Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File:                     KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier:          bhPj5HYjEs7aJmqaG8jVVj4rxHLh6fC+PJGgpBWedTY=
Subject key identifier:   90:A9:01:B6:2B:9A:49:66:0B:8E:21:FE:0F:3F:9B:C7:A9:3E:72:AF
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer:       /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial:       0195E046669A3061DAD47ADEF0C6BCDC647A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 05:01:04 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:04 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:04 +0000
Files and hashes:         1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
                          2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: rUDE/YvWiEfMlzO07qVHd5W2QKom+Q06fnBM7qxrt7U=)
                          3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:66:9a:30:61:da:d4:7a:de:f0:c6:bc:dc:64:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
        Validity
            Not Before: Mar 29 05:01:04 2025 GMT
            Not After : Mar 30 05:01:04 2025 GMT
        Subject: CN=90a901b62b9a49660b8e21fe0f3f9bc7a93e72af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:b8:d7:a8:49:2b:7c:d8:b9:be:2a:1a:3c:
                    47:f4:48:7a:b8:06:aa:43:b6:ac:1b:d9:32:27:ed:
                    5c:7e:d3:04:ce:b5:48:fc:a4:b1:f9:93:b9:99:52:
                    73:47:8c:2b:c6:e2:5d:b9:fa:7e:3d:a6:bf:3b:44:
                    b8:5e:f4:1a:26:51:b7:4d:2b:24:95:fa:fc:c1:11:
                    5c:0c:f9:0a:e6:8e:4e:fb:ed:7b:7f:b5:ff:9e:0f:
                    8f:40:c7:d5:2b:4d:91:7a:6d:e6:d3:8d:f1:e2:60:
                    8d:8a:55:b5:54:e6:12:9e:06:26:61:43:a2:60:5d:
                    a7:1b:63:18:5b:5c:b2:a7:f9:84:d3:32:96:eb:71:
                    ad:15:3a:66:53:b5:60:e8:87:1f:dc:3f:8e:5c:78:
                    81:04:de:b8:60:a0:57:df:6f:af:e7:1e:cd:d8:b5:
                    17:5c:35:c5:ea:65:06:4b:27:fb:17:8b:4b:94:f0:
                    cb:04:a6:81:58:20:94:a2:fd:93:07:2e:59:7b:e9:
                    10:be:38:bb:33:f7:d6:74:fb:34:ad:59:8b:cf:0a:
                    9b:6d:3b:7a:ba:2a:19:d9:51:99:9d:5e:2a:d0:3b:
                    48:c6:bb:5b:e6:0e:67:f3:65:de:5c:a8:0c:dc:04:
                    7b:ea:25:8f:70:cb:e3:84:60:86:3d:dc:49:36:6b:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A9:01:B6:2B:9A:49:66:0B:8E:21:FE:0F:3F:9B:C7:A9:3E:72:AF
            X509v3 Authority Key Identifier:
                keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:77:d4:45:32:76:a1:81:c5:8e:c9:22:be:0f:8b:82:68:
         bf:7b:2c:d9:e8:17:9a:d2:e3:10:49:e2:03:b2:f1:13:53:60:
         a4:02:32:fb:c9:38:75:d9:e0:f1:37:36:a2:a0:d6:e9:6b:e0:
         2e:c7:e8:a4:c1:9e:29:91:b6:36:7f:95:12:92:94:27:fb:20:
         b4:66:fb:ee:c4:37:9c:2a:a5:f4:7e:94:05:a8:50:84:05:53:
         4a:ac:06:93:ba:2f:de:f1:e7:ac:9a:90:9e:13:ad:be:28:43:
         20:76:de:3f:73:89:73:16:c6:25:55:d6:bf:8d:a4:fb:2f:87:
         6a:0c:d0:ba:2e:b2:90:70:af:eb:11:ff:c0:bb:54:ce:8c:08:
         49:4c:65:c8:01:bd:24:b8:f6:e1:f2:e2:45:db:aa:e5:14:fe:
         33:ed:09:27:4f:3e:23:5c:bd:7a:0a:21:4a:c8:60:24:1f:58:
         c6:61:1e:fb:24:27:0d:4f:8a:da:f6:69:14:60:c7:47:6e:b2:
         23:83:64:b5:c9:9e:5d:d0:1e:e6:4e:3d:d1:38:55:fc:50:c9:
         d2:6b:5d:0f:74:51:08:33:36:c7:20:1b:dc:b2:70:32:08:ce:
         f8:be:ef:d0:1a:97:ef:b2:33:fd:cc:93:be:fb:ee:b4:69:53:
         f6:c8:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----