Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File:                     IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier:          QRamJQbeykGjV9CBrJmHH3aSZ9aPdY6pkOA1G1WUxg0=
Subject key identifier:   8E:21:2D:50:A2:39:71:A2:37:9D:BA:2E:1A:DD:B2:56:E9:A8:68:D7
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer:       /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial:       01962E98826E481198F87A1D725006399452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: /FpSw0upcybrIVfL3dNDKrATkkUOrs8TX63sAJWXYK4=)
                          2: TD7HLl_luzmut4r9NWbAxbYIOuQ.roa (hash: aVFt60b7VcIpMgon0pjcdJ2lnay9KPMEHvhOesbUmv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:6e:48:11:98:f8:7a:1d:72:50:06:39:94:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=8e212d50a23971a2379dba2e1addb256e9a868d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:5d:bf:4f:23:96:f7:6c:e1:2d:26:03:9f:
                    0d:f3:35:7c:e2:6c:7e:7f:35:1c:8c:81:da:40:07:
                    04:92:4a:53:4e:69:2f:fb:46:3c:58:ca:bd:46:cd:
                    43:b0:a4:a0:1a:5c:ab:97:ee:5f:99:83:82:72:48:
                    6f:9e:5a:9e:dc:e9:db:85:85:ab:a9:c1:9f:2e:01:
                    0b:54:94:e1:5c:77:22:f7:ef:84:f1:c4:06:d2:1b:
                    e8:46:29:62:73:5e:17:f2:dd:8a:68:25:b0:28:10:
                    47:20:29:f2:b1:dc:84:ba:69:5f:0a:99:7e:c6:48:
                    ce:01:ac:4b:3d:b3:0d:44:56:01:b8:d9:dc:ca:0e:
                    94:fc:d6:33:ae:9d:e2:9e:d5:db:30:2a:7d:20:d0:
                    8a:a3:ba:86:56:07:91:73:ce:32:38:f9:32:88:80:
                    26:20:10:fd:9f:a9:e3:5d:e4:29:0f:d7:d0:12:f3:
                    7b:7e:62:fc:29:fd:cd:da:86:ac:8a:04:8a:c0:99:
                    13:25:1a:84:62:bb:02:e8:8a:98:3a:33:b6:03:03:
                    51:9e:eb:f8:ed:c8:6e:e8:0e:6a:81:e8:51:7a:90:
                    26:4a:41:eb:04:de:60:9c:75:3a:e4:c7:01:43:a2:
                    84:e6:e6:c2:6b:dc:2d:d8:39:ab:10:bd:93:cf:ec:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:2D:50:A2:39:71:A2:37:9D:BA:2E:1A:DD:B2:56:E9:A8:68:D7
            X509v3 Authority Key Identifier:
                keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5e:8d:1d:9a:a3:81:1e:05:27:6a:d9:1e:9c:f2:b1:da:af:
         82:ae:c9:58:81:fd:49:19:e0:10:97:13:9c:99:62:b9:ba:40:
         9b:78:29:2a:6a:f5:83:54:40:a8:e2:f1:20:be:54:b8:63:08:
         71:e9:98:8d:31:38:94:31:41:3a:8f:62:ab:d3:84:4b:f0:ac:
         d7:20:d8:f7:9a:05:91:a1:59:ab:96:fa:c2:67:62:9b:3c:3a:
         99:d9:a0:96:cf:e0:7c:a4:cd:1a:20:87:4c:78:a2:d6:3c:84:
         3a:2b:ce:f4:e1:b6:46:08:c6:6b:56:97:24:9d:ca:00:44:ea:
         b6:4c:e4:29:04:fc:b8:f0:e0:35:1e:e2:9d:47:5b:47:a3:81:
         f0:31:cd:e7:69:99:06:44:6c:8f:be:28:e5:45:ba:37:ae:40:
         d1:08:8b:39:60:9e:d9:90:e8:cd:f6:44:87:fc:c6:d4:91:c3:
         6b:54:95:21:29:ae:83:b2:98:f2:df:df:5a:23:9f:2d:db:71:
         fa:2d:75:b1:91:20:3f:71:45:45:40:f2:cc:3b:1f:f0:56:0b:
         22:7b:4c:33:64:9b:8b:ca:37:b3:76:80:59:05:00:83:12:98:
         00:7d:24:4f:db:8b:62:be:2c:48:bd:90:75:b3:82:27:9b:1e:
         8d:d1:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----