Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File:                     k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier:          oFMKQGfQccAHg9LEIdpkT4S/1pG4Ucbe/CFhF+iB0LM=
Subject key identifier:   5E:11:5B:07:2C:D5:0F:81:B7:F9:37:CE:DF:D9:AB:DB:CF:07:C7:40
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer:       /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial:       01962ECF6CF0696BB90BA70FCF9B163DFDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number:          0299
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: Oo15GTcnGxdams7W8SOqY2Tu3KQ.roa (hash: SPZrYYn8eR1ANpkKzJitLECRyTeQovVBfhYuL5RMBfU=)
                          2: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: PJ5GPnZmmIBdknGHytCkbfSXpsIxJYlyiLKS8xJgN7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6c:f0:69:6b:b9:0b:a7:0f:cf:9b:16:3d:fd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=5e115b072cd50f81b7f937cedfd9abdbcf07c740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:c1:eb:22:a5:fe:2a:b5:62:a0:a2:82:8b:
                    b4:ac:56:8c:c0:b5:55:0e:01:12:72:9f:b6:4b:d7:
                    34:c2:be:1e:bf:15:71:ad:91:54:a1:25:19:24:79:
                    ab:4e:40:b2:22:0b:a7:d9:98:51:5a:64:1c:9f:7f:
                    0f:4d:c2:42:c3:7f:5b:4c:5e:e1:f1:c4:cf:a6:93:
                    56:67:d9:30:41:a9:48:53:e2:7e:9a:0f:6b:9d:66:
                    f6:13:43:1c:d9:5f:d2:bd:70:5e:8f:14:b7:bd:68:
                    b6:67:f9:2b:cc:ed:96:bb:c0:8f:b4:20:73:ac:50:
                    c5:24:28:1f:e0:8a:5b:5a:e5:d9:24:15:fd:03:ec:
                    68:f2:63:b8:76:13:7c:c9:9d:c7:09:f6:c7:46:6e:
                    a7:02:b5:24:c2:bc:d6:db:3d:50:1c:20:50:4a:3f:
                    40:09:26:57:64:f5:69:99:99:ea:66:ce:89:b8:74:
                    18:8e:d2:97:3b:b2:7a:19:9d:52:a4:b1:ff:b3:8d:
                    85:94:47:6a:c7:9d:81:8d:33:1e:af:b7:9c:1e:e7:
                    32:08:48:44:a6:08:fc:85:32:c2:f7:10:bb:ef:f8:
                    37:85:e5:fb:90:10:90:26:db:05:b6:9c:3d:8f:4c:
                    cc:83:29:28:ea:3f:2a:c6:32:44:1a:25:bd:6d:9d:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:11:5B:07:2C:D5:0F:81:B7:F9:37:CE:DF:D9:AB:DB:CF:07:C7:40
            X509v3 Authority Key Identifier:
                keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:3e:b4:84:c1:bc:d4:3d:37:4b:1d:2f:11:88:f5:ea:30:
         5b:c0:e4:45:5c:f4:e1:57:df:f8:5f:e0:a5:a0:3e:6d:46:dc:
         e9:ae:8c:bd:04:67:f8:ea:64:60:fe:c7:08:aa:c5:f5:50:09:
         37:ef:8e:8e:eb:16:9b:5c:4f:df:04:3c:3a:fe:f9:3e:37:8a:
         03:68:4b:09:73:f6:c2:6c:37:df:82:b0:91:cf:92:90:f2:57:
         97:eb:f7:6a:8a:ce:f7:5b:c2:0e:c0:94:bc:2a:e0:a4:ee:23:
         66:22:17:66:65:32:b5:6d:c4:a6:e8:42:50:da:95:91:dc:3d:
         03:7c:ca:56:6b:20:4b:ed:2c:3e:e2:ff:aa:9e:a4:aa:a5:71:
         7f:71:f7:3e:56:f4:ab:8d:47:8a:47:31:9d:a1:a9:90:77:0f:
         93:60:d4:da:b3:94:98:ab:f2:81:0d:9c:6a:70:78:7a:a1:e5:
         2f:c4:e2:3c:3d:75:27:41:23:d5:6a:e0:47:d7:e5:52:73:10:
         f5:76:9a:98:f2:a1:ad:81:f6:9c:ea:3f:2e:2d:6d:74:76:58:
         12:54:81:cd:a7:48:17:76:5b:f6:33:a8:f1:2a:bd:4b:70:c2:
         c3:21:bc:c4:f2:5a:01:47:bf:59:d9:5c:e2:4d:21:e9:29:e6:
         11:84:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----