Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
File:                     1ikBDNsLMSwy4Hqvm3INc9O806s.mft (raw, json)
Hash identifier:          Xc1xq1F6GjAwgWus2lJkbh3HkChfgMp6+g307I2vnJI=
Subject key identifier:   34:74:5A:7E:C3:9B:9A:57:BD:E7:69:A6:BA:F1:0B:9E:80:08:46:A9
Authority key identifier: D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB
Certificate issuer:       /CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
Certificate serial:       01962F3D7613407B799B6D56CA9E48EE8DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 1ikBDNsLMSwy4Hqvm3INc9O806s.crl (hash: Fj7WgmjJMf8c08yruJqCnkdGG2fsLfPdZTKDr8l+0rE=)
                          2: 24_KLR4ZTxixXjMFlfIhygqGc5A.roa (hash: moxDA+OQx2vpPS9xIam1x12sDttHtdnUlxnInWiXYBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:76:13:40:7b:79:9b:6d:56:ca:9e:48:ee:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d629010cdb0b312c32e07aaf9b720d73d3bcd3ab
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=34745a7ec39b9a57bde769a6baf10b9e800846a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:dd:94:4a:53:39:7c:43:6b:c1:68:d4:35:
                    e8:6b:b6:56:d3:41:29:c4:fe:d9:13:15:d6:4a:c7:
                    fb:99:81:0f:f4:38:66:71:2d:cb:1a:1e:79:5b:1f:
                    fd:c3:7b:07:35:a1:13:13:bf:b8:3f:51:56:41:2e:
                    a1:6b:15:01:37:2a:44:fb:c9:4d:58:37:3c:4e:12:
                    a5:ff:e8:3a:fc:77:2b:d2:e8:40:17:45:ae:08:13:
                    89:97:77:e3:eb:ee:ab:45:f4:b8:af:f8:40:ff:10:
                    31:9e:c4:47:7a:27:97:77:99:d7:7b:92:01:16:0d:
                    b1:24:31:20:ee:3c:cb:52:ad:3d:a1:7c:d0:e1:5e:
                    7d:84:d1:b2:d5:23:40:5b:44:b6:d4:35:8c:16:04:
                    42:00:64:27:48:b8:6a:ce:c8:90:a7:e4:40:dc:46:
                    50:6e:2c:6d:30:8c:62:cb:15:37:e4:2e:50:d5:2f:
                    8d:3d:fd:2d:c5:33:66:6a:ad:7f:aa:92:e1:76:16:
                    0b:78:d6:c9:82:d2:50:ae:e2:94:87:6a:a9:d1:81:
                    78:12:16:04:0d:f5:37:00:de:04:5f:81:b9:b4:d8:
                    ea:a1:2d:c8:c6:ad:96:64:af:df:e3:a0:b7:7b:5a:
                    05:09:e6:bb:1f:09:27:58:a6:d8:87:dd:fe:37:75:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:5A:7E:C3:9B:9A:57:BD:E7:69:A6:BA:F1:0B:9E:80:08:46:A9
            X509v3 Authority Key Identifier:
                keyid:D6:29:01:0C:DB:0B:31:2C:32:E0:7A:AF:9B:72:0D:73:D3:BC:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ikBDNsLMSwy4Hqvm3INc9O806s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/194c1e-9710-4d35-823b-5dd33994a241/1/1ikBDNsLMSwy4Hqvm3INc9O806s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:30:80:d6:71:9f:4b:ed:58:a4:34:80:25:90:46:fc:10:
         ff:b6:89:ee:91:8f:0d:10:b9:23:11:26:d0:38:86:f4:89:3d:
         b4:44:3a:29:37:c3:d8:20:c7:70:2d:4b:8d:7b:e8:53:56:c4:
         1d:2b:d3:5f:7e:45:62:b1:31:af:32:9d:fa:18:5a:b6:87:6b:
         cf:0f:dd:1c:96:35:91:15:d6:50:d2:2b:9a:b6:d5:45:99:5b:
         dd:eb:5b:73:3f:35:36:4c:11:8d:05:fa:d9:95:b0:cd:5d:ef:
         5b:cd:51:0f:04:2e:7a:d7:3b:6c:25:34:80:38:84:16:c6:27:
         84:af:51:8f:b7:be:1a:42:b7:1b:90:23:ec:f2:f5:55:63:03:
         be:43:cd:28:49:4c:27:e4:42:ca:11:c9:fe:9d:23:3a:e6:80:
         76:c1:c7:f5:e6:fc:56:dd:84:f5:f2:cf:ae:d8:b7:22:52:80:
         29:3e:b9:47:33:1c:0b:58:e8:2b:84:0d:81:06:c2:57:8b:c9:
         53:6f:52:40:e0:ef:a7:5c:9b:9a:30:b8:bc:f2:b4:4e:a5:dd:
         1d:b7:67:ec:86:a8:17:1e:26:83:a5:62:52:c0:98:59:6c:b8:
         80:96:98:ac:e2:d7:6b:11:90:d1:6d:dd:e9:f3:d0:84:88:4f:
         31:47:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----