Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File:                     Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier:          DkvC5S/iTuE2sgLXSxP4anMHNVOyhLHgXtftqF/WJkY=
Subject key identifier:   FA:CC:FB:40:B0:B4:07:A7:8A:A5:F7:1D:5E:CB:CA:3C:13:B6:A1:7F
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer:       /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial:       01962FAB9991ED9354116922C09E444B1D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
                          2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 3a4SdEfnIpH/My0bE0wqOFpLHQp8DbrrrnJx/Nq6/BE=)
                          3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:99:91:ed:93:54:11:69:22:c0:9e:44:4b:1d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=faccfb40b0b407a78aa5f71d5ecbca3c13b6a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:9c:c0:81:53:41:30:ca:72:49:aa:c0:64:
                    14:68:9c:1b:01:6e:70:a7:8c:f4:37:69:76:48:d8:
                    6f:a6:ef:0f:a2:ca:ef:f5:cd:85:8c:f6:f6:53:1f:
                    71:fa:48:c9:b8:d1:cc:88:52:f8:bb:42:18:4d:eb:
                    ab:2c:b6:9b:de:2f:bf:16:c0:9d:17:25:4f:49:3e:
                    59:6e:12:9e:5a:68:28:b5:85:cf:1e:04:74:c5:84:
                    02:aa:0d:dc:97:51:ac:60:57:e6:29:45:a8:a5:0d:
                    bf:45:82:4d:e3:3f:59:71:6e:fa:5b:a7:4e:e1:c9:
                    15:d5:5c:d5:c2:08:b4:b4:98:6b:1a:90:c4:95:82:
                    28:04:36:54:e7:a8:ec:5c:a8:d4:8e:e2:10:5e:03:
                    01:c8:d9:bc:12:85:32:5c:28:e7:d9:fe:34:6a:12:
                    1f:5e:fe:65:4c:14:18:83:af:08:d1:62:2b:6c:ed:
                    42:ee:fc:f7:2c:31:b2:2d:2b:5b:86:81:aa:0c:4e:
                    f4:2e:f8:74:38:cf:a7:c3:de:ac:3e:23:44:67:5c:
                    82:0d:e2:64:7a:29:c6:ab:2d:11:ab:b4:71:07:c2:
                    b7:4f:31:5f:5c:22:63:ec:a6:d3:30:fc:a0:f5:86:
                    ce:7b:52:b2:42:61:69:c0:cd:c7:b5:2c:fb:e7:17:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:FB:40:B0:B4:07:A7:8A:A5:F7:1D:5E:CB:CA:3C:13:B6:A1:7F
            X509v3 Authority Key Identifier:
                keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:42:f5:fc:81:cc:57:fe:61:26:fb:ea:7a:45:a4:46:9e:a7:
         c9:03:26:20:58:cf:b3:48:85:58:b1:db:ce:a9:cf:bb:6a:fe:
         c0:ad:ea:74:41:1d:ad:0c:6b:53:98:2c:d0:7a:11:29:40:df:
         31:33:54:9a:30:0b:9f:d9:5f:42:5d:ad:3d:e4:88:35:e6:14:
         a7:e5:0f:36:61:68:b2:f7:b8:1b:4d:b9:63:c9:ca:c5:40:a5:
         24:85:87:49:6f:10:98:a2:19:8a:c8:7a:7d:97:be:2b:0d:cd:
         d6:8d:91:a3:16:31:b9:a4:ab:2b:ac:5b:2f:de:ab:12:02:74:
         0f:23:e3:0b:3c:55:00:ba:cd:62:20:70:37:37:ae:8e:12:d4:
         5e:80:ce:49:06:e3:ed:5e:a0:eb:53:2d:0f:a7:cc:82:00:29:
         80:fc:39:9c:d5:a7:fb:46:a8:ae:75:a2:a7:7a:34:6f:0d:19:
         0a:48:7e:6c:06:55:1e:e3:dc:1f:e0:7b:18:3d:6f:23:3e:72:
         5a:a1:84:42:97:83:3f:0e:ab:3c:ed:67:6f:bc:ea:ef:80:ec:
         3e:05:37:8b:16:1d:97:54:ae:99:3d:39:ae:40:db:b9:b8:f1:
         f9:a0:4a:65:d0:2e:54:15:99:8e:3e:b9:6a:09:2b:68:72:75:
         92:32:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----