Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File:                     icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier:          oOg2sAU18iE73P5Vj4z8k7yDxdfGaFKoumE8c7CmL+k=
Subject key identifier:   5A:B0:59:59:07:16:43:6F:24:86:78:9E:2B:70:82:0D:BB:F7:F8:EB
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer:       /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial:       01962E61AE3163A61E6159E2DD3087E2CC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: CQXzTA89ZIBJ/ooFMVXKridCIpWSQ7fXypi5gpDLbB4=)
                          2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:31:63:a6:1e:61:59:e2:dd:30:87:e2:cc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=5ab059590716436f2486789e2b70820dbbf7f8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:c0:07:92:11:78:bd:22:47:71:0b:bc:44:
                    83:78:b7:9a:3c:4f:e7:dd:0a:80:a4:f6:8f:3f:28:
                    b4:e9:d9:5b:95:5c:4a:1c:60:c8:1f:59:45:d9:e1:
                    bf:ec:f6:3a:09:c9:0f:fb:62:2f:50:08:ad:e1:a0:
                    09:f8:95:c8:ca:df:51:67:fd:da:09:9d:b1:03:62:
                    42:bb:dd:e3:ec:2f:55:02:c8:74:82:35:88:1f:14:
                    4e:53:eb:5f:d5:bf:45:38:c5:71:2d:a2:a2:14:7c:
                    d8:43:2d:77:65:82:54:2e:1b:22:08:de:cd:b9:d7:
                    23:87:63:21:0a:fd:6f:49:60:a3:fd:d6:ad:30:2e:
                    d4:31:8d:6f:b8:6f:38:28:c3:5b:27:4b:a5:18:1e:
                    da:fd:7a:7f:1c:31:7c:08:c8:bb:98:5b:25:87:b0:
                    7b:20:c9:62:70:ba:b0:ea:c7:14:47:ee:48:c1:de:
                    eb:d1:1a:95:e9:9f:b4:79:20:ef:ff:f6:c5:24:f8:
                    7f:67:5f:5a:45:84:07:5c:44:0e:5a:6f:f0:17:61:
                    b3:2b:37:3c:43:1b:89:d7:c0:85:aa:b8:cc:f2:f8:
                    a6:0a:b3:39:c2:52:e5:2c:25:1a:b7:6b:71:47:be:
                    c9:f6:61:b7:36:db:5d:03:52:79:b5:80:d3:d1:21:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:59:59:07:16:43:6F:24:86:78:9E:2B:70:82:0D:BB:F7:F8:EB
            X509v3 Authority Key Identifier:
                keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:44:3a:b8:54:20:8a:ed:c2:26:93:3b:da:c7:39:09:a5:6d:
         39:73:34:3d:8c:43:e2:16:61:ae:6b:99:df:c9:4f:63:df:c3:
         6f:9d:e0:d7:af:1d:4f:14:be:2c:67:f7:8f:09:07:70:1f:80:
         ed:ee:99:34:1d:c9:59:dd:c0:42:58:fe:0e:f1:69:16:1b:d5:
         f8:38:25:29:dd:93:77:39:12:9e:46:fd:75:5b:89:2a:79:e4:
         7c:7c:b7:29:ab:c4:6a:a5:f1:75:c2:f8:f0:4c:87:cb:86:57:
         4b:e8:4f:b4:fd:c8:69:4b:62:ae:11:42:a9:4c:e6:29:0b:76:
         99:a0:c6:20:0b:36:ac:de:eb:6a:17:99:ec:4e:43:17:8a:b4:
         fb:ac:93:fe:cf:d1:32:4d:ce:54:29:0b:8b:70:7c:bf:f6:c1:
         05:89:4d:d9:bb:f1:d8:6a:4a:ba:19:d0:6a:77:97:2f:e9:4c:
         f9:53:c6:84:aa:46:53:fb:fc:80:10:bc:5b:0e:79:6e:4d:8c:
         e0:10:68:79:7c:f5:e4:69:d7:5c:0b:51:8a:9d:f8:23:b9:4b:
         f7:8f:05:a7:41:55:09:e7:83:33:c6:c9:ea:a5:93:8e:6c:f2:
         84:6c:c9:05:af:a4:1f:44:b6:2c:c5:98:63:62:c2:02:38:7e:
         a4:99:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----