Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File:                     kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier:          bqjvDPXvnIpDRvBr1JPqxxytJs8u7nfGriXW2QYY6RY=
Subject key identifier:   06:3B:1C:32:6F:64:13:E6:8B:09:79:3F:41:26:EC:41:B3:85:76:B8
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       01962FAB2C3DC18AF599CACC59F193E7321F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number:          07E7
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
                          2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: KZLEPzaLzy5wKRE3e1Qv92q0HT+sPd4oOB9E5RaNxZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:3d:c1:8a:f5:99:ca:cc:59:f1:93:e7:32:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=063b1c326f6413e68b09793f4126ec41b38576b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:e5:e5:05:ea:9f:f2:d6:74:57:43:1a:84:
                    61:c6:26:4b:4c:f9:08:6a:d8:57:13:54:ee:6c:c7:
                    ab:6a:74:ee:3a:fc:59:69:2e:57:f1:97:2e:a0:e8:
                    37:2c:91:f2:8c:de:35:f9:3a:8f:97:35:61:53:22:
                    49:b5:22:56:4b:47:b1:2f:7a:e8:34:2d:2a:a8:02:
                    da:1b:d0:1e:b9:47:d7:14:72:b2:7c:9e:43:d4:11:
                    71:f9:0e:e5:69:e6:2b:ca:6e:1b:53:36:b9:24:ea:
                    23:3b:b1:2d:e7:fd:b4:67:43:bd:17:d1:4a:f8:8f:
                    bb:4c:d6:94:0c:07:9b:04:67:d0:e4:1c:19:68:3f:
                    9b:d5:1f:3d:5c:a9:40:3a:87:ad:4e:64:00:27:0d:
                    9d:13:05:5a:50:b5:f9:47:f7:35:68:6b:c3:8a:51:
                    72:0e:83:a7:7e:03:f7:6f:09:43:1c:c5:41:6f:d4:
                    6d:32:aa:85:69:78:d5:18:5b:cf:c8:a0:f7:3c:51:
                    12:0f:60:b3:b0:4d:aa:ec:17:2d:a2:87:8a:14:e1:
                    0e:5c:08:e9:e3:29:6d:e4:7b:2c:23:40:ec:69:5c:
                    36:57:64:e1:04:19:04:48:53:ab:25:17:6c:e3:0b:
                    96:e2:9d:5b:2f:5f:6f:53:42:00:90:fc:26:67:71:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3B:1C:32:6F:64:13:E6:8B:09:79:3F:41:26:EC:41:B3:85:76:B8
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8e:84:13:fa:4e:a7:e6:d0:e8:23:0c:c1:32:fe:7f:59:8b:
         bc:d9:3b:4c:6f:f5:f7:60:52:88:84:4b:b8:f5:ae:ec:54:78:
         99:0e:17:99:16:82:a6:c9:0d:79:66:2b:f2:23:5c:c5:6f:b3:
         55:59:ab:23:79:07:07:22:e7:a7:00:2c:06:24:cc:5c:bf:4d:
         0f:25:ff:55:e5:e7:4c:c9:f7:3d:db:77:66:f4:78:d6:07:ed:
         38:b8:3b:b7:ca:71:dc:0f:0e:19:92:43:25:a5:c6:2e:ff:19:
         4d:e9:7b:dd:92:61:23:52:02:7e:99:8b:43:8c:4c:8b:b7:66:
         28:cb:f2:1d:b4:a6:a2:2b:9c:e6:8f:ed:41:b2:07:e6:44:c5:
         ee:bc:9e:14:62:d4:72:2b:d8:5a:06:cd:c9:9e:e9:71:2e:48:
         9e:ca:e4:d6:8d:37:f7:56:1f:17:d0:e4:2c:26:ba:00:92:a6:
         9b:b5:11:8c:de:56:9a:3b:e3:1e:f2:e7:1d:5c:f0:06:0b:46:
         9c:89:8e:ae:74:8d:35:41:47:17:52:c6:bf:8f:e4:6f:c4:bc:
         7f:cd:52:f5:4a:70:33:aa:e9:e6:e4:96:a3:12:cf:ad:2c:e7:
         d8:f9:a9:33:8a:54:0d:a4:0d:de:72:f0:ba:e0:38:52:a3:0d:
         83:d6:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----