Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File:                     IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier:          2Zqh+4wdFaTuSBwhsuXiMq6kcsrEsjV3W81Iy7fB4Ng=
Subject key identifier:   5B:3C:C3:FD:4A:A1:68:C7:06:2A:6A:AD:DC:33:3F:39:33:CA:60:29
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer:       /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial:       01962E987C5BED046CDD127AECC4E01BC989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number:          0594
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
                          2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: HKbU+8SzHjKYptkXDdZJMEGKCvLI492Zr8exHOnCdSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7c:5b:ed:04:6c:dd:12:7a:ec:c4:e0:1b:c9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=5b3cc3fd4aa168c7062a6aaddc333f3933ca6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:c1:a6:6f:74:e1:3e:85:23:1b:af:6a:2e:
                    65:e2:ee:5a:77:c3:b2:05:98:49:0c:4b:8a:46:7c:
                    ba:39:62:2e:e0:44:a7:ec:62:99:27:44:cb:70:8e:
                    8c:60:d4:9b:0f:0e:a6:b0:68:a1:11:53:9e:dc:c3:
                    b0:f3:8f:be:7c:19:dd:e4:43:87:db:9a:d6:ed:85:
                    41:d6:81:d8:ec:ff:49:62:ef:6b:d4:97:8a:4b:ea:
                    c3:3c:26:53:5a:86:1b:4a:55:c2:84:fe:6b:02:99:
                    14:9a:7b:17:ed:53:7d:68:fc:38:de:24:eb:48:90:
                    d8:e9:5c:fd:b8:10:24:47:d0:c5:97:56:c7:c8:21:
                    78:c3:a1:e6:4f:95:0c:99:bc:52:13:5c:0f:e0:d4:
                    db:84:32:4a:8e:c6:ca:c3:28:b5:a6:b6:74:b3:8f:
                    06:b0:21:26:d8:da:ca:ba:7d:b5:39:04:6b:cb:db:
                    27:60:b4:2c:ad:e4:13:25:27:9a:51:52:c1:d8:80:
                    d1:0f:56:c5:e6:ad:b6:18:57:59:54:e6:c5:a3:dd:
                    11:8e:95:27:72:c4:47:92:a2:52:61:c0:80:7c:e2:
                    6b:d8:50:a9:6a:5c:85:6b:57:e1:ff:c1:1d:18:20:
                    87:c3:ef:c7:75:d1:8f:9b:8a:09:bb:57:80:d9:99:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:C3:FD:4A:A1:68:C7:06:2A:6A:AD:DC:33:3F:39:33:CA:60:29
            X509v3 Authority Key Identifier:
                keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:81:2b:08:c9:a4:17:38:cd:a0:e4:e5:8f:82:d9:71:45:ec:
         f1:78:e3:1a:c8:99:f9:3b:6b:16:f5:9f:c4:48:d6:96:a2:3f:
         12:94:73:79:ff:dc:d4:72:41:df:00:69:ef:76:5d:7c:f7:0e:
         67:7a:e9:5b:a5:a5:b5:ad:2c:25:bd:fc:14:dc:ea:44:15:b1:
         26:44:fd:cd:7d:97:a4:39:9c:41:ad:f6:7d:bc:93:69:28:28:
         1d:c0:ff:5e:e0:b0:b0:b7:d4:70:22:81:a3:4c:15:bd:4e:12:
         94:7d:7c:d8:20:60:18:f2:44:d1:63:9a:59:2e:f1:91:8f:c1:
         91:1e:79:c9:09:1f:10:a2:71:93:5d:5d:3d:77:84:7d:89:fc:
         6c:4a:30:e8:a5:f3:a7:e0:03:9e:de:6a:ae:3c:b7:ec:43:b6:
         c4:9c:c5:ea:6e:13:91:7a:71:65:b0:2f:ce:6b:a0:e0:e7:5e:
         e8:e5:e3:8c:a5:09:97:0e:ad:2e:02:c3:ef:4f:a1:4a:d6:25:
         3c:6f:64:72:b3:76:d8:05:34:e6:fa:08:fd:84:26:e9:01:8c:
         b6:2f:0d:bf:2a:bf:68:9b:43:ed:75:bf:eb:b7:80:47:58:0e:
         c6:8b:f3:af:9b:8a:db:ae:64:bd:51:cd:c3:1d:39:fd:1d:41:
         69:57:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----