7:8b:ad:6c:07:be:50:c3:c0:
         d5:76:8c:cf:af:32:e4:90:59:92:24:25:f9:f0:6f:5a:3a:a4:
         c0:54:5c:26:a0:d4:e3:a4:17:f8:0b:f8:ba:a8:77:cb:3d:f4:
         36:a2:44:8b:16:94:97:49:d3:bc:d8:7b:8a:54:f6:06:a6:15:
         62:ee:56:90:b8:59:7a:7f:3d:c5:78:90:4f:25:ab:1b:76:10:
         b3:07:d7:9e:28:e3:84:a4:02:05:0f:44:44:bb:4c:03:7c:ed:
         78:cb:cf:8b:a4:d7:88:6c:68:0d:7b:38:45:e6:9c:4f:60:08:
         ad:2b:e3:0d:2d:43:3b:11:a7:6f:45:82:3a:ae:9f:bf:89:89:
         cb:cd:ed:fb:f1:da:18:3e:34:15:f4:7c:56:7d:43:98:8d:a9:
         03:b1:67:76:7c:0f:1d:64:0f:89:5e:fe:4c:f0:c9:96:b7:2a:
         e1:16:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----