Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File:                     ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier:          79Pg/PPGG3en5N7+LSdlr1oGGcmXdXJtaY4wpI7R3N0=
Subject key identifier:   CD:74:10:C8:4A:6C:51:DB:C7:ED:96:F1:C1:4F:27:1B:1D:61:FD:06
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer:       /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial:       01962FAB4CC249F0E8D83CC47E8FE07492C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number:          14C5
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=)
                          2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: satyEMmrECaABCnNOcDqiE7M2N23KBzqw4pUcE7o9gA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4c:c2:49:f0:e8:d8:3c:c4:7e:8f:e0:74:92:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=cd7410c84a6c51dbc7ed96f1c14f271b1d61fd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:77:28:54:ca:a8:3e:eb:f0:23:6e:13:e0:
                    25:a6:2c:35:23:af:79:8f:f3:f7:3e:52:1f:65:cf:
                    1c:6e:a6:6a:0f:a1:bb:e3:a5:30:2e:70:58:9b:d2:
                    e4:3a:89:df:19:a1:fc:25:65:11:2c:cf:5e:5a:9c:
                    e9:b0:06:43:d8:86:51:6c:60:d5:ae:3a:a8:85:7f:
                    3d:0a:8a:2b:7c:ef:df:0f:e4:21:3b:52:6e:8b:67:
                    3e:83:34:ee:2f:79:63:25:3f:fd:33:38:56:ed:9d:
                    40:3e:8c:18:36:0a:c3:47:d6:f0:3b:31:07:2d:5a:
                    32:6d:22:2f:21:b3:8d:a7:41:1b:09:bb:26:ba:fe:
                    10:75:ba:2a:4c:b1:0f:0d:61:bb:53:4a:13:dd:aa:
                    f0:56:b1:24:74:1b:8d:43:ab:2a:05:c5:02:ec:f1:
                    b7:39:27:a9:54:cc:84:2d:fc:03:db:8a:05:3f:59:
                    d8:95:e1:a8:57:c9:cd:f4:ff:2f:d0:2f:11:b4:fc:
                    bc:76:74:3d:73:3b:e9:cb:c9:85:b5:8d:0f:55:00:
                    2f:c9:b2:ae:94:79:50:30:05:59:43:8f:45:ad:ef:
                    90:dd:4b:22:b6:79:ba:e5:bd:1e:48:a8:55:f1:1f:
                    80:fb:8a:85:06:cc:29:90:8a:e8:cc:86:fb:2a:4b:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:10:C8:4A:6C:51:DB:C7:ED:96:F1:C1:4F:27:1B:1D:61:FD:06
            X509v3 Authority Key Identifier:
                keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:72:08:1d:74:29:04:03:b9:5d:15:d9:c5:3a:2d:92:fa:
         43:51:17:b0:3d:cd:2d:46:3f:c6:75:da:75:af:02:24:59:5b:
         0a:ca:aa:f8:5c:76:6c:7f:fc:85:3a:be:fc:24:7e:cf:42:5f:
         d0:60:a3:06:e8:5f:f2:3a:16:93:f6:ba:9d:7f:ca:e1:ba:c3:
         83:4c:23:76:d6:33:79:32:63:a7:04:5f:8e:10:2a:99:b6:0c:
         94:5e:d8:3f:f4:0c:0c:3c:a6:ed:01:aa:96:61:3e:1e:8d:54:
         6b:db:5a:39:46:9f:d8:90:61:1e:ee:28:36:1d:68:05:74:5d:
         6a:64:9d:21:e5:44:a9:ee:3c:12:78:f2:d1:fe:a3:c5:60:d3:
         12:ac:16:45:39:a8:2c:9c:c2:5c:b2:6a:7e:17:11:18:b4:98:
         51:ad:6b:4e:7f:4a:6c:d5:33:31:92:20:d2:29:d7:60:80:cc:
         26:a4:85:ea:32:37:d4:b1:77:63:84:ef:da:3b:16:1a:f4:57:
         f5:db:3c:2c:1b:af:cd:e2:fb:5d:da:01:d8:85:64:09:f2:80:
         2f:44:2a:61:95:6b:c7:ad:d7:22:18:e7:bb:14:e5:63:91:df:
         08:b9:61:6b:e8:0f:08:3d:b1:47:e3:78:3e:92:12:49:79:54:
         ca:bb:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----