Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File:                     ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier:          g7lnU9c6OAfD0+JKFX0aWrEnGcGAzYWFaZnndFsgXxQ=
Subject key identifier:   B1:07:47:84:40:6C:C5:2E:87:B6:99:DF:65:AD:C9:7C:76:0E:01:E0
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer:       /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial:       01962E61DB3C8C41B9AC5CF45606CAD6EFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number:          0E2D
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
                          2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: Vg0yFDpc/fkHnPXBtUYgpB3H6AQmDvb7CMaaFEWxutc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:db:3c:8c:41:b9:ac:5c:f4:56:06:ca:d6:ef:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=b1074784406cc52e87b699df65adc97c760e01e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:f2:61:ea:2e:3e:09:77:fb:cf:b1:02:d2:
                    b7:17:74:c4:2f:ea:a5:3f:04:ba:df:d9:7d:e7:f8:
                    6a:8a:c9:de:cf:05:77:f4:09:6c:74:34:57:99:12:
                    90:9c:32:f6:57:fc:33:6a:1d:c1:0f:6f:a8:6f:e7:
                    12:87:8e:3b:a0:37:5a:92:0c:fd:19:ee:a9:f0:e8:
                    1b:1a:1d:46:13:51:f8:67:3d:5f:45:8c:a2:b7:44:
                    ef:7d:91:a3:3c:73:80:79:2b:ed:90:73:b9:6d:94:
                    0e:66:e9:9c:59:d5:a5:57:25:06:86:3c:dc:71:6c:
                    9e:bc:87:8e:37:5f:52:8f:42:6c:41:eb:2d:e7:3f:
                    07:5f:f1:3c:c5:4a:f9:a5:fd:85:22:fb:5e:56:ee:
                    eb:86:b6:88:7b:65:70:0a:91:59:a2:27:6f:4e:3c:
                    a6:f2:67:47:6f:61:a7:31:fa:b0:05:a4:4e:bd:54:
                    8a:e7:e8:3b:4d:56:bc:ab:42:4a:0e:2c:8a:22:32:
                    5b:90:29:3a:0e:cc:38:0c:e3:28:00:13:1a:f5:54:
                    39:15:41:54:79:5f:3b:5e:1d:da:9c:e6:21:a5:82:
                    a0:fc:ce:45:4f:de:4f:58:91:fa:44:fb:86:c6:a5:
                    da:f1:9e:c0:ca:23:4c:2f:aa:96:af:c6:bd:e0:c3:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:07:47:84:40:6C:C5:2E:87:B6:99:DF:65:AD:C9:7C:76:0E:01:E0
            X509v3 Authority Key Identifier:
                keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:67:61:8c:22:66:f5:f8:b4:be:6e:45:cd:aa:71:ee:c4:b7:
         86:55:50:47:95:f1:c4:2b:de:5f:9c:6a:34:c8:98:2c:16:51:
         d0:c1:1f:cc:4d:e4:0e:4b:06:5d:a5:d8:ba:32:2b:51:e7:86:
         61:89:0f:1d:57:3e:e8:1f:f2:ea:f4:c0:f1:a8:f9:82:3f:16:
         cc:7e:7f:2e:e7:ca:66:ba:50:7c:5b:a9:18:26:a6:45:c9:6d:
         c0:d5:d0:e5:0e:97:66:f3:3c:66:42:5a:2a:77:d3:24:39:0e:
         aa:2d:49:3b:91:ee:02:63:f4:65:ba:7c:9d:41:db:2d:96:d6:
         4e:62:d4:c9:f7:e6:bb:27:de:75:f7:13:5c:b8:c3:a4:68:99:
         eb:88:ac:81:ee:f4:31:d4:b7:e7:c7:a0:a2:c3:d7:ae:4f:32:
         bc:4f:6e:78:73:a0:54:33:f6:66:1e:f3:f2:25:b3:68:f8:73:
         da:99:cf:d5:ee:7a:35:c3:a3:d4:ea:be:ed:ff:e1:77:09:15:
         28:b0:d2:72:55:10:9e:cd:dc:22:65:bd:ae:c3:c4:bc:22:86:
         d2:2b:2e:f2:d4:ef:ca:e2:c5:4b:40:10:61:fa:d5:1f:41:7e:
         50:fd:fd:d2:fa:ec:5c:65:52:b4:bd:55:76:db:00:ff:68:c7:
         e5:58:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----