Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
File:                     Icc6XY7GO-1lijj1wm8ZH91035I.mft (raw, json)
Hash identifier:          ezQcqGTJts29VPHygyB/Jowqb/Qm40sxn+eN0ZOONtg=
Subject key identifier:   3F:B0:D1:A2:E8:E4:1A:8B:86:75:B7:EC:B1:8F:58:45:A3:C3:4E:EB
Authority key identifier: 21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92
Certificate issuer:       /CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
Certificate serial:       01962F06CE655EA22C446546A1BA181D0A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 745x39IaKKbeM9M_OPciAoFxiI4.roa (hash: rIEFd72FIecG2+TT+EkabaQ2rf6+UODC9a0hMUMdVO0=)
                          2: Icc6XY7GO-1lijj1wm8ZH91035I.crl (hash: ectgoJfTH22ea+sMYUr3MI3SOrxuAxcyvSf3ImdHbq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:65:5e:a2:2c:44:65:46:a1:ba:18:1d:0a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c73a5d8ec63bed658a38f5c26f191fdd74df92
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=3fb0d1a2e8e41a8b8675b7ecb18f5845a3c34eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:07:dc:51:35:fa:d9:2b:6e:d6:6d:1b:05:
                    33:c4:df:28:cc:38:4b:8e:77:17:e0:80:5f:55:9a:
                    97:a4:e6:25:97:77:e6:22:7b:d5:5e:7c:e2:8e:1b:
                    42:30:2f:1c:a8:c6:df:bf:da:ae:e6:5e:3b:1d:7a:
                    8a:b8:0f:09:3b:95:dd:7e:57:29:78:53:23:19:24:
                    35:49:68:2d:8c:d3:f0:cc:75:f0:dc:81:bc:86:41:
                    7e:a3:e4:31:a5:19:d6:45:f3:e5:00:04:1c:58:ee:
                    1f:a3:a4:e1:67:b1:aa:22:3e:4e:62:be:64:d7:cc:
                    91:71:46:48:43:44:6e:15:b8:0f:42:e5:c6:24:02:
                    29:49:ed:f4:c8:70:33:99:9d:78:c0:bb:85:dc:3c:
                    0a:c1:81:ea:d6:52:12:dd:82:ac:48:2b:16:d8:8e:
                    ef:c9:87:40:74:fa:27:47:6b:d7:b6:f8:54:9d:49:
                    4d:2c:76:05:22:fd:99:ff:00:1a:2d:c5:74:84:7c:
                    79:ad:2a:f3:0c:24:90:3d:61:f9:b2:21:5a:d7:03:
                    48:a0:8a:78:75:6d:be:95:52:31:4e:bc:1b:e0:91:
                    be:47:b8:b5:5d:20:c4:26:dc:2e:a3:9e:38:68:9c:
                    15:73:ce:e9:d9:5d:b2:25:1b:f7:4c:98:01:ca:38:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B0:D1:A2:E8:E4:1A:8B:86:75:B7:EC:B1:8F:58:45:A3:C3:4E:EB
            X509v3 Authority Key Identifier:
                keyid:21:C7:3A:5D:8E:C6:3B:ED:65:8A:38:F5:C2:6F:19:1F:DD:74:DF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icc6XY7GO-1lijj1wm8ZH91035I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f850ec-9954-485c-aa0b-fd120c31da72/1/Icc6XY7GO-1lijj1wm8ZH91035I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:47:b9:53:ad:bb:46:f4:4a:e7:ff:fd:61:66:9a:9f:2b:36:
         a2:89:43:2d:58:70:76:cc:45:b8:31:5d:63:0c:dd:81:6b:a3:
         a5:f6:29:c4:18:35:a9:53:1c:a7:22:28:cc:27:a4:88:90:96:
         c0:84:e0:48:b5:4e:26:89:09:f9:95:8e:68:3c:c3:16:ef:9d:
         c3:f3:e9:7e:34:3c:d1:1e:43:c9:8f:41:c8:ec:34:10:3f:c5:
         b9:d2:0a:2e:9d:cc:ac:7e:20:aa:cd:5f:2f:4b:f7:6f:58:43:
         65:db:9c:88:45:05:9a:a2:01:89:6c:d5:53:38:af:26:67:e2:
         69:83:99:62:b8:f5:23:b5:a2:1d:d8:34:12:9a:e3:89:1a:4f:
         8d:0f:93:f7:1d:02:df:14:ed:16:52:1c:fd:9a:09:70:2b:67:
         74:67:78:65:ea:45:8d:cc:51:34:75:f9:7d:56:86:6e:41:f6:
         5d:71:16:49:d4:a4:6a:27:c6:3d:0a:f4:74:7b:7a:9e:21:1d:
         35:0f:d3:ce:bc:30:4b:6d:9c:4c:ef:0f:34:01:8f:05:ee:bc:
         d1:f6:65:66:ec:ac:5e:0c:fc:81:40:04:de:51:27:66:e7:03:
         f1:bc:15:ef:16:cb:8b:f6:7e:44:b4:6a:8d:fd:a1:08:dc:13:
         72:9e:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----