Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File:                     klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier:          nhjs9Uq9XHEXTqX2EikCemn9aOF7gsU3OQu7ONXAzNM=
Subject key identifier:   88:8E:4A:4A:3E:05:07:03:92:E1:11:76:52:76:2C:BC:F9:1C:7D:B3
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer:       /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial:       01962F3D2BE6CEA593D72CC53743580AD7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
                          2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
                          3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: kJQdf2vHNER1CH+togngGgseH/iTf0dbfE/wwh7o1eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2b:e6:ce:a5:93:d7:2c:c5:37:43:58:0a:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=888e4a4a3e05070392e1117652762cbcf91c7db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:31:1c:22:3b:d1:b2:9a:e1:53:06:5b:3b:
                    e5:d9:cc:9f:5f:73:94:ec:2c:11:8a:d5:f7:44:7d:
                    e6:7b:e4:9c:6b:e4:b1:2b:ab:eb:e5:ba:b2:98:8b:
                    83:24:4b:68:71:c3:a0:6d:03:53:6e:e7:a4:15:a7:
                    4d:90:58:8d:14:77:78:bc:cf:10:ac:84:96:8d:42:
                    a0:b1:2d:65:8c:96:8e:2c:9b:c4:ad:27:64:64:19:
                    73:c8:4f:72:8f:bc:a7:e8:87:22:0f:8a:b8:16:b5:
                    16:13:45:a1:6f:70:a5:02:a5:71:99:4b:e9:16:99:
                    d4:c2:5b:ab:3d:0a:ca:31:02:b4:ce:31:4f:a0:9f:
                    cb:8e:88:96:9d:ed:f7:d2:21:8f:d9:8a:c9:1c:a8:
                    e2:0d:de:bb:d5:2e:2c:a6:8b:3e:13:29:4f:85:5d:
                    53:09:72:c3:49:a7:7a:06:3e:9b:c5:83:e2:5b:b7:
                    e7:05:8c:0e:14:c9:e1:47:ce:9d:20:5d:7b:66:32:
                    d6:ee:e7:89:26:5f:74:86:ac:a2:42:ad:3b:b8:c8:
                    a7:57:0f:2a:88:f8:84:12:c6:ae:23:25:c6:f9:50:
                    a3:5b:f6:2c:b5:4d:79:d7:ea:75:95:5f:21:23:d6:
                    28:e4:33:1a:01:33:98:46:f3:39:f1:ef:03:9f:31:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8E:4A:4A:3E:05:07:03:92:E1:11:76:52:76:2C:BC:F9:1C:7D:B3
            X509v3 Authority Key Identifier:
                keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:71:0c:91:c3:46:c5:a1:71:7b:fe:40:20:f6:41:7b:5b:0e:
         02:11:4d:84:63:dc:e2:14:e5:0c:68:88:40:7c:82:99:87:5c:
         e0:ab:5f:58:3c:90:85:26:95:64:05:5c:79:60:bf:c7:11:b9:
         bf:1f:46:48:94:5d:ca:24:bb:20:e2:92:3e:cf:e4:64:e9:03:
         56:e1:8c:36:8e:04:e9:40:39:51:53:df:c1:5d:f3:77:ff:00:
         c6:c5:be:f5:38:33:ba:a8:65:63:c1:90:3b:64:39:b9:da:82:
         6b:82:56:04:6a:63:77:5f:99:29:49:75:b9:90:6f:46:55:f2:
         b6:eb:47:1b:48:47:f1:14:1d:44:d7:db:41:03:1d:6a:eb:b8:
         0b:e3:b8:d6:82:f1:04:14:f0:6b:73:88:1f:35:d2:69:83:4e:
         e7:b3:8d:4a:2b:79:37:fe:61:95:8d:c1:9c:7c:cc:dd:43:c9:
         45:4c:0e:5f:6a:9a:50:78:0a:83:a9:c8:e6:65:0f:39:ba:c8:
         ac:3b:23:00:67:b1:d7:c8:55:cb:f6:f4:23:86:62:2c:87:03:
         b9:97:c5:8d:10:2e:70:ef:dd:d1:62:27:cf:53:f5:b1:90:93:
         fc:7b:fb:87:e9:05:1d:56:9f:b6:17:16:0d:c4:9c:23:61:5e:
         d5:9f:f8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----