Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File:                     IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier:          RoMjeVT46kUi2fJKA8MhStkdvn7pQ6js4V1yWf4JSTM=
Subject key identifier:   DD:3B:ED:FF:D6:D5:81:72:C5:57:AD:96:71:11:C9:21:12:2F:FE:3D
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer:       /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial:       01962F74E1371AAB96F2647BD0EB65CD081C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number:          0BA7
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: QmnP3CGLiUvLbixUE50D14VZt2silStTH6Eh67dCfjQ=)
                          2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:37:1a:ab:96:f2:64:7b:d0:eb:65:cd:08:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=dd3bedffd6d58172c557ad967111c921122ffe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:aa:80:f5:80:68:6a:12:ee:e0:72:e2:76:
                    34:b4:95:9c:e0:be:6f:e3:05:27:dd:c0:24:24:6b:
                    9a:c0:8a:3e:e4:19:0c:8b:48:4f:eb:f3:41:ca:57:
                    68:a1:c3:e3:3a:de:b9:71:81:c3:97:81:94:ba:4f:
                    df:41:8a:01:3a:92:34:87:81:20:f2:64:54:b5:63:
                    71:44:f1:83:81:0f:d4:e3:8e:56:09:2e:dc:97:96:
                    f8:bd:29:d9:e6:31:9b:34:61:0f:2a:8d:cc:6e:52:
                    bd:68:64:62:fd:2d:6a:f7:e6:0d:79:c4:ca:c9:a6:
                    5b:ce:8a:72:f2:3b:bf:1e:d8:d2:ad:da:25:58:e6:
                    81:5a:2d:b5:7a:d0:38:a0:72:fd:4e:57:08:50:09:
                    77:5d:c1:fa:36:c2:b8:1c:b7:d2:f6:a5:82:eb:50:
                    92:84:16:e4:ca:1c:39:de:59:00:15:f5:fe:a5:43:
                    bc:c7:bc:fd:c1:9c:37:dc:94:c4:c2:bf:91:c0:19:
                    30:ea:8b:68:42:be:53:51:0c:3d:fe:8c:52:92:0c:
                    e4:6a:17:a0:1f:09:a1:75:38:f8:6f:1a:61:31:bc:
                    38:a1:f9:b3:02:44:8d:80:17:c2:5c:7c:af:c0:9f:
                    5f:c5:4a:14:b4:8e:19:dc:27:7c:ab:e0:6c:76:d2:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:ED:FF:D6:D5:81:72:C5:57:AD:96:71:11:C9:21:12:2F:FE:3D
            X509v3 Authority Key Identifier:
                keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:69:73:32:fd:51:42:14:e2:aa:42:79:e5:76:0c:af:90:
         21:4b:cc:39:d5:31:8b:fe:35:60:43:93:aa:21:e2:6c:0a:33:
         49:4e:b9:7d:df:da:dd:1e:f0:cf:97:3a:21:93:f2:a2:bb:9e:
         33:2a:e0:22:45:a8:1b:58:10:75:d6:bd:eb:b5:35:15:06:5d:
         34:c2:1e:ea:5c:a9:cd:c8:41:27:7e:1d:bb:84:d9:72:81:6c:
         f9:df:a9:e5:38:2c:9f:2d:40:76:3e:95:d5:ee:6d:ec:a5:0b:
         a1:6e:11:c2:9b:9c:0e:ca:f9:ed:a1:5e:3e:01:7c:88:07:bf:
         ca:98:f7:c1:da:23:42:5c:2c:e3:54:b7:c7:17:b8:dd:3c:6d:
         c8:7c:fc:44:d6:73:56:0d:29:d2:69:f5:6d:0e:7b:32:0a:d9:
         88:3c:82:90:02:e8:93:44:30:57:06:4f:e5:74:ff:5d:36:37:
         a5:d1:c9:df:3c:a2:e8:4f:a2:37:ec:c2:41:16:c5:e3:f0:a2:
         12:7b:fa:d4:43:06:0e:d9:c6:dd:99:6e:a6:71:3f:26:6e:f0:
         04:59:f7:02:62:75:c5:0e:db:47:c7:16:2a:64:fa:c1:0a:61:
         2d:0d:97:fe:99:70:e5:4c:b2:48:9b:22:0d:d9:1e:f5:52:00:
         6d:b3:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----