Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          CJ/hTPy1+aXkMyS3Dib6e6n4Ez2Qsm+JHAOQseVjNDc=
Subject key identifier:   B5:30:F9:AF:18:1D:11:80:6F:DB:B1:54:3B:A8:2D:4A:45:8E:68:4D
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       01962F7431AAE17A9CA69F00924A2614961C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          120B
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
                          2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
                          3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
                          4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
                          5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: Oh5ZWyGaf9t6aiqAtQZAL7bM1d2Ks4Dm86WHloO1l9c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:31:aa:e1:7a:9c:a6:9f:00:92:4a:26:14:96:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=b530f9af181d11806fdbb1543ba82d4a458e684d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:c7:b7:1b:51:d1:4c:b5:3b:d6:42:28:2c:
                    0a:71:75:a7:23:c0:c8:94:21:ea:cd:1c:84:66:92:
                    6a:d8:de:07:0c:e4:64:33:ef:2b:b6:50:c9:3a:e4:
                    88:42:8e:63:ab:75:1b:e7:f9:22:9e:91:73:3a:fb:
                    e4:9f:d0:fb:b9:fa:32:06:a5:fe:8c:79:46:a3:87:
                    5d:df:0a:ec:00:0c:2b:92:46:af:7b:98:1c:36:e9:
                    5c:d3:53:04:8c:b4:f0:6a:aa:1f:42:df:97:4e:8f:
                    05:2d:4c:1d:6f:44:98:0d:85:22:da:23:c2:5b:f5:
                    0e:bd:da:7b:62:5f:16:54:de:68:d6:ab:ad:7f:33:
                    0b:99:20:9a:67:8b:40:df:c9:2a:46:47:bb:4c:c7:
                    21:c9:e4:5f:c0:2e:85:3e:eb:87:35:bf:09:d1:14:
                    5f:db:e8:77:25:f6:c2:47:64:c2:04:59:6d:04:56:
                    a1:35:11:78:2f:02:04:ed:b2:2c:c9:33:44:69:5f:
                    82:ca:e3:76:ca:59:45:1b:8c:fc:af:7c:8f:90:de:
                    28:88:c9:02:87:81:37:6d:42:38:e4:35:48:10:3d:
                    ae:8f:a8:8f:ef:05:ba:81:ad:a9:1b:72:2e:ba:97:
                    c0:41:d7:7e:94:5e:70:23:67:04:30:81:31:ce:c6:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:30:F9:AF:18:1D:11:80:6F:DB:B1:54:3B:A8:2D:4A:45:8E:68:4D
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:77:08:39:1f:1b:69:e3:3d:09:27:b3:9c:df:58:07:ea:
         7c:92:70:45:d7:a7:37:5b:1c:6b:70:c6:72:24:35:6d:4d:d6:
         42:eb:23:a0:af:58:11:e3:a5:38:3a:71:b7:cc:9e:78:81:a1:
         25:ed:9d:5e:5f:9c:bf:8a:df:a1:bc:ae:2f:ca:a1:e2:71:4f:
         24:97:b2:d6:e6:6e:9e:f9:5c:02:91:2d:de:50:dd:1f:20:25:
         f1:45:b3:ba:0b:8f:fd:f4:4c:5b:26:c9:72:0e:99:95:76:a9:
         a6:05:a8:9a:88:ac:17:ce:05:b5:8a:a1:cd:c9:8e:b3:7d:02:
         35:fd:3a:0c:2e:b9:cc:06:55:c7:c1:a7:62:e2:40:c7:c9:37:
         e9:5a:b6:ec:c4:49:bd:d3:fa:52:26:67:94:09:83:4b:f7:fe:
         11:d1:15:6e:91:5f:4d:39:18:b4:de:a2:fd:bc:a6:39:63:92:
         96:f1:ec:fe:fa:70:22:f4:34:b5:0a:34:0b:7a:63:3c:d8:a9:
         57:31:23:6a:60:8f:7c:f3:15:a4:ad:6e:2b:30:16:3f:d9:ef:
         86:49:c9:95:03:6a:39:57:18:e5:54:fb:e9:af:76:c1:45:0e:
         2e:4e:82:28:b1:b6:b0:77:13:b2:7e:47:35:d3:d7:e4:7e:be:
         3c:1a:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----