Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File:                     IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier:          /qTu/87eFHohYfM0PeB23+TCwxUhVcks/IKWq/YCDDw=
Subject key identifier:   B3:35:D1:66:C8:B6:7A:C3:48:1E:C9:EF:BA:F8:7D:FE:90:8F:68:09
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer:       /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial:       01962ECF8436023904A2970C82E78B088007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: f43hutVc5gxb1MjzxHkjZX9v7gfq0B1pxOJ9jVd5vXg=)
                          2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
                          3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:84:36:02:39:04:a2:97:0c:82:e7:8b:08:80:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=b335d166c8b67ac3481ec9efbaf87dfe908f6809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:3e:80:6c:73:77:70:16:f0:75:54:24:83:
                    9d:f5:91:19:6d:07:88:8b:e3:5c:7c:2f:63:70:8a:
                    d7:f3:6f:04:39:ce:cc:fc:a2:cc:39:f7:d0:35:25:
                    85:e4:8d:82:c2:b6:b1:55:53:de:8c:24:4e:35:cb:
                    5c:0f:8a:23:74:da:48:23:b6:b2:f5:ad:f7:33:40:
                    2d:a3:31:82:44:c4:a0:b8:2c:6f:90:ca:6a:55:ab:
                    25:ca:e6:a9:e5:86:c1:86:64:19:e4:43:79:12:dd:
                    b8:3e:0f:dd:7e:c2:7c:dd:ed:be:51:e0:98:1e:e7:
                    00:f1:4f:42:86:3a:df:18:81:9e:ae:b3:b0:70:7e:
                    98:a6:ed:86:c0:27:73:f7:52:cf:48:cf:8d:7c:c8:
                    14:c9:5a:1a:32:a9:76:a8:35:9c:86:3e:d0:95:65:
                    2c:f1:ac:3f:f5:af:e2:e4:90:fd:92:f0:08:83:9b:
                    35:15:bc:fe:e0:b1:dd:f0:2f:0c:1a:f2:f0:51:96:
                    b7:6a:5d:c2:f4:b0:a8:12:dd:e9:58:7a:32:af:55:
                    99:61:ab:29:e1:49:b2:16:e7:0d:87:38:3a:96:33:
                    2e:21:64:b6:40:f4:e2:d8:08:50:e9:1e:43:06:22:
                    55:e6:98:50:f3:de:c7:2d:9f:dc:49:4d:ad:ef:f3:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:35:D1:66:C8:B6:7A:C3:48:1E:C9:EF:BA:F8:7D:FE:90:8F:68:09
            X509v3 Authority Key Identifier:
                keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:a7:7b:4c:b5:28:15:0e:34:8f:af:8e:4e:f6:9c:a0:d5:
         c4:27:8a:b6:27:dd:f7:c4:79:99:b9:87:17:0e:42:32:24:68:
         5f:c7:aa:d1:18:5e:2f:f9:5b:d7:c6:52:1d:a0:47:57:c7:24:
         db:2e:fc:2e:ab:3d:3f:9b:13:33:6d:ab:3b:a2:28:06:62:a8:
         6f:9a:ed:39:8b:0a:6f:c0:df:ee:96:1f:f5:60:29:af:29:3d:
         c9:0c:d1:5c:9a:2a:a7:82:fb:b9:73:a2:d8:a1:96:17:23:36:
         55:6b:68:8a:79:ea:8e:e6:f5:f1:77:83:be:76:94:98:cf:9c:
         05:f2:f8:12:b3:7d:35:31:e3:83:c5:95:6f:7f:8a:50:7a:45:
         a4:10:28:a2:7c:90:09:32:d9:cc:10:df:80:9b:33:3b:aa:13:
         d9:49:70:36:c4:e3:75:ec:88:bb:00:ae:e0:91:de:5f:c1:71:
         b6:56:91:27:90:1b:43:7c:4f:48:d1:20:69:3d:b1:2a:13:64:
         cf:f8:3c:26:48:55:6d:41:9a:6c:49:63:4d:55:d7:95:f8:a0:
         f7:10:ac:f6:80:1a:e7:b3:70:be:fc:8c:d7:7e:2c:a1:a5:b2:
         7a:0e:87:39:3f:d2:d5:3a:0f:aa:47:1b:87:7b:13:4f:c7:a8:
         cc:71:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----