Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File:                     idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier:          +roErfGY51XkcKpk8LkwGeg6nxEB/+GMZ6eSUseIu0c=
Subject key identifier:   74:87:DB:4D:92:E4:DC:91:3E:72:0E:A7:B1:FA:45:10:36:A1:C2:74
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer:       /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial:       01962F06D1CB03B017421869C94F7E62973F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: J-tps2ELkCfcCcLwGdsaO09dBP4.roa (hash: 6YmY5CCnPEhTUSkoYzLXDEbRDQk4iktCzj/XnKUd+Ik=)
                          2: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: e8Ywq/7OwMWrQOCL3/irkxTSW0bfGqox6KK2WxZVhfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:cb:03:b0:17:42:18:69:c9:4f:7e:62:97:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=7487db4d92e4dc913e720ea7b1fa451036a1c274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:07:c3:25:a1:e1:bd:b2:6f:34:0a:0a:f7:
                    34:d8:4b:f6:90:7a:85:98:0b:52:23:ec:5e:e2:fc:
                    14:9c:25:b8:f1:11:63:fe:4a:7b:e9:10:83:e9:92:
                    12:70:ea:67:f9:d0:b9:d7:70:0d:3c:42:7a:9f:8e:
                    25:05:28:2b:08:38:f0:c0:bc:9d:cb:4f:a6:8e:de:
                    39:28:61:84:47:b4:a0:d9:7f:34:45:a9:f8:a7:42:
                    f8:8e:c3:fd:fe:22:c7:d5:53:ac:7f:75:7f:c2:22:
                    68:01:f7:d2:44:cf:81:80:2a:70:44:a6:7e:99:11:
                    af:6e:fc:d7:12:f3:4a:a0:b6:c4:90:25:a4:2e:9a:
                    a3:29:f5:ba:fa:bb:f9:92:f1:6b:55:83:c1:d3:5a:
                    33:ec:9f:b8:10:e5:80:fe:c6:38:8b:01:9f:f5:eb:
                    9c:87:e2:d1:78:6d:48:45:3f:25:3c:88:34:c3:7f:
                    d6:c5:5c:01:c0:21:5c:9c:91:83:2f:41:b7:85:80:
                    33:45:ed:d4:0e:d7:25:9c:e7:56:99:65:05:65:7a:
                    1f:cb:46:80:87:a3:ca:f7:fa:12:58:82:35:f9:2d:
                    8a:cc:56:2b:46:9d:69:93:4d:e2:bd:23:52:24:c5:
                    33:cb:1e:fa:69:54:66:eb:85:87:54:68:c8:9d:e0:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:87:DB:4D:92:E4:DC:91:3E:72:0E:A7:B1:FA:45:10:36:A1:C2:74
            X509v3 Authority Key Identifier:
                keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d5:23:15:3b:19:2c:ac:b9:67:8a:94:27:52:e4:79:fa:52:
         d4:33:29:31:ba:46:0e:ca:76:77:e4:66:ff:d0:0c:88:1f:92:
         74:b6:77:4f:ed:8c:5a:3d:af:bc:40:de:cd:0d:e5:3d:bb:97:
         dc:2c:1f:20:81:ea:27:e5:c7:40:f0:e5:e0:52:86:94:a2:dc:
         b8:6b:cf:6d:3a:e3:74:b3:f9:0f:58:f3:84:0d:d8:4e:c3:8a:
         14:62:2a:2d:03:23:e8:65:61:28:a0:e6:bb:82:0f:7e:ef:2f:
         99:69:24:f2:2a:82:fd:a7:d1:64:5a:46:50:02:44:bc:47:00:
         ab:65:16:b8:03:04:1f:bf:42:03:c9:7c:b2:8f:61:92:6e:44:
         0f:87:89:4d:b3:cc:33:31:b2:8a:0e:6f:97:8b:e3:a1:cc:1c:
         f5:8a:2d:9e:dc:bf:46:af:cc:b1:f5:21:90:9c:3e:0f:ea:ff:
         38:58:5f:5c:a5:83:5a:fd:3c:92:a5:5b:8d:23:d0:95:cc:e4:
         61:e3:95:ad:79:78:78:bd:52:59:75:b6:7b:5e:79:3b:f5:84:
         ed:1d:ee:cc:5f:ce:ab:c6:d6:24:43:b0:61:6a:c5:1b:6b:49:
         11:53:96:dc:8b:be:3a:91:b0:ac:f1:19:a7:af:a3:28:b0:73:
         da:3d:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----