Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File:                     ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier:          y+olRptXuDkCg/49sTyM7ra40nZs/gN2Oefz0p91KV4=
Subject key identifier:   31:65:FD:38:85:37:95:16:77:2F:5D:B5:DC:18:10:4E:44:41:30:DC
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer:       /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial:       01962F0680BE9C77C054A36A843ECEA4A406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number:          080A
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: UdcOM9efOcjaBpNd21IZJv17LdBXQFlgEpETJjgp8FA=)
                          2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
                          3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:be:9c:77:c0:54:a3:6a:84:3e:ce:a4:a4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=3165fd3885379516772f5db5dc18104e444130dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:c4:66:ed:56:46:cb:4a:e5:51:f8:c7:c2:
                    32:41:91:93:ae:aa:07:fd:52:67:fc:01:2a:7c:95:
                    bd:36:4d:9e:93:c4:c6:ac:52:ea:d1:11:e9:0b:c8:
                    41:52:8d:22:00:a9:7c:4a:e6:23:2c:d3:96:70:79:
                    71:a8:3d:39:12:71:db:aa:ff:66:54:a0:19:31:0e:
                    9e:f9:01:43:a6:a5:d3:9c:32:b3:0c:9e:83:c4:a1:
                    a2:ae:3a:e2:5c:47:87:7b:c4:75:28:7a:05:af:f6:
                    f6:fc:ca:b0:8f:4c:26:82:2c:9c:f4:c6:d7:9e:6e:
                    f6:5f:d8:6d:46:c5:c7:27:66:de:b4:98:c3:c6:93:
                    7d:a6:d0:80:a8:09:ab:3f:cd:65:6e:d5:82:c8:d7:
                    cb:c8:75:0e:f2:14:ed:36:66:0e:28:d6:41:80:27:
                    80:1a:22:c7:7b:4f:bd:1a:93:1c:77:d8:61:b6:e8:
                    be:85:bd:33:ca:46:a4:0f:91:04:ce:15:34:30:0f:
                    1c:76:a1:97:bf:7a:87:31:d8:a8:de:5d:e6:09:1c:
                    15:6e:9f:d4:22:3b:88:c9:bf:59:03:26:b2:dd:c5:
                    be:44:7b:04:4e:17:c7:c3:20:d6:ad:c7:a4:66:d7:
                    f3:c4:91:45:c8:6b:8a:f0:cc:74:ab:bc:8d:b7:be:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:65:FD:38:85:37:95:16:77:2F:5D:B5:DC:18:10:4E:44:41:30:DC
            X509v3 Authority Key Identifier:
                keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:53:ee:d2:6b:d8:18:07:0d:09:4d:c4:44:97:d2:b1:e7:
         39:54:9f:b8:25:37:46:8e:c7:b4:81:d7:d1:45:54:47:c2:64:
         36:ff:ec:0f:a9:cd:b3:5d:90:e2:6a:7b:94:58:e8:93:56:dc:
         9f:fd:d3:ca:e0:89:67:f3:bb:dd:1c:da:74:a3:21:9d:23:9b:
         68:99:e4:50:67:68:1c:cd:b6:40:9d:25:55:0a:2f:99:7e:04:
         b9:40:a5:94:b2:7d:7b:61:b1:82:78:82:64:5f:dc:e1:20:36:
         32:ed:fc:49:88:9d:57:cd:4b:b1:50:37:3b:d3:53:d1:9b:08:
         a0:8b:6d:3d:42:c1:79:9e:d5:8c:15:ec:a7:85:10:f4:f0:83:
         ee:be:03:c8:b2:f7:30:f7:99:fe:c1:ac:78:8b:0f:4a:8c:ae:
         8a:07:8c:12:6c:44:b0:a4:7f:f7:8f:fc:21:17:3d:d0:40:ed:
         36:65:24:8e:74:26:69:1f:b4:68:74:fa:63:35:5a:c2:3b:67:
         b0:0d:42:98:4a:6a:76:f9:3e:bc:b2:74:7b:7b:cf:2b:91:b1:
         1b:18:08:2b:b5:e0:53:a4:7c:c1:e7:e1:aa:46:61:d0:c2:9f:
         5b:4a:0b:d8:2a:b5:aa:a8:56:6a:bd:b2:26:64:6b:a3:81:b7:
         5e:08:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----