Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
File:                     IPblO2l60mO0uk6kmBQ2aog7VK0.mft (raw, json)
Hash identifier:          6buwzrOc2saFEdfcr3PFBW1C+61VgF0nihn8DdH+uq0=
Subject key identifier:   C7:D5:AF:CA:03:9F:20:27:BB:41:5A:79:83:B1:F3:F6:D5:B5:8A:64
Authority key identifier: 20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
Certificate issuer:       /CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Certificate serial:       01962E99DCE972727EDC5671698A712CF559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:37 +0000
Files and hashes:         1: APkFGhaR8YtianTelxgsgSDeVhM.roa (hash: 2Pdlo7CTCPlVPPRVRRuXnXVCI5TavhpFPnrp+xkks5o=)
                          2: IPblO2l60mO0uk6kmBQ2aog7VK0.crl (hash: GnVionPLlnqouaXyUOUIxV2IHtd+GVSNbw8681p+9qA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:dc:e9:72:72:7e:dc:56:71:69:8a:71:2c:f5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
        Validity
            Not Before: Apr 13 10:02:37 2025 GMT
            Not After : Apr 14 10:02:37 2025 GMT
        Subject: CN=c7d5afca039f2027bb415a7983b1f3f6d5b58a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:05:4b:84:3a:db:53:c8:b9:6d:59:67:64:f7:
                    13:03:8f:60:fc:98:c7:27:43:0d:d0:f5:98:ae:44:
                    2f:d6:b0:76:25:e9:99:b9:43:cd:9e:77:cb:be:b4:
                    89:4e:5e:a3:93:09:39:9b:d2:0a:55:b6:28:09:fb:
                    05:05:61:31:3a:43:b4:1f:e4:d0:9b:c1:61:8c:0d:
                    49:fc:50:88:52:cd:8d:77:0f:9a:e2:04:b2:4f:37:
                    7d:63:be:2a:5a:ba:16:0c:3c:31:49:b9:82:30:5f:
                    80:38:94:60:76:c1:29:ae:cc:ad:2c:04:72:a1:c7:
                    0d:a4:73:3e:5d:56:01:35:d7:0d:ab:97:e6:0d:88:
                    3c:1d:5d:f2:2a:68:d6:fb:92:ae:3e:9b:42:54:95:
                    4d:90:f3:8d:c9:c9:ce:14:ac:77:d1:03:ed:71:a9:
                    07:21:09:43:fe:5f:cc:34:2d:99:1a:5d:f6:7f:5a:
                    4c:62:33:50:5a:a3:6c:4e:60:57:d7:41:d7:bb:27:
                    00:c4:ba:82:67:db:51:4d:8b:66:33:6d:a3:80:ca:
                    75:d8:fd:96:1c:04:87:35:b5:a9:af:1f:a4:5f:6c:
                    96:ff:b9:e8:96:f4:51:c4:49:24:db:85:73:cc:6f:
                    83:f0:97:94:e4:76:0f:65:46:84:20:1a:db:c4:11:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:AF:CA:03:9F:20:27:BB:41:5A:79:83:B1:F3:F6:D5:B5:8A:64
            X509v3 Authority Key Identifier:
                keyid:20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:de:dc:97:3b:75:67:bf:2e:4e:c3:1a:1f:aa:6d:9a:27:
         51:ab:12:8a:d4:ff:81:34:62:33:a0:5e:8b:99:58:7c:db:22:
         58:32:ea:9a:07:47:b1:24:4e:d6:2c:20:e5:fe:16:b5:4b:25:
         8d:e9:2c:98:38:b6:04:23:ca:8a:c0:68:6a:a4:e1:e7:42:8d:
         d0:ba:88:bc:15:d9:fe:28:65:c1:af:27:5c:e7:40:dd:a2:15:
         a9:f3:52:56:f2:0b:d7:d6:b0:44:6f:dc:6c:c2:6b:42:02:db:
         de:47:9c:55:59:97:68:58:75:2e:c9:d6:80:e6:ee:78:8a:18:
         68:e4:23:8d:05:cc:f3:f3:0a:db:76:d5:99:d7:56:73:1b:f0:
         fd:02:e4:ae:73:41:89:c2:03:49:c6:e9:33:5a:93:4d:57:f2:
         ab:9e:34:0b:8f:cb:5c:9a:9e:26:ee:9e:f6:9e:72:31:a1:ca:
         0f:a1:5b:0c:27:70:d7:b7:ff:15:93:17:00:b0:20:64:09:0f:
         f5:04:e0:2c:ab:13:2f:1f:37:41:13:e9:67:5c:69:38:d3:0f:
         83:e9:8a:d9:da:1e:6d:92:3f:e3:0d:99:d4:ed:87:55:2f:84:
         0d:c0:53:25:7b:c0:5b:9f:35:f6:f6:a2:e6:59:fb:3f:a2:97:
         b0:f8:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----