Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File:                     iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier:          yI+xdoZqZCwXk3BHjk8Su6ZSHZM5TJfyJdrK/Qloq6k=
Subject key identifier:   3E:2F:12:EF:43:64:3C:45:19:9F:97:15:9F:37:C5:DB:97:8B:D6:B8
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer:       /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial:       01962DF3ECA0A22D2D34F882872FE952664D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
                          2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: ViUFK3fxv+0wukO3u2R0/EkVYZYoYHG1ryYTrODMYpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:a0:a2:2d:2d:34:f8:82:87:2f:e9:52:66:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=3e2f12ef43643c45199f97159f37c5db978bd6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:0a:6d:61:80:31:8e:fb:d1:59:0f:78:60:
                    0a:94:ee:3d:fa:0f:74:e3:46:4f:dc:3e:38:84:2a:
                    85:79:68:0e:60:7e:64:10:6d:9a:c7:d9:68:e7:73:
                    a1:4c:e8:a2:91:1b:e0:4f:59:fc:77:8a:83:a4:ac:
                    19:b1:8b:44:b3:2e:ab:5e:93:2f:7e:8a:32:45:93:
                    0a:fe:d9:7a:00:4c:f1:e4:76:d6:dc:a0:89:be:fd:
                    2b:f7:7a:5a:43:61:74:dd:53:04:b9:eb:7b:72:c2:
                    14:ca:f7:d7:71:67:d3:1e:a0:48:4a:db:52:f8:b5:
                    f4:55:10:4f:49:eb:6a:de:0a:00:81:91:f2:6d:69:
                    d0:9b:70:dd:25:0a:37:08:56:22:07:91:00:b6:b4:
                    a2:22:be:9d:66:cb:62:f3:b2:06:3b:fd:8c:32:aa:
                    62:ac:2c:c4:2b:2e:3b:50:3e:d3:1d:70:3b:50:f0:
                    c1:36:ce:e5:39:2d:ae:3d:60:10:9d:32:da:37:f9:
                    d0:2d:e0:5b:87:26:50:3f:30:01:71:a8:07:3e:61:
                    57:05:34:09:1b:55:dc:72:d7:1e:24:f0:7b:fa:dd:
                    12:3b:aa:8f:e9:74:26:40:98:24:43:44:ce:c5:7a:
                    42:30:cb:00:04:d4:57:ce:8b:fa:af:13:02:7a:8b:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:12:EF:43:64:3C:45:19:9F:97:15:9F:37:C5:DB:97:8B:D6:B8
            X509v3 Authority Key Identifier:
                keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:b2:b6:b7:81:59:fd:8d:d0:bb:08:e2:33:9b:b1:90:24:
         ad:03:30:c9:07:ce:67:b8:52:a9:88:23:3b:66:ad:61:f0:59:
         1b:1b:01:9d:3f:d7:64:99:ba:d5:0b:fb:9a:7f:2a:8d:56:86:
         1c:98:8d:31:3f:f0:d6:4f:c1:f0:4f:cb:b9:c6:58:a1:c5:ed:
         01:3b:bb:27:90:0b:a0:8b:be:84:6e:11:6b:1b:c5:be:d9:61:
         dc:ad:0b:fa:7a:b7:9a:f9:b0:b3:ea:4e:c5:ca:82:50:5b:7f:
         35:5a:a1:7b:b2:a6:95:dd:ce:0c:d1:ff:b0:8b:77:b1:80:4a:
         b6:c7:6f:98:ba:71:19:77:c3:e8:57:72:3b:b1:27:e5:bc:37:
         92:40:21:30:2d:85:a3:6c:8f:ae:fb:28:ef:08:eb:3d:29:f0:
         31:4e:c6:f4:dc:6b:f6:94:e1:93:85:11:ad:a8:1e:72:87:fe:
         6e:1f:25:97:5d:67:61:35:96:14:7f:82:4d:7e:49:84:44:da:
         1c:26:23:a5:dc:d6:15:a7:8e:a2:8f:2e:82:d8:e7:66:e0:05:
         db:d0:43:26:ec:75:77:9e:c7:12:cd:58:22:47:70:71:48:55:
         0d:93:3b:3e:36:d4:57:b7:1f:a7:b0:eb:de:d6:a6:9b:c4:f4:
         cf:a0:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----