Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File:                     1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier:          McoLvRwuFyBZGuZRpY4gEVU6NEXx7vQPxKOWxa5NPe8=
Subject key identifier:   1A:CA:2B:D6:5D:FB:F7:71:80:71:89:81:B9:79:92:2E:92:A6:F4:28
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer:       /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial:       01962E99ABC7A8DA37C2AB9A8339FA0F7F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number:          1313
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: 8Ri+dCU8/4Oe5I7RlKOJ7XR2Kz91xGvkq98EUyfnFGc=)
                          2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:c7:a8:da:37:c2:ab:9a:83:39:fa:0f:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=1aca2bd65dfbf77180718981b979922e92a6f428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:07:23:dd:99:df:1b:57:7f:15:c9:42:37:
                    52:15:e8:4e:f1:71:7e:79:19:8d:4d:88:26:8c:f2:
                    69:e0:da:58:74:c3:de:12:3e:3d:4f:b8:bf:27:0e:
                    bf:78:59:5a:37:5b:b7:ec:41:85:95:c1:fb:79:e9:
                    56:dc:93:85:43:55:87:21:66:42:a0:51:59:ee:e5:
                    27:e0:9a:68:af:4e:bd:b9:d4:7d:64:6f:e4:35:6e:
                    56:cc:e0:37:d6:3b:ed:6b:8b:39:01:d7:49:58:8b:
                    79:f1:37:71:34:c5:24:9e:6b:e8:6d:d0:7b:1c:b0:
                    4e:8e:f1:3b:9d:8f:3e:a5:b9:85:1d:0e:94:6a:4f:
                    4a:5a:79:30:53:46:ba:56:d5:ec:96:df:73:4a:8d:
                    9f:73:9b:96:b7:52:58:f7:4e:ad:23:6a:89:71:36:
                    50:16:81:99:8a:bd:a1:d2:ef:27:47:5c:93:b8:41:
                    12:2d:6f:1f:17:84:13:cc:57:ec:73:cc:7a:c7:cf:
                    31:f1:19:44:27:1e:2a:6c:2c:ba:a3:b4:d9:75:04:
                    8f:67:0d:81:f8:f2:d7:03:be:9c:27:85:05:ef:95:
                    fe:2a:66:64:c5:3e:6e:d9:1c:a6:e4:dc:49:7b:cf:
                    9d:e0:54:3c:4b:1c:fc:0d:14:bd:c3:43:89:1b:f3:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:2B:D6:5D:FB:F7:71:80:71:89:81:B9:79:92:2E:92:A6:F4:28
            X509v3 Authority Key Identifier:
                keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:c0:1a:e1:e5:e9:67:14:1e:f2:43:9c:76:f7:94:7f:49:
         52:4f:fb:77:06:67:56:8a:07:98:36:88:2b:17:0e:50:79:5c:
         ae:10:a3:b8:b4:ef:0e:7c:0d:a0:28:d7:6b:dc:17:0e:f5:ed:
         a7:7a:bf:2f:06:94:3d:06:fb:2b:c1:57:64:a1:62:b4:88:23:
         f9:37:42:2f:2e:5d:6e:09:26:9e:c3:6d:44:95:5f:34:6e:2e:
         d6:a9:18:3c:86:d9:6e:52:90:2d:13:e3:2e:64:64:12:92:0a:
         17:d6:a2:ba:6a:13:be:ff:18:32:2f:8c:f8:c0:b6:b4:62:1f:
         69:4d:ad:1a:3c:a0:f9:e4:3a:ca:c6:38:41:76:87:84:60:17:
         3f:ce:51:da:4a:af:a8:2a:97:70:b6:28:be:60:e6:12:6e:ce:
         f0:df:06:c5:a8:de:3a:7e:f2:48:ff:5e:39:9b:1b:1d:f5:71:
         c6:14:5d:2e:fe:93:6b:c7:7f:f6:34:0d:ad:f1:ae:c7:a3:b5:
         2f:63:22:37:68:ee:38:28:78:2b:85:67:98:08:7f:c1:6a:0d:
         df:e2:bc:ea:2c:95:fe:5f:35:d3:1e:68:06:db:4b:04:cd:a0:
         f4:e8:68:95:79:7d:f6:47:4b:ab:4e:fb:a5:da:c9:4d:ae:5e:
         9f:4d:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----