Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
File:                     18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json)
Hash identifier:          ILxK3n/j60dWGZBQKNfCJTGz2euNORQCzo9lWHfTri0=
Subject key identifier:   22:AB:F1:A5:A2:8E:24:45:97:5D:13:98:E9:08:63:59:9B:20:59:CE
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Certificate issuer:       /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial:       01962E98A8D908CDBCB95712FD516BC476CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft
Manifest number:          0F89
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: AjCzCeGug1KJHmkEXTBoT/dLVrXinvjXIStya2rs9VA=)
                          2: ixnuzzyIGziCtrC0l3qz41OIrjQ.roa (hash: JSBHGZiyISoLK4HOeW+w9s4fRtop7E+RouVUw4Z0VAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a8:d9:08:cd:bc:b9:57:12:fd:51:6b:c4:76:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=22abf1a5a28e2445975d1398e90863599b2059ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:56:ff:90:a7:85:78:08:2a:f3:46:ab:e0:
                    68:88:91:62:5f:68:20:78:d9:68:79:c2:f5:bb:de:
                    c6:53:56:d3:7b:7d:e4:c0:c8:ca:20:bc:38:18:51:
                    2b:db:a9:d8:ac:2d:88:7d:1b:27:f5:65:92:00:d8:
                    f6:c2:5d:a8:72:2b:49:7b:ba:6a:49:53:40:ed:2b:
                    13:aa:43:a6:36:97:ee:7e:b3:2c:fe:3e:f5:cb:90:
                    fe:9e:74:7e:f6:ec:16:7a:f1:ad:e7:3a:bb:0d:28:
                    fa:0c:36:86:68:2f:4c:2a:a3:d7:e2:d2:46:45:72:
                    2a:cb:7f:05:a6:1c:f5:0c:9c:a5:6f:7f:28:39:8a:
                    01:4c:3a:ca:83:ea:d7:c4:05:96:63:81:30:c8:b1:
                    02:f5:46:af:04:ec:87:9d:38:15:b4:8a:2a:37:42:
                    62:0d:bf:8f:dd:96:64:2a:ac:7d:97:f9:de:0a:5f:
                    e8:2a:84:f7:9c:2c:17:ff:9d:15:b0:f7:ac:44:9a:
                    d4:ed:5c:57:08:b4:3f:f4:7e:b3:c4:e8:5e:44:05:
                    81:54:7f:95:74:ec:c3:c4:05:7b:0c:0f:d9:07:75:
                    3a:38:bb:56:35:1f:71:7d:bf:84:04:5d:25:79:f0:
                    7d:af:70:7b:f0:41:b8:31:f8:ef:40:ce:20:10:02:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:F1:A5:A2:8E:24:45:97:5D:13:98:E9:08:63:59:9B:20:59:CE
            X509v3 Authority Key Identifier:
                keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:cb:16:e4:9a:0c:5c:3f:58:18:7f:05:77:62:9a:f6:71:
         74:70:6d:48:e9:60:1c:f1:47:2b:68:3e:bd:89:9c:be:60:2a:
         46:ea:e9:13:0f:c6:51:d1:25:4c:19:7f:4a:8d:67:9b:26:90:
         49:a1:8f:4b:e8:46:93:b8:c5:4d:72:97:12:a2:3c:69:eb:86:
         ab:2e:73:64:e8:57:e0:54:bb:fb:24:27:bc:8c:5f:8c:f3:69:
         68:df:89:77:16:8e:ad:8a:0a:29:0c:1a:e7:28:ba:60:c6:05:
         c9:76:fb:e0:2e:b1:de:56:44:03:9c:1a:b0:ab:bf:12:36:af:
         30:78:61:9e:4e:6a:bb:f7:27:7e:3e:61:0e:53:cc:45:1f:e1:
         0d:a8:1c:d5:7e:de:83:b7:85:d6:8b:f3:17:ee:0e:49:76:f5:
         6c:d7:0f:10:39:de:36:c9:de:d8:34:92:56:b5:6b:a1:27:21:
         1e:47:6c:a6:4b:02:ba:c8:6f:79:b4:9c:a2:cb:95:61:5c:15:
         1f:f2:43:60:9a:ff:18:0e:15:0c:1c:b1:f0:cb:13:42:7c:8b:
         14:9f:a6:bb:2a:a5:53:d9:ae:c5:a3:40:ef:16:ce:7f:0c:62:
         58:eb:84:22:a3:ad:25:53:89:96:5e:42:d1:c2:d7:ac:db:cd:
         dd:cd:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----