Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File:                     Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier:          edWT8jp7LfFYuxGD3cpetZNOEN7g4M6IDgHlccA+Y7w=
Subject key identifier:   2B:58:3C:F5:83:90:99:9D:49:41:07:2B:0E:E4:26:6F:DB:F1:22:59
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer:       /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial:       01962E61D047CB8ED8E0F9E998BB3ECB5B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
                          2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
                          3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: w0V2MEN+D5Hou92KF9mqbsa5cJYl7bR3kz59DdHl870=)
                          4: XTmTO_VR8CGsSQUzXR_b6tRItaI.roa (hash: aAGwY6esmLFV33DfmVoSFcKKP+O5AjtzbaZ16JWoRuA=)
                          5: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d0:47:cb:8e:d8:e0:f9:e9:98:bb:3e:cb:5b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=2b583cf58390999d4941072b0ee4266fdbf12259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:69:6b:ad:3e:6a:36:9f:c4:f2:7b:14:38:
                    23:d0:0c:47:5c:44:95:e9:c6:b7:1d:a0:82:24:2b:
                    26:71:31:f5:85:3a:ae:4a:00:ff:1f:d0:ab:07:79:
                    4e:06:9d:ef:b9:13:c6:db:36:f1:4c:84:a3:4c:54:
                    17:47:6a:c9:1f:ac:87:f3:9d:02:56:81:dc:79:04:
                    ef:51:f8:84:b7:5d:e9:6a:23:4e:ff:6e:4a:56:39:
                    cc:dd:04:83:24:c1:51:29:5b:76:6f:b0:21:ed:b2:
                    e4:66:3b:01:f2:0a:4d:d0:1b:79:9c:f8:85:5b:69:
                    3f:14:5c:fd:ff:15:b5:65:dc:bc:e1:f6:0d:df:30:
                    68:39:c8:e2:c3:cc:b0:81:a0:d5:f0:c6:7a:d3:fb:
                    05:f2:d5:d0:1b:e1:f1:fe:a7:f8:7e:49:af:22:e9:
                    4e:74:a8:13:d1:25:b5:54:f0:36:fe:24:99:e9:0f:
                    b1:42:22:d8:60:de:78:61:33:7a:df:3e:de:d2:7d:
                    37:d2:d5:1b:40:4a:0e:45:87:b4:89:6f:73:e2:77:
                    a7:66:01:d2:ef:67:65:b3:63:74:1c:34:e9:83:d8:
                    fd:ab:9d:2e:0f:d4:00:43:a8:b4:58:3c:9a:4b:a8:
                    4b:39:cd:8e:78:db:cf:31:20:cd:ca:9c:50:75:e5:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:58:3C:F5:83:90:99:9D:49:41:07:2B:0E:E4:26:6F:DB:F1:22:59
            X509v3 Authority Key Identifier:
                keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:af:dd:df:8b:70:2f:64:cd:43:94:4b:78:4f:d7:b0:e0:b9:
         a7:69:51:d8:b6:d6:72:86:87:52:ee:dd:29:e8:f5:d8:a0:8f:
         e5:e5:ce:20:7c:87:42:ca:e8:3c:86:9e:52:51:0c:1e:03:92:
         b2:d7:ed:51:71:87:eb:3f:ff:7d:40:ef:0f:d9:e6:08:22:6b:
         33:80:c6:31:9d:e1:0a:6c:f3:27:74:a3:19:d1:d0:67:9e:19:
         9f:59:0f:5a:b5:4e:52:79:a1:19:fa:a6:78:46:08:68:71:2b:
         55:fd:85:37:dc:06:45:71:1a:e7:37:0f:2f:a0:85:66:04:bc:
         b9:9d:12:1c:f3:9d:76:90:ae:34:39:b8:13:5c:1d:bc:d7:f2:
         af:11:e7:62:dc:88:1b:6a:da:cc:28:85:0a:41:9d:7a:80:38:
         6b:d8:9b:d4:43:68:3c:be:d1:51:d7:1d:5e:02:97:72:b1:c4:
         12:e7:b9:79:56:a7:fd:f0:1a:7d:6b:55:e4:a3:6d:3f:24:ee:
         11:83:3c:cb:91:86:b5:dc:f6:43:02:00:0b:3c:12:62:ab:ce:
         70:1d:0f:53:02:db:e3:4c:7d:9e:5b:e9:83:b4:10:8c:44:ec:
         23:78:f2:4e:5d:ee:2c:03:7a:67:b6:bf:84:c0:a0:0f:87:aa:
         4d:d9:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----