Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File:                     IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier:          fhF89vAoe/lxgQM2UzN/oMx2aQDJfPwQ+adACEkBM3g=
Subject key identifier:   41:98:54:20:7C:FC:40:D5:A8:9D:0A:A7:E6:0F:A0:A9:FB:24:13:50
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer:       /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial:       01962F06D6D9F08941FA4CB8B44EC502270F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number:          0FAB
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: 2WwnWTxLVfDEHhHi0Za27YrjDIIlnEtvZT9h25Tfh1o=)
                          2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:d9:f0:89:41:fa:4c:b8:b4:4e:c5:02:27:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=419854207cfc40d5a89d0aa7e60fa0a9fb241350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:b2:45:6b:5e:e5:93:0c:0b:c2:29:05:5c:
                    f3:28:fa:a7:14:60:fe:26:a1:2d:66:49:0e:a0:0e:
                    69:35:7a:d6:67:dd:47:61:d9:03:d3:c2:53:6b:2b:
                    b4:ea:c7:79:f5:3f:30:cc:a6:71:a8:3f:9f:8f:e5:
                    55:99:7d:0d:e9:a1:6c:36:ba:bc:e8:2e:dd:59:cc:
                    6e:bb:7d:f5:17:89:32:0d:c2:bb:bf:3b:9b:da:66:
                    ee:51:6d:10:cf:83:ba:cb:89:a0:11:e7:86:56:50:
                    72:e0:ab:a6:e8:64:cd:c9:3f:c7:bb:fd:94:69:d8:
                    cd:6a:bc:3a:fa:f1:d0:2d:8d:a5:f3:3d:6d:41:6b:
                    0b:d6:17:df:11:57:a7:54:9b:11:41:65:22:e0:01:
                    55:7c:ad:e8:95:b0:98:09:85:72:5c:34:5e:08:b8:
                    7b:c5:a7:f4:a2:e9:56:b8:25:cd:93:c0:cc:ff:5b:
                    bd:a9:27:16:4d:fd:d4:c8:aa:f1:73:af:0d:06:c4:
                    e5:cc:f4:47:97:a3:e4:c5:5a:1b:a5:a8:f0:a5:a6:
                    5b:4c:58:d6:c4:27:2e:a4:08:7f:34:37:cf:b9:3d:
                    89:ca:d8:b3:8d:65:4d:ce:97:f5:3a:6a:f9:d9:37:
                    a6:e8:d1:ac:c0:36:34:c1:df:ba:75:68:80:60:d6:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:54:20:7C:FC:40:D5:A8:9D:0A:A7:E6:0F:A0:A9:FB:24:13:50
            X509v3 Authority Key Identifier:
                keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b4:38:be:38:ca:a6:fa:35:b2:f4:96:0d:5d:ea:46:2d:40:
         09:c7:ae:3d:62:93:63:15:04:02:50:21:7f:e7:5a:5d:ba:a8:
         c6:93:4c:ef:6e:41:cd:ca:88:80:5f:68:53:d1:c4:28:ed:c6:
         a6:f7:9c:5c:35:58:d1:80:ae:01:d9:b2:7b:ea:96:02:ce:47:
         3a:de:50:f8:96:0b:5b:5a:d0:4e:6f:4f:4b:dc:d1:d5:4f:5d:
         65:0c:9a:57:a1:99:00:7d:60:1f:08:fc:e2:d1:3b:09:ca:33:
         b0:0e:32:67:e0:22:b2:e9:dc:ad:d9:36:09:5f:98:a8:ca:71:
         ed:d5:99:36:4c:0d:9b:26:b8:0c:47:06:b0:9b:83:c4:38:d4:
         6a:8a:fb:3a:33:a7:62:d2:be:f7:7a:aa:f5:ad:68:48:82:2e:
         57:76:ae:cd:8d:51:58:83:24:36:fa:aa:bc:44:93:91:a0:cb:
         91:78:2d:f2:19:f3:59:58:39:d3:ba:fd:2a:cc:2c:d6:4c:5b:
         02:c9:80:05:07:41:be:a4:30:30:a6:6a:72:9e:0d:d3:93:ab:
         ee:97:74:49:a3:bc:58:18:8f:3e:9f:27:ec:2f:ed:91:ef:00:
         c0:56:4a:79:32:c7:61:f6:30:ee:71:59:d8:8e:cd:57:21:f2:
         5c:9a:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----