Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          rW4MnvzKfaHagePcHzyJuhsNlchHndOLkNQ3vPKka5o=
Subject key identifier:   98:16:25:FB:BF:FE:5C:FD:87:04:AB:80:7C:02:19:F2:23:B8:F2:E7
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       0195E0465C0507FA962C7A20C618C340E14D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 05:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:02 +0000
Files and hashes:         1: 1OpL7R1BVF30eYquogWaFw9Zjpg.roa (hash: 5HBfkLhlNjgyPTg16npPx/gVvuAnNfr9yckXUxVoyH8=)
                          2: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
                          3: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
                          4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: RxQgaVqL6EKJEBi34mosFBJcRlfj42AqE7WNas9M5yE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:5c:05:07:fa:96:2c:7a:20:c6:18:c3:40:e1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Mar 29 05:01:02 2025 GMT
            Not After : Mar 30 05:01:02 2025 GMT
        Subject: CN=981625fbbffe5cfd8704ab807c0219f223b8f2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:94:fb:5c:fd:44:46:1e:75:5d:e3:20:b4:
                    b6:f0:5b:02:eb:22:e3:2f:b4:d9:76:15:af:77:56:
                    35:4a:a0:fc:7d:b3:97:ad:28:90:c9:b4:6d:72:06:
                    8f:51:35:bd:40:c3:5e:68:d2:f6:c7:a2:99:f8:6c:
                    dd:3b:d5:63:f5:1b:18:97:1d:28:9a:16:9d:63:97:
                    d9:8a:0b:5f:12:65:4d:50:1f:f3:f7:18:b5:9a:d9:
                    34:2e:87:7f:f8:db:2a:dd:57:67:c9:50:de:e7:1d:
                    a0:1f:09:e5:f4:32:bf:17:13:28:e1:02:a1:f9:22:
                    40:21:02:c3:99:a2:ef:9c:1e:79:c5:5f:8c:98:80:
                    68:5a:0d:af:2f:91:c8:94:29:47:17:39:2e:50:01:
                    a9:46:e7:d1:93:99:fe:e3:a4:59:be:fe:56:25:0c:
                    54:b8:67:08:22:3e:b7:02:ae:9d:8a:55:f2:c5:2a:
                    c9:85:45:dc:cf:17:64:7f:54:ce:ec:51:e1:6d:2e:
                    d3:bc:e9:c7:cd:df:00:e9:96:51:f0:f8:a8:c7:4a:
                    21:80:5a:81:8d:07:6e:f0:f3:fd:67:b1:1e:00:8a:
                    87:9d:63:4c:af:b7:6a:9b:df:a3:4c:ed:47:f8:4e:
                    92:7c:26:e1:71:8c:c6:ac:da:c9:70:dc:f9:8c:35:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:25:FB:BF:FE:5C:FD:87:04:AB:80:7C:02:19:F2:23:B8:F2:E7
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:79:bb:53:e4:4c:63:fb:ce:00:de:06:60:b8:75:06:4a:92:
         3e:9e:eb:ef:4c:ca:bd:fb:26:12:88:3b:eb:42:3b:a1:8e:65:
         34:7f:2c:a2:22:be:df:14:39:e8:da:d2:5e:05:64:83:79:8f:
         21:7f:3b:2c:48:a6:f6:6e:04:99:4d:68:85:e1:48:11:c3:c1:
         30:51:3d:4c:e9:e2:e5:18:ab:36:5e:7e:b7:77:6b:71:83:fa:
         9a:c2:e7:39:88:63:db:10:80:24:6b:4f:2b:a2:f6:48:0d:58:
         70:0d:c9:e8:12:22:da:04:83:23:ff:7b:91:26:23:2c:74:81:
         76:67:0f:9e:fa:8a:58:c1:40:5e:9b:8f:a5:97:93:11:36:32:
         68:11:e1:d1:3e:70:91:18:c3:4c:38:b3:11:29:84:3e:d0:80:
         26:d2:bf:6d:c5:b5:7d:0b:5e:bf:23:88:11:19:18:f0:c4:2c:
         d4:ac:12:26:dd:98:31:2c:dd:17:d2:65:ac:1b:69:7a:f6:80:
         fb:d4:03:e2:27:22:cc:9e:a0:5e:e9:53:fc:4d:f7:ff:1d:3c:
         ee:e0:56:39:4d:84:3c:df:f7:98:b7:bb:af:03:7a:b6:84:8d:
         85:d6:20:78:70:9b:cc:b4:7d:00:0d:fd:c0:b6:44:78:8e:ae:
         b0:49:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----