Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File:                     IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier:          gJouG/DyOQAaAg4XHD1FERiXIEw/UHxMbG9BQWKvUY0=
Subject key identifier:   EE:B9:D8:6A:8A:EE:37:C4:EB:B0:C7:64:59:C2:07:F6:33:FF:63:7D
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer:       /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial:       01962E99441238091F311E44ECFC2996B9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number:          0CCF
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
                          2: IhQKj6UiQS-W5EmNKI0dkpCOs90.roa (hash: dOyH8r0Q3jqdPxzWjgiYUrfy8XskQY+sMtZqebKaaBc=)
                          3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: rOCkmtLVrIjI3l+ihDT15ifCw7yC6Jrx2+KG9AFXNn4=)
                          4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:44:12:38:09:1f:31:1e:44:ec:fc:29:96:b9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=eeb9d86a8aee37c4ebb0c76459c207f633ff637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:ca:66:87:cb:b0:9a:48:1f:0d:7c:2a:61:
                    a5:fb:a1:fa:d3:c0:0b:97:65:69:8b:46:70:83:71:
                    bd:d3:ce:68:8a:46:07:91:c0:1f:74:bc:c2:22:49:
                    fc:cd:a0:34:c6:02:b6:2e:cc:12:3f:f9:da:58:79:
                    32:91:7e:58:41:db:e6:ed:ff:d6:97:d8:80:f4:f6:
                    73:21:3a:5b:52:4a:c6:fe:a0:0a:54:dc:bb:c9:61:
                    ac:f8:8a:e1:12:67:97:fa:46:73:af:14:e2:b1:82:
                    b4:af:de:57:90:49:df:57:66:d1:e3:57:24:8f:6a:
                    2a:ef:4b:6f:64:24:7c:5e:68:7a:d3:47:1f:fe:26:
                    18:2d:79:48:0f:94:1c:9f:38:a4:99:7e:aa:fb:d8:
                    5d:46:03:20:01:06:34:4d:f5:d7:59:18:4a:2c:31:
                    b8:7a:fb:3a:86:c9:d9:08:8a:84:09:85:8a:3a:ec:
                    c8:d9:b4:a9:e0:3a:1c:7c:e2:67:71:83:9d:f1:1f:
                    e2:35:45:71:04:db:c1:49:82:74:7b:51:e5:d0:cb:
                    65:43:e4:cb:f0:de:45:75:27:39:0f:cb:c6:bd:36:
                    29:64:c3:70:09:34:99:d3:f7:61:d8:a4:30:0a:ce:
                    33:d9:b2:4d:75:17:c8:e8:ec:ed:7a:90:57:aa:01:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:D8:6A:8A:EE:37:C4:EB:B0:C7:64:59:C2:07:F6:33:FF:63:7D
            X509v3 Authority Key Identifier:
                keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:f5:32:29:ed:32:0a:e2:97:50:00:53:07:05:a0:6c:d7:
         e0:e3:4a:b1:78:4e:14:ef:71:aa:e4:c7:0f:30:6b:03:df:12:
         8c:7a:21:2c:98:37:af:e6:38:3a:b6:e3:77:4e:9e:96:68:19:
         60:f5:3f:52:4a:8a:26:86:03:8d:96:1a:e8:70:d1:d9:97:e6:
         1a:22:ac:ef:e3:7c:c1:27:6c:f5:8c:80:1b:1a:ec:25:c9:8d:
         c7:5d:70:a0:e6:de:3e:f6:a2:03:52:23:a2:ea:9f:97:89:38:
         bb:f8:5f:bc:26:95:f4:21:60:04:07:a8:02:b7:15:d6:d4:ac:
         df:c9:35:23:c7:bc:a9:1b:85:43:0f:fd:44:7d:bd:4a:b5:f1:
         bc:ac:5d:d9:72:d2:65:03:0e:6f:63:81:d0:c1:07:fb:bd:bb:
         d9:6f:a8:ac:d4:aa:27:95:29:0a:55:2c:7c:5d:99:c4:88:82:
         a9:a6:65:58:cb:9c:36:3c:e4:57:f3:e8:63:67:11:e4:10:e1:
         ac:41:d9:89:75:42:74:ac:6b:da:27:0f:fc:67:d2:87:e6:22:
         a3:05:51:2e:ab:10:8c:78:35:83:24:7f:b9:82:b2:84:8d:22:
         50:2a:ce:90:67:f4:20:4a:e4:1c:26:7d:f2:bf:8f:ff:ce:1b:
         8d:9b:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----