Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File:                     k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier:          xJe1isi4OsB9kFt4e+MsEIzMauRA0UJxcUNugv4Oes0=
Subject key identifier:   F8:A3:3F:5E:97:12:61:80:FF:7E:1C:F3:C0:73:81:63:2D:3C:93:BC
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer:       /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial:       01962F74E34E8BD1AE7F1C76B809659877E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: CEKF3MXHpQR2CGHCMQpTxxuuRIY.roa (hash: Rh5DOeHi5/pgsxZpTOekiFMDHUB1zlvv4XKyE6PrDFE=)
                          2: cXHMvnYXUn58neLwmoRSc042tjs.roa (hash: SBDcDeTpbKOEPbrOKMYmcpYN3NXUYeqARSNljTNUetg=)
                          3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: Lt6R5Khhon86y8HuWgCY8PC4MnMnUH7guJSJ4lQXHJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:4e:8b:d1:ae:7f:1c:76:b8:09:65:98:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=f8a33f5e97126180ff7e1cf3c07381632d3c93bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:8a:68:82:69:79:5b:1c:72:41:22:a0:50:
                    df:70:5f:a7:c9:8d:c9:56:df:e8:2c:11:0d:c3:de:
                    d1:e3:97:df:f3:7b:8a:b4:17:1f:f1:cd:2d:fd:5a:
                    9f:89:10:e2:22:60:59:a8:13:d1:60:2b:d0:6e:eb:
                    bc:65:b8:a1:a6:2f:af:07:bd:cd:0a:98:ff:2a:75:
                    bc:ff:53:21:68:ff:71:d5:fd:65:33:df:25:11:35:
                    29:9f:d3:ee:94:c7:e2:9d:32:3b:88:d1:f9:ed:3f:
                    f7:40:90:07:ab:e2:1a:d4:8a:a6:57:56:0a:7f:ee:
                    2d:27:c8:50:52:85:5c:3f:d9:bd:cf:9b:43:cf:f1:
                    67:de:d2:20:15:e8:a5:b4:49:b5:37:dd:1e:d4:4b:
                    ff:dc:10:a2:8a:87:09:8f:73:04:f0:df:3f:b3:1a:
                    91:02:53:47:87:6b:3f:24:ec:d7:d1:28:6e:2b:e2:
                    1a:e0:12:8e:64:69:a2:c6:b3:c6:4c:50:2b:74:c7:
                    b5:87:a6:6a:5b:14:05:d7:bf:1f:6e:b2:96:48:13:
                    6f:f1:1b:0f:6a:dc:bd:91:9e:1c:80:f5:ae:01:e6:
                    b2:a9:45:d3:a2:be:fb:0f:f9:7d:95:72:ed:fc:b2:
                    25:2f:cc:10:79:26:12:ae:62:d3:f2:94:12:91:ff:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:3F:5E:97:12:61:80:FF:7E:1C:F3:C0:73:81:63:2D:3C:93:BC
            X509v3 Authority Key Identifier:
                keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:35:a5:8d:19:52:26:21:83:f2:5c:fb:72:d4:31:74:7b:
         2f:83:cc:ee:62:e4:6e:96:57:61:9f:ce:85:9b:5c:6e:26:3d:
         ff:51:ff:8c:83:d9:75:0c:5a:b3:87:99:e0:b2:d3:82:fc:83:
         1f:8e:2a:70:d1:eb:ce:02:06:01:85:2f:6c:ce:d1:42:3a:8b:
         f4:b9:4d:ae:6d:75:04:78:5d:b3:03:43:94:ab:f2:48:da:99:
         e6:a7:31:0a:d8:d7:86:dd:b3:2b:c3:32:9a:dd:c6:ca:a5:a9:
         6c:ce:ea:fa:1f:5f:6b:52:74:c8:70:3f:a2:bf:ad:ce:6a:19:
         13:34:48:c1:e5:87:5f:49:9a:0c:20:56:aa:38:07:71:da:a2:
         f2:55:70:32:6e:f6:55:23:2f:59:f3:31:b6:70:19:c1:70:5b:
         8a:79:07:1c:d7:90:e7:f8:38:4d:f7:1b:ed:ac:fd:96:63:74:
         9b:7a:30:f6:80:97:21:26:36:d4:87:81:dd:32:80:58:38:d3:
         90:a3:35:4f:6d:a3:54:b2:0f:04:fb:3e:5b:db:9d:32:77:50:
         f5:f9:fd:56:92:1b:f2:3d:bd:67:7f:be:a7:4b:df:44:09:4a:
         91:a9:28:4e:38:a4:d4:2b:c9:79:29:fb:02:64:f3:a8:b5:75:
         2c:d6:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----