Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File:                     Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier:          fEAF8IRjrzAMxbQ+rn4Y+RF8SIDLnDbBpgDzdr29VQs=
Subject key identifier:   8E:6B:B9:2E:B9:2F:28:EA:EB:78:0D:07:01:5A:3D:83:86:56:65:DD
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer:       /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial:       01962DF3FE7AB1CA35124E4A5AAC82DC6FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number:          044D
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: S6xwrfe+f/UBrIFdMwEtTfaohMl7B2++fuCJgAHsZP4=)
                          2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:7a:b1:ca:35:12:4e:4a:5a:ac:82:dc:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=8e6bb92eb92f28eaeb780d07015a3d83865665dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:86:f4:cc:65:14:e1:1a:9e:94:cc:96:2e:
                    3d:3c:2a:91:0d:da:11:c0:0c:5f:92:33:4f:4f:e0:
                    5d:e9:76:e4:d3:26:b8:90:63:7c:cd:20:9c:bd:81:
                    0a:0f:4a:2e:09:1b:88:37:57:53:17:bd:97:2c:ed:
                    d1:21:67:07:a2:03:23:dd:68:db:06:e2:d9:75:68:
                    0b:5f:85:44:a0:86:21:27:f7:a8:89:0f:7e:62:2b:
                    77:3b:41:88:bc:9b:b6:58:30:c9:46:99:f2:9d:4e:
                    cd:ac:c8:f5:5a:2e:5b:4d:02:aa:10:da:fa:54:c0:
                    be:ce:8d:c2:4b:a8:ae:f6:0e:d4:41:03:a4:28:e2:
                    18:52:08:ff:bf:5c:0c:55:ae:46:91:5c:bf:d4:df:
                    4c:89:7d:a6:2b:12:95:ca:7a:ce:0a:bd:e7:35:77:
                    af:87:13:af:30:ea:c1:5e:b6:84:e7:72:fd:26:e4:
                    26:b2:19:1a:84:2d:8c:e2:07:12:58:f5:f3:4d:32:
                    be:0a:24:59:4a:9e:4b:d1:d7:88:a2:a4:9a:1d:2c:
                    dd:5b:a8:12:58:0e:8d:28:01:5f:02:57:02:a7:21:
                    8c:c1:da:74:c2:40:37:4d:36:2c:f4:28:e7:2e:44:
                    d7:f3:84:ee:74:57:c0:a2:16:79:4a:22:21:78:d9:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:B9:2E:B9:2F:28:EA:EB:78:0D:07:01:5A:3D:83:86:56:65:DD
            X509v3 Authority Key Identifier:
                keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:40:5b:5c:b2:ea:4c:47:09:be:cb:1b:ab:11:c1:5b:51:
         a0:eb:5c:9c:27:4a:5a:c8:88:d4:77:fe:7f:15:94:dc:fd:76:
         eb:97:e5:26:38:63:2c:e2:74:1b:a8:f5:03:40:a4:85:a1:96:
         41:a4:25:b0:7d:55:a4:ea:a9:6e:c9:16:96:ea:23:b6:dc:40:
         93:11:7c:25:d3:0a:06:a4:63:d8:ca:3c:c7:17:05:4f:94:76:
         62:63:fe:7d:a6:7b:1b:2d:20:a1:8c:7a:03:51:a4:c7:17:bd:
         1f:50:aa:6d:4a:57:75:e1:e6:43:cd:18:b1:ab:b4:92:3e:71:
         8b:38:cb:de:e3:70:59:aa:1d:af:7f:7e:62:e4:c6:62:9b:a2:
         f8:87:24:45:c1:86:7e:8d:f4:4a:89:95:6b:8b:54:11:a3:ce:
         5a:56:3b:5d:74:61:c4:2a:47:73:6c:3a:f7:57:2c:8e:7a:36:
         50:a8:4a:53:8e:8b:62:7c:c5:76:8f:88:df:a4:24:d0:f9:d8:
         b3:9c:2a:fb:70:70:c8:ff:cf:66:ab:91:85:f9:fe:89:c5:e0:
         39:0a:86:72:9e:a7:01:4e:e5:85:14:d2:a9:5d:27:6d:56:20:
         3d:6b:34:a3:62:6e:b5:a1:6b:e4:0d:f1:41:eb:6a:0a:65:63:
         02:be:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----