Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File:                     IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier:          efFoEQeHIVHsAr6XZGMjzq47onvj1Doco9hzGi+dATA=
Subject key identifier:   BE:C1:87:19:85:3A:0A:E1:04:EE:F9:78:4A:18:42:96:C5:F7:59:B5
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer:       /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial:       01962ECF54A2AEF46A99ECA2158DBA973C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: PCtmCapYduul43vLmMldtkLMuKRl6/3sQ3tTIUDR+Rw=)
                          2: ITkDnxBUCa7czYpTJZyNVLNjyA0.roa (hash: jfV0oxUpYfbneBe41fxD2D9b2Qocc8MoRl7L2nQ2juk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:54:a2:ae:f4:6a:99:ec:a2:15:8d:ba:97:3c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=bec18719853a0ae104eef9784a184296c5f759b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:15:90:0d:ba:b0:f0:0d:79:44:74:30:41:
                    94:1c:43:79:71:b8:19:2a:e7:e4:f1:25:52:32:bf:
                    ec:36:5f:1b:84:23:69:d2:e4:8b:7e:26:af:db:98:
                    bd:e6:1f:8d:c8:3d:8c:6d:dc:ab:7f:fc:0b:43:91:
                    d1:3e:fd:6b:13:f9:76:37:de:67:ce:d3:7e:9c:f5:
                    16:79:29:c0:02:66:31:1f:2b:1f:0d:df:73:af:97:
                    50:90:b5:36:16:b7:50:cf:2b:92:a1:56:f0:67:0a:
                    67:db:7c:6b:de:32:6d:43:bc:e1:5a:00:d4:60:cd:
                    a9:e9:03:15:c5:08:35:3f:58:5b:aa:7e:0e:e5:32:
                    c9:62:92:9c:17:db:17:f1:03:b4:f1:d7:97:e8:4a:
                    0b:17:2c:45:a9:98:17:f2:02:07:95:04:bf:e9:28:
                    47:1b:47:f1:80:d0:27:95:45:60:e0:9b:8e:d3:54:
                    8a:5f:ad:5d:66:ff:e4:02:18:fa:a9:79:dc:4f:32:
                    40:70:af:f0:f2:15:95:24:db:12:ab:dc:e6:a0:97:
                    35:84:2d:65:94:4f:e7:d3:3d:d6:c1:22:f2:5b:cd:
                    b2:9c:53:f7:46:46:90:80:89:81:23:3a:1e:0d:fa:
                    f6:2f:5e:ab:dd:39:29:05:eb:4e:9a:4d:89:7d:06:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:87:19:85:3A:0A:E1:04:EE:F9:78:4A:18:42:96:C5:F7:59:B5
            X509v3 Authority Key Identifier:
                keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:89:bb:73:6c:35:a5:c8:c4:0f:d2:22:1c:ec:79:57:d8:
         ef:13:42:34:26:9b:d8:86:ea:51:b8:bf:1d:0b:81:b4:2b:a3:
         e2:a8:68:ea:97:c1:31:4c:35:28:db:ad:e6:e4:31:f9:bb:95:
         c9:f2:dc:3d:7f:8a:0f:9d:64:4f:74:81:52:fd:3c:6b:de:cd:
         b5:de:46:32:54:d8:87:91:9e:43:d7:8b:5f:25:ca:b0:bc:e4:
         29:bc:83:04:2f:42:0d:bd:a6:64:1b:b9:9f:7a:1a:53:37:90:
         ef:ce:ef:2a:82:aa:5e:9c:c1:b0:98:5e:bc:51:a9:9e:d0:e5:
         e9:46:7d:56:01:1c:81:ee:9d:4b:bd:a8:d8:f5:57:cc:9c:90:
         75:83:bf:3f:0c:75:94:46:d9:c6:71:9b:6e:9c:b4:3e:9f:6c:
         73:0c:d0:c9:69:86:d2:3f:52:99:fb:93:d0:ad:99:f7:2c:e5:
         02:eb:f8:f1:59:9c:45:7e:66:f5:34:e9:27:dc:23:a7:bd:24:
         c7:6f:bd:80:84:99:68:d3:d1:a4:e9:af:21:8a:0a:25:b1:ee:
         66:32:3c:a3:91:a6:85:cf:fb:d7:38:e4:4a:62:5e:ac:bf:66:
         4a:fc:12:ec:4d:14:ec:06:33:0d:ce:21:57:6a:79:4e:86:f2:
         73:ff:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----