Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
File:                     KseP1RenX3fz9P0imsXmcyVgxuE.mft (raw, json)
Hash identifier:          Me+/zP7nL+l3dU6Eg8U8S4Hn3NizDsCf3IkP/GsD0QE=
Subject key identifier:   7A:28:90:6D:C4:12:68:E8:E7:E6:F6:B1:FA:C2:F7:8B:45:71:06:09
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Certificate issuer:       /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial:       01962F3DC81456D726E7C18BBB2D65CAD6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: IgyiZQsGF35ZpqMjFvvmpe-Uiy0.roa (hash: pAyIL1yLWM74WtAtlIRzPUKtL/NRSv2opfBvsE4P7Hg=)
                          2: KseP1RenX3fz9P0imsXmcyVgxuE.crl (hash: ucDyOUdPrGMf6aDdNnSW3L9mrb3qpIRly0jr/BJkhuI=)
                          3: LQeosQtAPfSnVgSVDz2OO819_2c.roa (hash: Tkr19vAUAWlnJvYoR9UT3slqIpIAZEXQA2P0LTiz6vk=)
                          4: RCGJFAFAV6aiMpIUxmySWlcVGcg.roa (hash: QvC8yM0b6tNvgcZ8K0setdROoeG+A+pCENVWYJBxdUY=)
                          5: TG0C9piKaVRjDBAoOKXP984iuIo.roa (hash: EaPKdJGvcjOx3gx7VBDHr9Ib+3e6fswqULU49tGRtHE=)
                          6: W8cH_RfNNK2PVtZ4dkQnNuqrxnc.roa (hash: 7tsNb5ZcCAlwiASwz40Hk6RbBRk52zjaoiAuvE/+RQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c8:14:56:d7:26:e7:c1:8b:bb:2d:65:ca:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=7a28906dc41268e8e7e6f6b1fac2f78b45710609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:f6:fe:43:2a:9e:d6:68:58:9f:b7:f4:f4:
                    f8:9d:c5:86:ac:06:b8:e8:af:66:6d:d6:4b:ea:cc:
                    3e:70:e7:82:00:f5:4c:6a:bb:55:f3:d7:9f:5a:25:
                    6e:cf:4a:de:7c:b1:56:ef:eb:4a:04:dd:2f:12:56:
                    ed:0a:1f:2e:77:96:82:b3:3d:4e:66:a1:56:b1:c1:
                    0e:1c:cb:2b:7a:8b:14:4e:7f:3d:cd:df:6e:b1:d5:
                    a0:97:a7:a9:e2:08:0a:ab:c4:86:14:c6:09:62:0b:
                    81:0b:cf:3f:b6:f1:fd:06:2e:95:8e:55:6c:12:e7:
                    a5:cb:4d:0a:df:b6:ec:d9:9c:0c:49:e0:a3:08:1f:
                    03:f1:88:b8:1d:90:86:53:d3:cc:15:b4:8c:a6:3f:
                    b9:c1:62:d8:30:b1:e5:3d:ca:63:b5:61:79:d8:1e:
                    ec:f9:67:af:51:45:0d:72:61:31:23:30:87:71:c4:
                    b2:1f:8d:b4:74:5c:83:6b:e5:15:66:eb:6b:dd:ae:
                    70:25:74:25:9c:f1:11:90:a7:6e:dd:64:04:63:01:
                    f4:7a:1e:c8:70:59:d4:b7:59:64:b5:08:b5:6a:68:
                    25:02:ac:06:6b:37:52:ce:e8:14:1f:f0:56:03:59:
                    fa:9d:f2:65:cc:07:b2:fa:29:a3:bc:48:3b:27:06:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:28:90:6D:C4:12:68:E8:E7:E6:F6:B1:FA:C2:F7:8B:45:71:06:09
            X509v3 Authority Key Identifier:
                keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:1d:1c:08:44:71:39:c2:6f:aa:77:66:87:09:b9:0b:19:
         a1:bb:92:d8:83:cf:13:1b:aa:c8:e2:4f:04:83:3d:a9:14:f2:
         68:49:ae:60:6b:68:6f:25:fc:73:4f:cb:ae:44:62:b3:a8:d6:
         8c:51:dc:9a:35:c6:99:35:db:55:76:f8:97:82:62:ac:f2:1f:
         ee:46:f4:04:7d:c6:93:23:28:24:42:a7:b6:18:06:56:b0:a8:
         71:d7:52:9f:70:7d:db:16:06:48:e9:31:fa:b8:2b:d1:28:e7:
         cd:82:e0:30:7f:a3:48:fb:23:44:d0:6f:5c:87:1b:6e:d1:e8:
         8b:e0:24:78:8b:98:14:21:6b:7f:19:96:9b:4b:bd:45:bb:be:
         e8:c8:48:f6:eb:c4:68:24:c0:be:4b:0d:18:b6:af:d5:fa:8e:
         c9:90:22:77:78:8e:ed:56:02:e7:59:99:ce:c3:44:d3:b2:7d:
         bb:16:7f:b9:58:ce:19:15:a7:c0:42:3b:1b:8d:cf:7a:cc:67:
         94:3f:2e:7c:3c:37:3a:39:2a:c5:58:f7:37:fb:ef:d6:e4:ce:
         07:1c:15:84:9c:49:38:20:2e:bf:6c:65:8e:de:f1:e9:37:20:
         2f:72:a2:f1:b7:2f:1a:0c:05:e5:02:7c:12:2d:c5:1e:1f:88:
         39:6d:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----