Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
File:                     Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft (raw, json)
Hash identifier:          zS3y4ZX66aR6qNOgOLbYVoA8ecvmdM4b8GW00j2GLb8=
Subject key identifier:   01:BE:89:1B:AA:E2:75:B7:82:F7:66:A3:FB:AF:8D:69:2A:D7:C3:E5
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Certificate issuer:       /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial:       01962FAB66F779B228A7DDE7640DB7910FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft
Manifest number:          13BF
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl (hash: IVV/KIUm8bJ4tEmxw802AFWeSX/8r23/Ey7TXqUX8kk=)
                          2: rRTGMxhiOpV_X766sLDj0H5s3lk.roa (hash: Fk8zZgs5ltomuLpQlhRuRyNBCQpASYJvnVS5AQLwlOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:66:f7:79:b2:28:a7:dd:e7:64:0d:b7:91:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=01be891baae275b782f766a3fbaf8d692ad7c3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:a9:63:56:ad:25:5f:e4:5a:84:49:b9:1e:
                    5f:c9:70:73:41:a6:b1:52:1e:a2:a4:1b:04:98:39:
                    6b:e2:1e:79:f8:6d:8c:ce:7a:c1:f9:90:76:9d:51:
                    77:36:71:7e:cc:8c:a7:b5:ab:17:b9:8e:cf:a7:7d:
                    a8:20:27:ba:b0:56:ed:e7:0d:2d:00:40:2f:d1:f7:
                    e3:8e:17:ac:4b:a8:ad:39:08:cf:09:79:ee:92:e8:
                    e9:5f:9f:d6:28:64:36:e3:ad:a5:15:8d:bf:f2:46:
                    13:dd:28:04:a9:b9:34:3b:38:09:0c:86:6a:fa:c4:
                    12:75:da:bb:4c:ed:c7:4d:35:ce:a1:5d:f3:04:f9:
                    eb:ee:ad:af:6a:53:1c:f4:a0:c4:df:60:f8:a9:22:
                    80:c8:e7:c3:71:cb:cc:24:aa:2e:ef:ed:a8:6d:ec:
                    89:0d:87:96:a2:45:42:cd:c1:a5:56:71:d8:25:e0:
                    bd:04:fe:f0:85:62:e8:da:ef:a4:aa:59:8c:81:ba:
                    2e:74:5c:e3:da:9b:30:44:18:65:fb:2c:e2:8d:55:
                    2a:55:88:6e:07:5d:de:ed:63:7e:47:ed:fb:2d:8d:
                    5c:ca:2f:cb:5f:b1:b2:10:d1:7b:38:58:9b:3c:5d:
                    ed:ad:f4:16:51:52:43:f6:a0:ea:42:a6:17:d0:c1:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:89:1B:AA:E2:75:B7:82:F7:66:A3:FB:AF:8D:69:2A:D7:C3:E5
            X509v3 Authority Key Identifier:
                keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:65:3b:e7:85:a2:ea:7b:0f:8f:15:ed:cb:8a:43:3a:d8:
         85:1e:e5:69:ab:a1:3c:69:45:d4:db:2a:a5:d7:24:78:f0:18:
         b1:45:30:9b:ea:56:a4:37:88:f1:92:65:02:45:63:b6:3f:eb:
         9c:7c:c9:b9:ac:0b:a1:c1:9f:89:a0:ad:67:50:04:8d:de:00:
         2e:68:5c:8d:f0:11:4a:a7:94:e6:dc:fd:13:d1:18:24:bb:63:
         af:53:40:26:77:e7:ad:8e:aa:d5:09:a3:c4:ea:8a:10:7b:85:
         84:68:dc:6b:26:ea:8e:2f:e0:28:9f:12:64:b9:aa:74:d1:ef:
         a6:58:6c:37:65:e6:4c:f4:88:e8:07:40:4d:e2:12:d5:55:e0:
         27:96:a6:cb:4c:19:05:6e:7e:6f:d7:e7:60:ba:71:ce:08:32:
         99:50:92:d9:22:88:94:df:e9:f8:37:31:9d:ca:ca:50:65:2a:
         77:0c:6b:2b:7a:8e:77:65:89:cc:2a:a5:bb:f0:71:f7:c6:e4:
         47:0c:3f:c8:eb:e7:de:01:91:44:f9:a4:cf:9d:98:18:d9:13:
         3d:f9:9a:1b:20:34:39:b3:1a:2f:59:fa:c7:41:41:cc:10:b3:
         4c:72:96:b0:c6:e2:f8:65:f0:18:e4:25:b3:fe:a1:92:af:3a:
         e6:81:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----