Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File:                     inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier:          UnEzIP1zUS7nY3QdSYEwvbiloswJPaLXw5x3LAxR+pY=
Subject key identifier:   D4:47:27:DE:DC:6E:0E:CE:5C:B6:BF:B7:9B:51:EB:ED:FA:85:DD:BB
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer:       /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial:       01962F070142C32C55C688E67FFB8B873F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=)
                          2: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=)
                          3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: tmjlnho6BTNJT/gWbc5na2vx1HeOpDUplRpA3zzgib8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:01:42:c3:2c:55:c6:88:e6:7f:fb:8b:87:3f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=d44727dedc6e0ece5cb6bfb79b51ebedfa85ddbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:c9:06:8b:c8:33:35:2d:bd:f6:50:83:0c:
                    fa:95:35:f7:cc:d2:ab:33:c9:d5:b3:2b:03:6e:71:
                    be:d8:7a:73:a5:51:d2:b2:6b:ac:e4:86:93:ec:a9:
                    45:09:11:9b:6e:5d:ef:86:90:93:71:86:45:02:63:
                    d5:43:d2:f0:f9:e4:f9:5b:84:a8:74:6c:2c:09:ee:
                    44:8a:e8:18:3c:68:2e:6b:d8:a1:59:cd:02:b4:d7:
                    9e:9d:8c:be:bd:e3:dd:ba:00:94:89:d4:d0:68:94:
                    50:c9:07:b9:72:6d:c8:8b:a7:be:fc:0c:41:fb:38:
                    7d:84:a3:ae:4b:9f:6f:fc:47:f0:55:e3:46:71:b2:
                    64:6e:00:81:7f:39:4a:78:bd:c5:be:d2:f3:11:2b:
                    09:be:a1:cf:ed:b2:ed:10:b2:c2:cf:50:cf:98:6e:
                    5d:9f:c5:2d:a2:cb:c7:98:6a:3e:94:b4:87:11:83:
                    5e:84:8d:2b:63:13:e3:2c:01:e0:6f:9d:a3:0f:a2:
                    57:65:3d:8d:0e:06:2b:f4:a7:12:3d:58:55:fa:64:
                    86:e2:18:e9:6f:f3:49:f1:e9:01:52:cd:7d:02:fb:
                    d6:22:3a:91:8a:5b:dd:04:f9:b1:2d:ec:77:7b:3f:
                    5c:24:10:d2:5b:32:53:8a:c8:63:bf:cf:be:42:3d:
                    99:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:27:DE:DC:6E:0E:CE:5C:B6:BF:B7:9B:51:EB:ED:FA:85:DD:BB
            X509v3 Authority Key Identifier:
                keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ad:b2:23:b7:a4:d6:6d:0a:fb:30:21:b6:11:74:f5:e2:b5:
         08:8b:e4:4a:23:b2:e1:9d:3a:cd:97:8b:fc:e7:26:f5:8a:c2:
         76:94:97:67:f0:b7:e4:8c:46:cf:c4:2e:73:82:98:64:c5:87:
         f8:f6:b0:65:f8:29:97:8a:6e:ff:dd:80:1d:b6:24:10:cd:71:
         05:12:68:ad:94:3e:61:f7:d9:b9:a1:fb:cf:0e:1b:0d:a7:b5:
         a5:e4:69:c6:1f:52:a9:59:17:3d:41:4e:54:2a:2d:fc:51:f8:
         be:43:da:81:49:a6:d1:66:7d:36:cb:2f:29:6d:2b:f7:f9:07:
         9f:fd:98:b5:25:42:0e:0c:ed:b1:50:63:5d:7c:48:e3:47:fc:
         2d:7c:89:89:90:a9:45:75:23:25:16:02:2c:d1:b1:6a:c1:7b:
         77:10:31:68:64:f3:f3:76:17:0d:fb:56:d0:93:a1:37:d1:2f:
         f1:d9:4f:c8:2d:fe:37:bd:67:6d:ad:5b:69:8a:5b:e0:04:a0:
         25:3c:a8:a5:19:fa:d1:a6:c2:21:6e:23:d3:76:44:d5:53:52:
         4a:17:81:06:a4:00:4a:6c:ad:95:b7:ab:d3:05:1a:59:eb:84:
         07:00:11:ab:11:04:ea:ac:48:ca:f2:11:8e:48:8a:f1:e6:46:
         07:9f:9b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----