Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File:                     K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier:          o4a8vUUtq9CmNtF/8A5y8O+DRE5fZ+/lkGvWi1WyYaY=
Subject key identifier:   54:00:A7:EB:A4:BC:6A:81:B8:F8:A5:31:C2:0F:E1:97:3E:8D:48:CB
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer:       /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial:       01962F06BC203CC13EC52F27B7AE1B5BF763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: ImFxqguTjs8pVYC5ryesadS38Z8.roa (hash: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=)
                          2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: v0CJQ2UXO6z6khIdi5PlYfwaTT9n8bg9qpvWtYnXU/k=)
                          3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:20:3c:c1:3e:c5:2f:27:b7:ae:1b:5b:f7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=5400a7eba4bc6a81b8f8a531c20fe1973e8d48cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:46:bb:d0:6b:c6:8b:98:b0:47:a9:54:8f:
                    09:17:be:7a:b2:45:8b:6f:3e:95:96:65:a6:0a:e3:
                    a3:24:73:80:e9:51:08:45:e9:65:6e:45:5c:68:67:
                    dc:63:53:bc:45:98:07:74:62:a8:bb:3d:7b:9b:a6:
                    1c:05:52:90:26:20:55:21:9e:35:8d:82:06:eb:60:
                    2e:57:9a:f3:91:cf:b3:57:06:b9:42:b6:07:d8:4a:
                    d2:45:30:e6:2f:32:1f:14:56:03:73:f3:f5:e9:60:
                    fc:e3:8d:57:d7:c0:13:10:07:15:56:06:51:b6:57:
                    53:6f:85:66:53:e8:a7:82:97:88:0c:85:43:93:db:
                    1f:27:e4:f2:7c:97:4e:a2:c5:67:e9:5b:2b:50:29:
                    ef:04:2a:f3:31:68:5b:0e:e7:8c:1a:b2:23:7d:5e:
                    d4:b2:94:ff:3b:84:86:ac:89:53:a7:f3:b9:85:cf:
                    95:12:37:bf:c6:6a:2a:91:67:03:6b:d2:df:ef:ec:
                    12:89:ac:06:d6:a2:84:eb:2c:83:b7:65:2f:05:71:
                    c3:93:d5:10:7d:16:1f:08:1f:ce:27:4e:22:15:eb:
                    44:33:94:ed:81:b2:78:fa:75:79:02:ea:ca:1f:4c:
                    6c:dc:77:6e:54:c6:2e:55:b2:7f:d7:3a:11:0b:c3:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:00:A7:EB:A4:BC:6A:81:B8:F8:A5:31:C2:0F:E1:97:3E:8D:48:CB
            X509v3 Authority Key Identifier:
                keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0d:6c:31:47:30:69:ad:e1:3d:de:61:09:66:2f:4f:f3:0b:
         ce:1c:6b:1b:81:08:2b:6d:a0:d8:5a:7f:c9:0d:8f:f6:17:51:
         7f:c6:7c:0f:61:44:48:81:b1:c2:df:ec:f6:69:b3:6a:6b:09:
         83:f1:c4:9b:d9:d9:b1:2b:61:3b:96:30:35:73:55:eb:4f:de:
         2f:9f:12:d8:f7:6c:77:63:14:ca:df:18:b3:e6:b1:cf:0a:cf:
         a7:be:36:ba:12:bc:f2:c5:17:7e:d3:14:ac:96:20:ab:c4:93:
         52:20:91:a7:bd:46:cd:ea:87:7a:16:7f:28:e6:1b:c9:fa:e9:
         1c:3a:6e:83:31:3c:7c:17:2a:23:60:46:b4:85:34:b6:f9:97:
         47:de:f8:71:90:9d:4a:a6:b5:91:c3:42:c6:9b:71:c8:6c:79:
         b6:d2:4a:48:6f:e7:1b:be:e9:79:fd:6e:4b:da:ae:e1:89:cb:
         d1:95:40:d8:80:9c:aa:70:17:4f:2b:01:06:85:92:52:d9:bf:
         b9:6a:8d:a4:4d:f1:5f:09:49:d0:7a:67:4c:ad:00:81:d7:98:
         66:bf:63:88:e1:17:8d:30:99:00:30:4a:af:21:9a:12:a8:1c:
         b5:16:0c:e5:84:7a:2a:2d:ff:56:0a:92:ea:ca:04:92:31:58:
         eb:8a:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----