Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File:                     IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier:          5vopZERvCUlfknWpG7YTuAM9Jy+r+hwMD0Uwg1oVvfY=
Subject key identifier:   68:61:7E:98:E4:DB:14:5B:E6:3D:63:86:01:9B:93:79:CE:80:E2:2E
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer:       /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial:       01962FABA5460CCB716C4A3DFC57C3F9752D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number:          1230
Signing time:             Sun 13 Apr 2025 15:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:40 +0000
Files and hashes:         1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: o/i5NuIUmcDX5oEjr2vwROHb6qow+WeAfrrY+tlcUn4=)
                          2: MWwIJyVW-xGM8HHmiPSGu90ysVM.roa (hash: 9euJkhmoCQb1LOfkGIPpqowd4pomSIjB0l7bFL7u4Yg=)
                          3: PiMCmpetvGyOad9hAP8fiU1Qa8U.roa (hash: W2k0p2aLpcmF1pGu+mKgyVPY0tAWg3LNT6+Z7BuBqqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a5:46:0c:cb:71:6c:4a:3d:fc:57:c3:f9:75:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
        Validity
            Not Before: Apr 13 15:01:40 2025 GMT
            Not After : Apr 14 15:01:40 2025 GMT
        Subject: CN=68617e98e4db145be63d6386019b9379ce80e22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:5a:fa:84:6b:87:b1:63:56:ea:a2:e8:57:
                    41:8c:1c:19:f3:6b:03:f9:04:e8:3b:02:a8:d8:a7:
                    25:22:5e:ed:4d:f0:e7:15:73:fd:43:c3:e7:5a:87:
                    88:9f:c3:79:59:f6:3b:74:9d:fb:e5:b2:6e:0d:99:
                    c2:49:53:7d:eb:57:bf:50:29:a7:f6:ec:01:4c:b4:
                    28:32:c9:70:f3:36:17:27:2c:a5:61:f5:79:53:0a:
                    06:6c:83:13:19:f1:89:09:f0:51:52:49:60:a4:b6:
                    59:ec:ee:c9:d3:8e:48:3c:5f:ce:e6:97:08:fc:96:
                    22:42:52:d2:94:75:59:4b:04:04:ad:66:26:64:fa:
                    47:77:c9:e4:0d:c8:03:b0:dd:e6:da:3d:30:89:6a:
                    1a:22:06:83:06:53:19:65:58:76:4f:ef:b4:a4:18:
                    d0:ee:46:ff:e4:bd:33:16:10:1b:ab:22:81:30:22:
                    92:ea:ac:8b:fd:e0:93:aa:62:5a:39:fd:62:64:5e:
                    c4:aa:de:c8:ea:02:4a:9c:71:fc:71:1e:9a:96:78:
                    2d:4a:7a:58:cc:7c:b0:d9:cf:af:3f:6f:65:fd:f8:
                    3a:d6:69:fa:cc:60:ef:4c:5e:9b:4c:0d:2b:b1:3d:
                    a4:ed:11:01:83:f3:42:ed:d8:ed:1b:78:7e:a4:b9:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:7E:98:E4:DB:14:5B:E6:3D:63:86:01:9B:93:79:CE:80:E2:2E
            X509v3 Authority Key Identifier:
                keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:72:cc:86:9a:ce:32:5b:d4:75:3e:7b:7c:fb:c7:bb:45:fd:
         fd:f9:7d:4c:c8:b0:7d:fe:0c:29:c4:10:1f:7c:80:04:c5:17:
         05:1c:67:cd:52:a3:ee:63:72:cb:e9:01:a5:e1:b9:cd:5e:60:
         28:bb:3a:70:57:25:6d:67:aa:88:8e:fa:8b:6e:c1:63:b0:45:
         cf:72:27:9e:ef:ac:bb:57:8a:93:39:25:d6:80:f0:2d:a6:8e:
         38:12:73:9b:f7:6d:6c:d4:0e:65:b3:c8:59:7b:98:7d:59:fe:
         e2:cc:7a:8d:a9:f8:4b:59:3f:cb:e9:c3:ad:56:80:ec:99:3b:
         7f:2c:08:c6:38:7f:55:e3:47:2f:17:ba:2d:73:a9:10:09:eb:
         ca:d0:b0:25:84:51:79:4f:17:a1:ec:86:01:7e:d5:73:fa:da:
         15:6d:e0:8b:51:1b:c1:52:8f:ab:0a:c2:28:50:8b:94:c6:7c:
         2e:92:2c:03:f8:aa:df:ab:23:35:26:34:8c:c7:8b:9b:9f:9e:
         e7:8c:cd:e1:15:a1:53:6c:98:f0:cf:b1:84:a6:79:97:79:e1:
         1b:82:20:d6:17:13:8c:d9:4a:ee:97:95:a5:30:23:0e:8e:9a:
         bd:90:04:c9:03:4a:7f:a7:d9:33:75:2f:cb:e6:49:d0:58:ba:
         8d:ef:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----