Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File:                     IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier:          4n0JMgPJ4d0SEvXh6g78E7VbVEUResc/rlAiEtMJonw=
Subject key identifier:   CB:53:12:E6:82:D6:9C:E5:1A:01:D1:CE:35:E6:88:39:5A:64:0C:ED
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer:       /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial:       01962F06B41EA7F876CDA149DD93D7D7631B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
                          2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 8J56jx3PpakNJgHPGntxlxGRjrzD2agRqTgsW0aog2s=)
                          3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b4:1e:a7:f8:76:cd:a1:49:dd:93:d7:d7:63:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=cb5312e682d69ce51a01d1ce35e688395a640ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:e2:e7:d7:88:48:fd:42:9c:17:22:d4:20:
                    7b:88:37:76:83:14:51:e7:58:48:57:6f:c0:06:bb:
                    3c:0e:e7:b2:7f:e7:5e:a1:63:4e:45:16:ed:bb:ea:
                    31:6a:82:36:a9:10:a2:12:3d:74:01:3f:fe:8d:92:
                    52:5b:e3:57:fd:34:5c:73:0b:70:5f:10:4a:1d:0b:
                    41:76:e0:be:fd:91:30:6c:2f:2c:7d:5a:e4:ce:ce:
                    ee:79:d9:69:a4:f3:ef:fa:d5:8f:92:52:41:0d:80:
                    2d:ee:cb:9e:be:89:7c:84:8c:94:e5:ca:9d:0c:71:
                    8b:0a:cf:db:8b:78:6a:0f:07:04:a0:bd:61:22:1d:
                    33:42:8d:e9:68:65:94:33:c3:68:79:f6:c6:b6:03:
                    d9:e1:d1:28:7f:94:69:87:2c:90:75:8e:8a:9c:12:
                    13:e3:d7:36:7e:3c:de:07:81:9a:92:41:0a:4a:c0:
                    ab:31:c3:71:62:64:aa:e8:db:25:05:29:67:3d:23:
                    1d:30:54:78:99:4a:56:29:4c:22:81:d1:84:1a:53:
                    83:af:f0:b5:d3:1f:d7:06:54:ea:56:df:f8:15:8d:
                    d0:31:be:51:b0:77:45:1f:f9:e1:c5:c0:fd:b9:98:
                    76:0b:85:6d:b9:7a:db:a2:21:af:1c:d4:09:95:d2:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:53:12:E6:82:D6:9C:E5:1A:01:D1:CE:35:E6:88:39:5A:64:0C:ED
            X509v3 Authority Key Identifier:
                keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:14:11:de:4f:b2:f0:ba:d3:9e:b6:23:5e:ee:26:00:fe:
         9a:6d:5e:d2:84:9e:33:21:09:77:c2:fd:c1:b1:33:19:4e:a4:
         2b:cc:bb:77:9e:4b:da:16:26:98:90:56:4b:ea:91:28:8b:c1:
         72:87:b5:ec:56:c3:ae:f5:41:70:a2:b0:b0:20:07:48:e1:dd:
         8c:9c:52:7c:cb:6b:ea:c9:8f:96:86:84:9f:26:be:6b:5a:20:
         0b:55:12:9e:68:62:7e:55:2a:cb:e9:03:40:35:50:4f:05:c2:
         15:4c:bb:1e:e2:80:5b:4a:92:17:fb:f0:32:ce:b5:5d:8e:a7:
         10:a3:0e:6d:22:af:c2:7f:11:ee:3c:f6:72:35:17:9d:22:2a:
         42:7d:88:fa:b1:39:e8:5d:d7:b7:5a:ff:bb:4c:f8:7c:0a:04:
         16:a8:ca:9d:53:be:01:6b:9e:2f:56:bd:9f:bd:46:8e:7a:d2:
         92:58:15:a3:d4:d2:48:58:5d:9a:b1:79:ca:14:62:48:8d:b2:
         d6:04:ed:fe:82:0d:6d:80:4a:69:96:f6:c2:1b:33:56:65:59:
         9b:66:15:fe:3f:37:bf:5c:15:dd:22:db:0c:5a:67:50:c7:bd:
         d6:6d:cd:46:4e:3e:74:68:4d:f9:79:23:4b:87:83:24:7d:f4:
         ce:70:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----