Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File:                     K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier:          3RxE86KhUhnlyE00tXQf40dcM1EPBPEpBwADF+WSy4o=
Subject key identifier:   15:A6:91:21:88:34:4C:E3:2A:8B:92:3D:0B:23:CA:50:38:5D:14:78
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer:       /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial:       01962ECFB6A1BD44BE1C3F0B9ED835D9D810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 0_EpdViy3Y27mqejc66l1--sjBk.roa (hash: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=)
                          2: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: fk9EftYvAcfbPpCCL7TCbGOamcSQ1VdVO+4vgPCnFDw=)
                          3: LcFyOrobUrG-q36ENaVBWkIxyec.roa (hash: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=)
                          4: mJjYnvCF0aJWwcOO87dJLulTej8.roa (hash: cyYF0//qn6HDiGNvk9163fm1e6ldk0sS9GYuhZI3HqU=)
                          5: oOM7QrbyKmK3sX9tSspvcF4LQYc.roa (hash: FI0q4cfrXLcPzOiQWzP6cR+1RIpvdT5irQXBJq3jipE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:a1:bd:44:be:1c:3f:0b:9e:d8:35:d9:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=15a6912188344ce32a8b923d0b23ca50385d1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:27:ce:af:c1:15:ff:8f:ff:45:b6:14:31:
                    03:4e:31:0e:9b:d7:25:cf:03:54:96:cb:87:96:95:
                    4c:3e:98:e8:42:eb:f9:e2:75:8a:92:5c:f9:d8:58:
                    2d:cb:70:be:67:07:28:e4:dc:83:fa:2c:48:5c:15:
                    bc:00:66:26:f5:9f:a4:6f:af:e4:53:7e:1e:f4:d7:
                    fc:3b:5a:24:45:63:57:67:10:8d:3d:1c:62:a7:c9:
                    20:4f:05:b0:0f:2b:16:0a:77:80:7d:22:6f:11:17:
                    7c:a8:b3:81:e3:ab:00:e6:88:db:e0:f5:45:f5:1b:
                    03:f5:98:7c:1a:4e:c0:9d:10:58:a4:c1:7d:09:89:
                    29:3c:bf:88:a5:32:d6:47:71:05:5e:a4:72:c4:d5:
                    2a:3d:8e:1c:65:24:79:9e:6e:03:27:b7:2b:59:3d:
                    df:fa:ef:33:e3:ef:e9:56:59:b6:4c:01:97:9a:bb:
                    2f:18:a4:44:1a:c9:c6:9a:19:48:6f:cb:a8:07:7e:
                    7c:52:23:90:0a:d4:b2:04:43:24:ff:b4:b5:4d:5a:
                    02:b2:04:9c:44:d5:7d:59:72:ed:ad:1d:7e:60:9d:
                    fb:31:07:2f:e7:bc:91:f6:c3:d6:fa:37:20:84:05:
                    e9:71:ef:78:fa:aa:31:28:c9:5c:85:d8:e8:a0:16:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:91:21:88:34:4C:E3:2A:8B:92:3D:0B:23:CA:50:38:5D:14:78
            X509v3 Authority Key Identifier:
                keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:79:1a:1d:03:d3:1c:3b:20:a0:a5:d0:2a:21:fa:19:83:
         70:e8:79:b4:cd:a7:f6:a6:db:e4:65:a7:67:56:93:bc:ed:28:
         5f:85:1f:24:e2:a1:d0:31:6f:ed:05:82:ff:f4:91:11:96:a3:
         d6:3f:b4:69:64:14:d2:a1:a6:b3:97:ca:63:56:5f:ce:0a:aa:
         22:0f:47:fb:6d:5e:ec:56:06:7c:1c:fc:97:a8:17:7d:c5:30:
         db:c3:cf:e2:cf:b5:63:0a:f8:c2:6b:33:a4:5b:b7:4d:c9:14:
         a7:1c:67:db:fd:1d:5b:97:e0:d6:d1:54:ea:5b:45:b0:19:25:
         7a:b8:9f:ea:35:d1:96:10:fe:72:61:58:09:d3:48:b2:ad:5a:
         44:d1:c3:62:9a:8d:35:43:83:bf:6f:20:d6:cf:78:36:83:ff:
         74:f7:5d:01:01:87:77:6f:2e:60:a4:b2:f9:5d:60:49:70:e4:
         75:d1:76:9f:24:24:bd:5d:c9:f0:4f:7a:0e:a8:d1:b3:f9:79:
         fd:66:77:47:91:1c:73:57:1c:e0:4e:c0:78:3e:39:bb:ab:46:
         5c:c3:8b:e1:9a:94:dc:72:42:6c:74:d4:f6:34:e1:b9:93:8c:
         56:44:99:09:41:89:28:f8:81:c3:31:03:b5:61:d9:c5:53:72:
         a5:1c:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----