Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          KC4jyd2wnWmIodba7zGXnU8wmyoTyfz4MmFSWqR3wls=
Subject key identifier:   8B:29:BE:26:07:53:E7:DA:30:C6:FB:5D:17:F0:E7:46:80:C6:8A:2B
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       01962F74BFB2BEDDFFD669BC21021C709BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: GJD8bfj7CDyDTZI2kUpgDK-LxFE.roa (hash: PT10MFBUB5fp5Yrzzf9K0jem6hIintZDoPzR+wZ8gys=)
                          2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: jU0yABKqzGnyV8SiNwaq7t1QtgJyFVP0SjgforH3/JE=)
                          3: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (hash: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=)
                          4: eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa (hash: ZCm89d0bFZWMMw8HJ3JqNzZcAFRBcFRa0dAA/NZScrg=)
                          5: uNRCg8RCGt-29v-27BZf_7lsI44.roa (hash: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:b2:be:dd:ff:d6:69:bc:21:02:1c:70:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=8b29be260753e7da30c6fb5d17f0e74680c68a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:85:ed:c7:6d:9a:4b:84:b5:de:00:a8:8f:
                    e4:91:a6:ef:62:b4:de:36:97:0a:06:04:0d:e8:70:
                    b8:25:21:99:8f:a4:c1:76:15:89:b4:5d:2d:3d:8f:
                    4d:1e:f4:94:01:bd:38:36:31:28:b0:fa:df:cd:1e:
                    b3:0b:75:dc:fd:51:a9:97:e7:a4:e7:54:44:40:ed:
                    e3:11:44:86:ea:05:25:5b:2f:ce:1f:e5:51:63:bf:
                    a1:9d:b6:4f:d5:a3:23:1b:82:48:24:54:86:70:90:
                    f6:6d:a2:bb:1e:31:da:51:c9:1f:43:d9:29:36:7d:
                    40:e7:81:b7:a7:31:2a:20:d8:94:4f:d7:b8:20:ff:
                    2b:bd:ce:d8:0a:ac:9f:2f:ce:84:07:b1:7d:8d:61:
                    39:86:08:3b:70:da:76:93:66:65:f0:ca:fc:ea:b0:
                    76:e1:f8:0f:a2:69:15:a4:b0:62:51:dc:b5:ca:a6:
                    28:3b:40:09:65:be:7b:2f:cd:b4:e9:9e:fb:e2:3c:
                    2d:af:71:94:c7:48:eb:30:6a:99:82:51:a7:5f:93:
                    69:2b:07:cb:57:13:6b:7b:9d:8d:8e:e7:dc:f2:fc:
                    4a:26:e9:10:6f:e2:cf:f3:5e:69:de:46:c8:4e:45:
                    ad:45:4b:c3:43:2c:af:6f:e6:13:d1:2d:fd:91:b2:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:BE:26:07:53:E7:DA:30:C6:FB:5D:17:F0:E7:46:80:C6:8A:2B
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:16:1d:c6:ac:73:67:ca:82:22:08:56:b8:97:5d:18:84:c0:
         3f:57:29:97:fe:09:42:db:ad:2d:54:3e:04:70:d3:c1:94:b3:
         27:2a:b9:de:29:20:49:94:61:eb:2f:9a:03:26:81:46:22:81:
         5c:98:32:b5:57:2b:11:f9:93:59:ac:78:1d:46:33:9f:3e:ce:
         45:ac:9b:55:9b:d9:73:60:e6:20:c9:7c:d9:b8:df:5f:2e:14:
         bc:8d:db:88:c8:6a:78:f0:19:f8:9d:a8:f4:a6:cb:5a:60:0b:
         c4:c9:4b:09:34:b1:90:1d:0a:3d:94:11:ca:04:35:4b:ba:f0:
         49:d3:6a:9f:be:6e:14:6f:28:79:43:6c:1e:30:92:1a:64:19:
         db:f5:45:9d:dc:8a:09:ea:7e:40:a8:01:f8:7e:a2:bd:43:3b:
         93:10:e8:9e:35:0c:03:e3:45:e0:ba:f0:e0:a9:65:78:dd:1f:
         05:24:5a:8e:a3:3b:8d:9c:e4:74:ba:df:0c:f8:75:e0:b5:37:
         3f:6e:12:d6:fa:0d:69:9f:34:f5:bb:36:a1:1d:0b:70:7d:c3:
         7b:26:cd:af:7e:a5:7e:75:dc:f2:14:74:ca:7d:d6:2e:51:1b:
         9d:13:7d:2a:a0:98:c8:51:da:01:54:fa:6c:64:3c:c9:c7:88:
         9b:7e:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----