Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File:                     IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier:          vVQ1Yh1o1NZPQ+56E+01MDn0SBPC8COFQnfDF2JDMR0=
Subject key identifier:   C4:FA:44:24:B9:9E:29:D2:CF:BF:7A:16:D2:6B:F0:6F:C2:E3:85:91
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer:       /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial:       01962E991A74B865D71544FB8C277B3562F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number:          14DC
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=)
                          2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=)
                          3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: dro9uzLJBhBhR1L4haHpsKnb8gyE9NCE1oC1BPWrkqo=)
                          4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=)
                          5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=)
                          6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=)
                          7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=)
                          8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=)
                          9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=)
                          10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:74:b8:65:d7:15:44:fb:8c:27:7b:35:62:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=c4fa4424b99e29d2cfbf7a16d26bf06fc2e38591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:d7:95:71:48:cb:23:17:92:8d:88:f9:8d:
                    1c:a8:c8:05:9d:86:4e:63:d7:08:60:70:1a:cd:99:
                    4c:92:2d:1f:8a:04:ea:d6:76:f9:d8:e2:11:3a:fe:
                    15:0b:1c:f0:e1:da:4f:6b:38:74:0a:97:c6:62:97:
                    df:4e:2b:e1:f4:e7:9b:0e:3e:40:14:50:e8:33:fd:
                    d1:88:15:b6:c8:f4:da:44:46:06:d8:e3:a1:9f:f6:
                    b6:a8:2b:f8:27:4e:50:40:9b:c6:c2:5b:19:dd:d3:
                    35:bb:ca:43:42:3a:f9:7f:a7:f7:be:cf:c2:fc:d0:
                    9a:dc:d8:fd:21:71:3e:73:a5:57:34:36:3b:e5:0b:
                    d2:66:57:e5:8a:f8:ab:01:ba:76:99:c9:70:84:86:
                    20:da:0d:9e:5c:6d:42:3a:a5:1d:c8:41:f6:00:6e:
                    c5:19:31:c4:55:cf:cd:9c:22:9f:1f:d9:ac:c6:6b:
                    bf:b5:66:f6:6b:dc:f2:f7:a1:c2:bc:55:0c:6d:8c:
                    01:ca:18:16:f0:99:7b:a1:2e:32:ff:1a:02:80:26:
                    b2:83:dc:1b:d9:d9:13:e1:a2:b8:b0:8b:49:c5:ef:
                    d6:f4:2e:5e:f8:ac:6b:f2:7d:0c:bd:ff:18:22:a4:
                    7e:0d:73:5e:bd:5e:36:87:69:ac:0b:69:a7:ca:fa:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:44:24:B9:9E:29:D2:CF:BF:7A:16:D2:6B:F0:6F:C2:E3:85:91
            X509v3 Authority Key Identifier:
                keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:5c:e9:95:49:eb:8b:cd:c8:4d:bc:fd:a6:21:eb:0e:da:
         e2:aa:b2:ce:19:48:9b:e5:81:1b:f0:71:7d:70:01:62:5f:28:
         b2:3c:7f:4d:fd:f1:07:27:d9:6d:92:e3:56:41:2a:64:da:fa:
         df:6f:23:b6:07:e9:a6:18:b9:a4:96:fc:17:c2:f9:b6:ee:bd:
         02:4c:82:45:b2:8d:db:df:0e:1b:a4:dc:3d:dc:f2:fb:d1:97:
         6b:7c:61:64:a4:fa:a9:bf:58:9e:59:d2:c2:12:04:c8:11:ec:
         7b:fa:6c:b8:ca:1e:48:a7:8f:6f:cf:69:9f:f4:91:99:b4:d6:
         11:db:ff:14:11:b9:9a:fe:6d:f5:76:14:be:00:63:d3:6f:87:
         86:d4:66:46:da:3d:93:1f:18:74:97:1d:60:e7:d7:aa:50:9e:
         48:0c:ee:e0:4d:35:4a:10:27:6e:94:c6:20:9f:72:f4:57:11:
         f2:8b:8f:e3:82:7b:8c:5b:86:fc:4c:1d:d9:41:2e:96:cd:b6:
         ea:58:84:98:5f:1d:8c:c6:aa:7f:b5:50:cb:be:c6:e8:bb:88:
         9a:2c:a0:bb:68:89:52:58:aa:f7:05:83:07:0e:e2:37:bb:3c:
         b6:35:d9:a7:e5:09:4e:ba:ec:a8:53:7e:84:f4:59:4f:00:9a:
         b2:ee:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----