Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          Qg5unz6Ux7oD4M76FuDp+smx8aaX2jfP7/yIZsHn45E=
Subject key identifier:   60:5F:2F:9C:E5:F2:AA:7C:57:90:FF:9B:FC:5C:BB:98:1E:70:B4:4A
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01962F071795B54629DA28A6A86A6202929B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          096A
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: wO3KdZm4tUYrZrY4XrINXDOsYlbR4jfjWEjpI7JIhdI=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:95:b5:46:29:da:28:a6:a8:6a:62:02:92:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=605f2f9ce5f2aa7c5790ff9bfc5cbb981e70b44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:00:3f:93:53:d6:2c:d0:8e:7d:8c:17:f2:
                    c5:5d:d7:09:80:9a:8f:92:75:3d:f9:35:03:53:79:
                    57:b8:8c:de:59:4d:8d:ea:57:75:27:4e:da:7a:ed:
                    ee:78:53:b7:42:48:7b:c3:e6:0d:32:ee:40:38:c5:
                    c3:5f:a5:4c:79:8b:6c:5d:4c:82:6a:71:f7:50:02:
                    4b:6b:6d:35:39:16:83:57:e1:f7:33:99:85:d8:45:
                    e4:6e:4d:72:87:07:12:d4:f2:5e:e9:f5:4f:c2:b2:
                    55:1a:c7:13:75:f1:8e:6a:f0:a7:59:c6:0c:e4:ad:
                    97:57:2d:7c:03:ee:ba:00:94:e0:3f:85:db:51:1a:
                    e2:81:e7:12:c6:ac:50:dd:1e:ad:d5:44:2b:0b:3d:
                    0c:a2:ca:ef:0d:90:75:7d:05:25:40:1b:30:2c:bd:
                    b0:08:50:43:50:43:7f:d0:e6:16:cd:95:1d:45:21:
                    93:2f:e4:25:fe:77:03:89:a7:fe:13:27:fd:f5:29:
                    d8:c9:a3:e3:26:2c:61:0e:e7:2b:82:24:af:0e:9e:
                    db:75:6a:a3:74:b7:ac:dd:f9:48:8f:18:c8:a5:ea:
                    9e:42:e1:46:e3:2a:78:f3:06:a6:79:13:62:69:73:
                    1f:b9:08:8e:fd:15:9d:d4:b5:55:bb:e0:24:fc:e4:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:2F:9C:E5:F2:AA:7C:57:90:FF:9B:FC:5C:BB:98:1E:70:B4:4A
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:54:09:d9:4c:be:5a:e8:99:89:96:59:cf:0b:15:c4:65:c7:
         d2:2c:b3:f0:ed:1c:fc:21:26:ca:07:15:ec:80:67:28:26:88:
         a3:8b:20:92:21:0a:07:8b:e5:70:1f:23:2e:12:1a:87:5c:c8:
         14:ab:78:8e:e2:40:fa:dd:59:ab:a5:8e:b0:69:5f:0a:22:93:
         74:87:f3:3e:51:28:fb:4f:7d:cb:ee:52:1f:5f:d3:4c:28:14:
         ba:48:15:98:5c:de:58:f1:cb:d4:5f:f4:38:d9:7b:7f:65:ca:
         ed:09:c0:37:43:e5:1a:72:73:46:bc:bd:9c:ee:60:0d:9d:d4:
         07:9b:c1:d5:6d:e7:df:ca:97:fc:aa:b3:1d:01:41:47:41:f1:
         e8:ba:87:8f:3b:b9:4f:86:40:b8:d6:2c:e9:7f:24:ed:4c:77:
         5c:30:76:bc:03:0e:03:cf:0f:7e:3c:db:0f:29:80:9c:69:5c:
         bf:25:e6:a1:2c:e7:c5:f8:6d:95:d5:d0:e6:3d:7b:f0:83:46:
         26:6d:ac:c9:09:33:43:43:8b:55:78:5d:71:6d:85:3d:41:51:
         8c:09:27:e2:84:81:18:bd:ae:f9:9c:1a:77:94:9f:76:3f:98:
         11:12:13:46:45:14:1a:52:86:6e:fa:b0:8d:4f:54:3d:c3:61:
         04:f1:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----