Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File:                     kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier:          /Rs/T4Dm/wxzCn0lqcUlWPfEQgvmqwshdPkiVgqZ5BY=
Subject key identifier:   AC:17:FE:C3:75:4C:B1:E7:49:CB:DD:D1:0B:86:CA:74:7C:B1:C8:C1
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer:       /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial:       01962F3D2A8B1F74B5CB7B78866560815992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
                          2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: YSANa4/y/VjJsg24bsQT7okku488xkeapUnYa6B4sIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2a:8b:1f:74:b5:cb:7b:78:86:65:60:81:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=ac17fec3754cb1e749cbddd10b86ca747cb1c8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:c6:bb:08:b7:9f:5d:51:3e:fe:01:36:a6:
                    00:f3:3e:57:59:0a:08:55:e7:08:d7:e8:e1:4b:0e:
                    64:74:0a:b6:9a:45:e8:db:79:cf:a6:fa:0b:ed:ad:
                    fd:2f:f5:77:91:6c:9f:3b:b3:3d:fe:ac:80:28:cc:
                    47:81:f3:e9:bd:b2:e3:db:f3:e6:91:0f:e0:d5:57:
                    18:61:9b:6c:33:7c:4a:07:26:ae:09:0d:77:21:46:
                    e0:c1:e8:02:48:f4:61:7e:26:b8:0f:cc:bb:b2:1d:
                    51:52:68:95:a3:12:44:a3:5d:a2:1e:78:ae:78:23:
                    67:7d:02:21:b2:6e:ff:5b:6d:ca:7a:28:9a:30:bf:
                    a5:19:74:0f:87:d8:36:6d:28:ab:66:f9:ea:9c:99:
                    d8:c6:a7:9a:16:e3:e9:df:60:dc:06:69:a8:f6:21:
                    e2:5a:4a:0f:0d:bd:31:16:64:d6:7f:2a:35:2f:41:
                    71:9a:62:89:d2:16:4a:a7:f3:60:fb:24:69:77:79:
                    eb:b3:b8:a9:3f:91:32:61:42:ae:e4:98:c3:15:90:
                    50:86:1f:8f:e6:82:f1:be:0e:b5:df:60:d8:fc:31:
                    38:71:fe:b4:bc:5f:81:53:55:54:38:05:5d:12:99:
                    e2:74:33:4c:38:bf:e4:ad:26:d6:8a:d7:52:3e:f1:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:FE:C3:75:4C:B1:E7:49:CB:DD:D1:0B:86:CA:74:7C:B1:C8:C1
            X509v3 Authority Key Identifier:
                keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:ec:71:77:9b:e5:3d:eb:a5:ce:a4:30:b7:ce:0d:d1:08:
         7c:48:80:36:63:b5:c7:c8:a1:6a:9d:ff:cb:c0:35:f7:d4:67:
         d8:f9:bb:79:a6:24:82:93:bd:23:58:7d:87:9b:4d:4e:9c:0c:
         ad:ca:46:aa:bd:ca:94:be:fb:19:20:e2:66:db:c1:90:81:7c:
         ad:a7:3f:01:ac:a0:fa:42:e7:b0:21:90:b6:b8:d7:c0:f2:7c:
         01:7d:b2:17:99:de:49:34:75:1c:aa:08:da:4b:56:9b:cf:67:
         ad:c9:f4:85:e0:d1:8b:73:68:ff:e2:ab:5c:7a:d5:8c:78:34:
         ae:40:ce:55:bc:6c:e6:d1:1b:1f:37:e8:69:01:b6:1a:b1:84:
         3d:30:10:b9:31:e0:f2:9f:54:46:57:e4:42:41:1f:81:b6:06:
         fa:74:7f:15:f8:a7:a2:b6:5b:fb:8d:c4:27:8c:1b:a2:f2:08:
         84:7a:0e:ba:3f:d4:23:1f:07:2d:b3:8d:9f:19:d5:5d:72:32:
         bf:c8:9c:18:b6:45:e8:f3:63:48:c2:70:3f:6a:c0:01:8f:17:
         4f:df:62:fb:08:67:01:bc:65:99:42:23:b3:da:a5:1f:27:49:
         4b:29:15:e3:5e:e0:c5:39:93:31:b2:d3:d9:bf:12:7b:e8:72:
         3d:5c:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----