Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File:                     iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier:          pTcDrpRfSIB/mSYF/GH6yqw4TRhmw4agWNA8u2Jy8No=
Subject key identifier:   FD:66:43:B8:65:65:0F:68:AB:E7:DF:E6:9A:84:A3:F2:34:D1:96:90
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer:       /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial:       01962F067EFC15DD5E4A834D35951DE13158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
                          2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: YgHh/RiG5dbXZJbj/5LOZoCtRqer0ldfy72WupxPuNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:fc:15:dd:5e:4a:83:4d:35:95:1d:e1:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=fd6643b865650f68abe7dfe69a84a3f234d19690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:57:73:e0:8c:e1:81:2e:25:a7:3a:60:c6:
                    2b:06:eb:3e:c9:14:25:a8:33:7b:dc:1c:98:17:2a:
                    3a:78:2e:14:39:8d:ff:89:77:5e:1e:e4:0a:04:78:
                    23:47:40:b3:fa:b6:d4:b3:cd:56:5a:a2:40:7a:84:
                    f3:8c:da:7e:06:4f:84:31:73:d4:61:94:71:25:62:
                    14:93:51:e8:4c:4c:4f:39:b5:c2:76:1c:58:37:b7:
                    35:2b:b1:89:56:5d:08:32:aa:c1:0e:f0:f2:cb:c3:
                    50:0f:29:79:d0:5a:b6:0e:5a:64:ec:f1:84:ce:15:
                    20:6d:4f:9e:8b:a0:a2:8e:d1:ee:ca:f6:70:ec:34:
                    8e:cf:89:cf:cf:fa:89:51:c2:23:8f:8f:f7:5c:08:
                    46:0b:b8:83:11:73:c9:0e:01:26:c8:4d:ea:d3:b4:
                    0f:5d:51:6a:e9:58:01:15:87:a5:d0:59:33:49:ba:
                    f9:fa:8e:66:b3:66:cd:54:86:17:96:2e:20:28:03:
                    ea:fd:65:b4:06:76:17:6f:09:de:5d:cb:8f:60:fe:
                    f1:1f:8b:56:4b:f4:15:89:2c:8b:c0:10:20:1e:06:
                    7d:c0:70:69:87:17:a2:e4:b8:99:f9:2e:6e:5b:0a:
                    2c:0a:4d:70:d0:cf:f4:36:56:2d:b8:6b:1a:a6:14:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:43:B8:65:65:0F:68:AB:E7:DF:E6:9A:84:A3:F2:34:D1:96:90
            X509v3 Authority Key Identifier:
                keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:a1:35:96:82:c5:ae:4d:d5:0c:37:57:71:05:d5:24:74:c8:
         92:6d:8d:4f:4a:ab:59:50:d2:ff:4d:58:9f:63:a9:f8:b4:84:
         d7:35:11:10:7d:ed:a8:71:7a:e4:a2:91:e9:06:e8:b8:7e:42:
         55:9a:e0:99:93:03:ef:42:1d:2e:df:66:dd:97:b5:ef:58:8e:
         11:79:95:47:b9:4f:c9:76:4c:52:64:07:13:40:51:e4:eb:56:
         7b:45:b8:17:e5:00:57:a9:49:ac:91:cb:65:9f:4d:f2:62:5b:
         fe:09:a4:81:87:a3:22:6b:95:7a:b4:a5:44:f9:6c:13:3b:16:
         7c:4e:2e:70:a0:0a:c2:f9:f8:0b:eb:97:35:7c:46:da:e7:b2:
         ed:45:94:5e:9e:05:cd:e8:8f:76:29:05:34:02:fc:9e:11:41:
         b1:ac:41:42:67:3d:a9:13:c6:c9:07:23:a5:9c:a9:f7:b7:4b:
         a9:36:56:c8:ed:16:b7:2a:02:aa:b4:7f:cc:ae:30:7a:38:af:
         c4:cc:b0:42:b0:aa:cd:ac:b1:3a:23:cf:f9:a9:c3:1c:8f:1d:
         09:ef:2d:9c:7f:04:42:f7:a3:08:64:f9:84:88:25:cc:44:a7:
         3d:61:4d:f5:4d:24:94:25:27:53:bf:95:42:0f:1e:2f:a8:74:
         5b:7e:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----