Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
File:                     kELoOXbjX-KaAdPEOpvFlks3tEM.mft (raw, json)
Hash identifier:          9JVTRR+ZY7MnsAeZ2WlvTcGGD9WF1ccepFG6YmHq6fE=
Subject key identifier:   F2:EA:80:A6:ED:11:A7:2E:A7:E0:27:21:2E:E1:17:FB:9D:55:A7:EA
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Certificate issuer:       /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial:       0195477ECADBE196D99A54B2DE84EDDBD6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
Manifest number:          1479
Signing time:             Thu 27 Feb 2025 13:00:46 +0000
Manifest this update:     Thu 27 Feb 2025 13:00:46 +0000
Manifest next update:     Fri 28 Feb 2025 13:00:46 +0000
Files and hashes:         1: 4q9rw4c3CUq_nyRIO7LEOgkruXE.roa (hash: BUWjQNSVGqPXxKeiIG/ZXG8rcyWyUDhJRb4EdLgsiyg=)
                          2: 69MEYRk3KHWNU6PZCeunEy7z-lo.roa (hash: VbFRQRlaweaM8YOATERuna7Y1deHDTFSxhzV5IruIz0=)
                          3: Zi0r7nxkEIJEAa8gbmvvEGPUYyQ.roa (hash: VyaLyM0DmPadq6oON235ghfJkFa7ZjwSaZEQVAEmM6o=)
                          4: kELoOXbjX-KaAdPEOpvFlks3tEM.crl (hash: 2ccrU45PEGdMTcLisPhkDYZ3NxQIwr7NR8E5/+QEEms=)
                          5: xPDk5g3iPqXtBxmqurOe8EOGFWI.roa (hash: cJRWS3KQ8AblO7sJXHhVYD57y1Z4KoSNUaFxyUCeoJM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:7e:ca:db:e1:96:d9:9a:54:b2:de:84:ed:db:d6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
        Validity
            Not Before: Feb 27 13:00:46 2025 GMT
            Not After : Feb 28 13:00:46 2025 GMT
        Subject: CN=f2ea80a6ed11a72ea7e027212ee117fb9d55a7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:85:0d:76:e4:a7:72:b6:33:26:a5:d2:a8:
                    71:1f:44:93:39:3a:c3:18:f0:9d:12:44:c3:b4:97:
                    1c:69:b9:9a:04:65:31:1b:d8:29:c4:4c:86:73:84:
                    64:5a:f9:71:2e:c3:eb:7e:fb:7d:98:8d:7b:a3:67:
                    38:ca:d8:e0:eb:be:0a:4e:b0:cf:7a:8d:10:65:62:
                    3e:31:78:15:9e:00:eb:bc:4c:a4:21:8e:68:d4:15:
                    74:5b:9b:c0:08:a2:cd:f4:ac:b7:95:3d:45:ba:5f:
                    9f:1f:66:a6:8f:de:d7:47:9d:2e:fa:6b:86:9d:19:
                    56:b5:36:89:f3:0b:3b:d2:03:03:7e:2b:78:28:b2:
                    21:3d:30:00:3d:6c:77:8d:8f:8b:99:f2:a2:39:a5:
                    e5:1c:d6:16:d7:a3:29:9d:ba:63:4d:6a:fe:d0:bb:
                    d8:c3:95:e9:04:06:5b:bb:99:47:14:cf:2c:97:18:
                    85:c2:90:84:6f:a6:82:49:58:bf:bb:ea:0d:10:ce:
                    b2:22:af:6e:2b:de:9b:38:f3:ed:08:33:77:34:23:
                    d0:b5:aa:6e:b4:ca:84:f0:99:1f:c0:13:ca:14:ed:
                    72:55:9b:43:83:d9:06:85:cd:69:a0:ff:09:62:41:
                    86:b7:ed:22:7a:6a:9d:6e:aa:b1:05:b0:db:c2:cd:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EA:80:A6:ED:11:A7:2E:A7:E0:27:21:2E:E1:17:FB:9D:55:A7:EA
            X509v3 Authority Key Identifier:
                keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:03:a8:8c:cf:b2:2a:ce:4a:53:8a:09:18:3f:c3:08:5d:
         fe:d6:06:99:d9:98:ae:e9:17:7d:5c:06:ca:fe:ad:42:8f:8b:
         1b:64:b8:79:7e:77:f7:1f:c7:dc:5c:76:5c:d0:42:db:23:b4:
         a7:d0:b1:3e:79:2c:ea:45:e8:5f:9a:f4:e7:9d:fc:87:bc:c6:
         53:12:53:c2:21:51:ae:71:ec:3e:eb:c0:ed:79:94:9f:bf:55:
         f7:58:e7:80:b2:16:df:e2:c2:af:ec:74:89:7c:66:1b:a5:9c:
         9e:86:48:75:9c:fc:95:fb:6e:3a:5b:20:72:6f:27:81:e2:29:
         d4:fa:ea:58:12:92:ba:ef:25:77:ee:67:e2:84:dd:c0:b2:36:
         3e:f6:e1:df:de:e6:4c:d9:bd:01:58:d5:51:eb:b8:09:35:d2:
         7e:98:44:af:26:16:2c:4e:88:66:33:85:d7:5b:75:f2:5e:e9:
         c8:f9:93:d7:f1:6e:7b:30:04:43:0c:c9:dc:bf:97:d2:4c:4b:
         5e:96:5e:cb:61:e7:3e:5d:88:0a:28:99:8d:cb:52:0f:2c:38:
         09:53:5b:bf:d2:1e:16:5a:e0:03:4f:03:71:6b:bb:de:59:81:
         fa:a2:fe:1c:0a:3a:0d:08:15:7f:d1:7b:d1:fa:0c:78:b4:dc:
         5a:f0:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----