Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File:                     KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier:          hymYcbipQFHvJe2UxtH3M5LHiq0C+90hAM7icvRh9nA=
Subject key identifier:   47:E4:11:22:12:B1:12:BB:6A:33:02:AF:44:78:91:FB:C7:02:9A:F7
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer:       /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial:       01962FAB7AF6090F0D6E22EE36198913B21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: ICnu7sUwpSSY15uEDFVsgADJKAc.roa (hash: OMIgQNcZqzMDzM+I0pk5KXUbjDdmpf89SBEO3vtX8ZE=)
                          2: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: qFPyT+Ips14sXJRi//n6LMJkIgRrp7jmf0meGq/Jqik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7a:f6:09:0f:0d:6e:22:ee:36:19:89:13:b2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=47e4112212b112bb6a3302af447891fbc7029af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:dc:29:c7:9e:25:00:be:43:1d:34:dd:8e:
                    64:a9:ca:8e:8c:51:2d:45:bb:96:ee:71:47:80:67:
                    b1:90:1a:64:b4:71:af:3f:7b:eb:09:de:cc:1f:24:
                    d4:8b:02:bf:ed:80:0c:d2:bc:da:b8:a0:16:93:b2:
                    34:31:ba:72:48:86:8e:c6:ad:76:27:ce:6f:7e:e3:
                    76:20:7f:0a:8e:d3:90:ae:e6:18:40:67:18:43:bd:
                    6f:24:f9:1f:57:fa:fc:d0:b7:e3:cb:a9:d2:2a:03:
                    ef:68:da:ef:95:d9:55:95:a6:75:86:a1:7f:00:62:
                    21:b6:a2:dd:b1:c2:4f:c1:43:77:14:ab:fe:b7:d5:
                    18:59:67:30:78:b7:2b:68:a5:d4:6d:5f:da:18:7f:
                    99:ba:01:b2:f3:9e:5d:01:64:a3:80:47:a9:93:36:
                    6a:22:ee:57:5c:bf:a9:ae:59:4e:ff:ae:b5:51:f9:
                    1c:d5:0b:d3:cb:f4:8b:a1:1b:78:c5:c2:17:50:93:
                    4d:26:80:7d:58:dd:ac:5b:b7:08:21:56:71:31:2e:
                    08:64:97:5c:9c:08:ce:25:04:29:80:93:6e:3f:34:
                    ed:fb:bd:b8:3c:1a:85:af:d2:f5:9d:91:29:ae:d8:
                    fc:6b:48:c5:66:5d:8f:22:03:51:10:eb:55:a7:e3:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E4:11:22:12:B1:12:BB:6A:33:02:AF:44:78:91:FB:C7:02:9A:F7
            X509v3 Authority Key Identifier:
                keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:19:64:05:2b:c4:98:a1:66:5e:cc:22:75:da:4d:07:8b:01:
         89:b1:47:90:42:79:e4:6a:3d:b7:01:73:d3:c0:01:78:97:cd:
         8a:6e:51:cb:5e:b9:68:63:6d:7f:71:a8:8b:45:8f:e0:d4:78:
         db:82:a8:b7:2b:2f:79:14:d0:45:b5:f2:d3:88:45:d6:a8:64:
         c5:8c:61:e8:64:69:91:1a:d1:26:60:1b:6a:97:55:60:61:c4:
         2a:a8:2e:d0:6a:86:41:0e:07:66:3c:19:d4:8d:5f:e4:89:db:
         fc:14:9c:55:11:98:22:28:60:9b:9e:f7:e6:78:c0:f7:ea:bc:
         2c:5f:6b:b5:0a:0f:c7:b7:d4:ab:5f:70:c9:3b:3e:b2:76:af:
         f4:48:99:8c:9b:c7:f9:31:62:c2:95:d7:be:ed:d5:f1:82:a7:
         ee:7f:80:4d:a3:89:c1:20:8f:f2:be:37:02:30:ad:1d:b2:3a:
         9d:a7:92:cc:de:de:4c:95:d1:2a:9a:c3:75:d6:36:4a:52:e4:
         2b:23:4a:03:16:7d:9b:64:5a:2f:ee:04:ce:1f:91:8f:3f:25:
         be:91:ec:41:49:14:25:bf:48:79:59:2b:50:98:8c:5a:05:81:
         37:87:e7:71:d4:fa:85:91:29:ef:3a:8c:f7:c5:d8:8d:02:53:
         7e:1d:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----