Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File:                     IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier:          t+zPB+O/EUVQFSnck5f0K/5N91semTOQzZoRGkdg0Vo=
Subject key identifier:   AC:44:F9:8D:F5:98:42:E5:C7:D1:41:51:7B:CE:DE:6D:0C:AB:1F:47
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer:       /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial:       01962ECFAC979E87965FD4BDBE60343548B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: wxfunOOwn0THVKSEpscRezd69W0G2QptfFZuy9IRVgQ=)
                          2: JEagz34AmrWJSl5tWfv6gEtsLGA.roa (hash: 6ThacyL41jFB75SwEJNS97B98Umjv7cIvZNxvFFSXfI=)
                          3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ac:97:9e:87:96:5f:d4:bd:be:60:34:35:48:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=ac44f98df59842e5c7d141517bcede6d0cab1f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:c5:d2:11:e3:5f:ee:c4:37:74:bf:16:f8:
                    db:5c:f4:11:91:fb:ab:c2:2e:b7:87:5b:98:20:c6:
                    25:25:54:d5:f3:93:25:3e:4b:d3:e0:b5:b5:06:b3:
                    1d:5c:60:9d:be:7a:3e:a4:e9:d3:21:b0:ad:b5:9e:
                    d9:59:e6:ad:fd:1a:a2:19:32:b7:e8:a8:2b:73:57:
                    60:9e:7d:7b:df:73:f1:8f:d3:87:92:17:19:65:0b:
                    c9:10:24:9a:c3:99:f0:4f:08:62:34:7d:9c:24:19:
                    f1:4d:66:68:45:fa:46:6c:1a:aa:14:f8:3d:d7:96:
                    0f:dc:0f:77:12:92:ef:8f:b1:86:e8:6f:67:6f:8d:
                    be:ef:9b:38:e3:ee:32:9d:ef:b9:fa:0b:f3:b7:49:
                    a0:f1:e4:3d:ef:5d:06:21:69:75:ae:9a:1b:c9:28:
                    7f:4d:71:f7:0e:b2:94:69:3e:d6:47:e5:26:91:f7:
                    52:ec:dc:02:18:16:93:f6:40:a8:68:30:34:d7:49:
                    2f:4a:67:d3:b7:6b:85:9d:72:28:2f:e1:f1:68:ee:
                    06:f2:a0:ed:77:65:16:07:66:92:b6:47:91:c7:93:
                    41:0e:6f:59:7e:8b:7b:9b:c3:95:56:bb:81:20:21:
                    e0:e3:82:4e:a5:df:92:9c:23:6f:91:01:ca:31:c5:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:44:F9:8D:F5:98:42:E5:C7:D1:41:51:7B:CE:DE:6D:0C:AB:1F:47
            X509v3 Authority Key Identifier:
                keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:3e:3f:2c:e6:57:f1:4e:c1:28:fe:d9:cf:14:15:ba:06:
         7a:ee:94:12:a5:46:f3:c7:d0:c7:45:f5:9d:7d:f4:4b:03:ce:
         ea:1d:bc:f8:e3:d6:ed:f0:74:29:99:95:ec:77:1b:6f:e1:8e:
         91:ba:dc:16:55:2a:8a:22:b6:60:95:6f:fc:83:06:16:d6:c7:
         27:8f:5b:2b:1c:64:50:24:f4:9f:52:e8:66:97:2a:f0:73:44:
         61:dc:1d:75:fb:38:5e:52:f0:40:dc:0f:be:01:d0:05:aa:8a:
         4a:20:56:18:2e:1e:f2:1d:ca:d3:96:a5:70:c3:27:15:44:c4:
         b9:34:e3:57:17:30:0d:21:1f:ef:6f:b0:ff:9f:42:ce:dc:2e:
         c2:95:0b:9a:b6:d2:e2:36:48:60:be:5f:bf:88:2d:4d:9f:a3:
         57:b3:79:c4:c2:13:8b:83:7e:fa:23:84:f5:54:10:2b:8b:79:
         bc:df:e5:45:2e:fb:12:23:e7:17:fb:48:70:ef:f9:ad:9e:33:
         62:ea:90:05:1c:59:07:b8:a8:cc:79:db:e6:d2:88:1f:d9:b9:
         b8:fb:6c:c9:70:20:de:30:5a:4a:1d:76:d4:b3:6a:0b:e8:65:
         2d:87:dd:9e:50:0b:e6:68:f3:4e:ee:b2:e4:d4:38:35:80:f7:
         78:1f:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----