Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          dQ1H0L36T6DQ3RyePAu4PN395oDWVmV1AmNm/jDfXKQ=
Subject key identifier:   B4:F6:12:7F:FD:BF:8D:46:18:17:A5:06:C1:1F:BB:2D:91:B9:4F:F8
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       01962E98FA8C5BFD6EF04A2F093FB74ECC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
                          2: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 9/9jT5vFltHHD09PWHgoZLAHHOAB19ji8JqQqwg8ey0=)
                          3: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (hash: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:8c:5b:fd:6e:f0:4a:2f:09:3f:b7:4e:cc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=b4f6127ffdbf8d461817a506c11fbb2d91b94ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:27:3d:28:77:a5:42:c3:07:9e:ee:d2:96:
                    aa:be:2c:a8:99:89:a1:47:49:cd:b2:97:c2:c3:09:
                    e1:8c:ad:72:38:80:82:3f:3f:53:cc:01:da:3a:56:
                    6e:f6:db:bf:0f:81:2b:50:f4:cd:92:a9:e9:f5:eb:
                    d3:fd:03:7d:a3:64:ff:49:ab:f7:44:25:09:bb:42:
                    a0:b6:85:b4:ef:e4:75:b9:f9:4a:66:4d:5a:fe:9d:
                    99:10:49:09:d6:09:c1:4a:80:c3:72:51:f6:c1:6f:
                    e3:e2:d8:41:54:99:d4:d0:7d:a1:83:92:58:0c:f0:
                    d7:cf:f8:70:98:56:58:bf:2e:54:4e:c2:71:79:80:
                    fb:1d:5c:1a:92:a9:4e:a6:c2:a4:64:68:53:b0:dc:
                    2c:38:44:e8:fd:89:00:bb:94:36:85:a6:d3:fd:e8:
                    98:d6:7e:8c:62:94:6b:51:a7:f2:41:a4:eb:34:d8:
                    04:8a:1d:ff:5f:62:f7:c2:9f:72:6b:a2:94:ef:72:
                    44:5e:48:a0:f4:88:e8:c4:3b:61:02:8b:1d:a1:f3:
                    f1:7c:57:da:77:57:23:d4:a4:6a:2a:4b:24:eb:93:
                    d1:e9:a8:46:58:cd:e1:55:00:ad:f6:7a:3f:12:6b:
                    21:fa:ca:b9:12:c0:0b:02:7a:c6:2f:09:84:84:af:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:12:7F:FD:BF:8D:46:18:17:A5:06:C1:1F:BB:2D:91:B9:4F:F8
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:62:aa:69:03:1f:41:8a:28:8a:10:6b:43:f8:a8:81:ae:
         76:82:1f:e0:54:90:59:92:af:e5:ed:97:32:8e:64:60:b7:fa:
         73:aa:1f:24:a9:f3:25:d2:e0:7f:91:f0:41:4e:8e:8e:28:82:
         09:cb:ba:96:b1:2d:f6:d8:56:e6:45:2e:46:9f:d8:be:e9:48:
         a1:3c:e2:e7:e2:3e:e4:18:0d:36:36:f0:e5:e1:61:42:83:30:
         f1:05:5c:6b:00:a4:91:cb:a3:9c:79:f9:64:a9:97:a4:97:84:
         f9:84:36:d3:57:95:14:b8:ce:4c:cc:19:4a:93:73:36:ce:d0:
         f8:b3:29:06:34:1a:76:dd:63:53:ea:66:c9:a0:e3:48:0e:57:
         8b:ab:bd:4c:8a:50:a3:b9:0f:45:9a:59:08:46:74:b7:f7:8d:
         75:92:21:70:c8:78:85:ff:21:1e:3e:8d:07:ec:ad:97:8e:11:
         b7:73:f1:78:50:f7:28:b4:ca:08:36:37:66:31:a5:42:d9:68:
         f0:66:b8:b5:5c:17:41:ee:a5:c4:6b:23:20:de:ab:6f:68:69:
         7b:45:14:e2:7b:f5:f3:84:f2:25:83:79:9e:cc:08:e9:fc:d3:
         17:a9:5c:10:c0:1c:85:b6:35:46:e5:99:d0:5a:91:ca:5f:f2:
         14:d7:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----