Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File:                     1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier:          xY/FWD6RD7yIJ8rnxOb0TqavVrYejPHrHK/+hmVAcqE=
Subject key identifier:   80:7B:96:77:EE:E0:2E:94:CF:D3:99:87:BA:7B:67:EC:11:03:43:15
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer:       /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial:       01962E99912C7B905DBE110BE99A7E376532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: ZgJa6A2S3G31aTnlBF3c50te9yMD1ZGQwPcUWt1y79s=)
                          2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:2c:7b:90:5d:be:11:0b:e9:9a:7e:37:65:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=807b9677eee02e94cfd39987ba7b67ec11034315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:03:0f:14:2f:e0:15:31:45:74:94:e9:26:
                    2a:cb:d4:98:eb:54:0a:65:a2:73:b7:8f:e1:94:71:
                    94:1a:ff:f1:2e:56:b3:ee:2a:87:08:ed:7a:14:69:
                    eb:00:62:af:cd:82:99:2a:62:76:7d:24:18:4a:34:
                    44:a3:d6:ab:d4:41:58:33:7f:c6:e3:4e:bc:7b:de:
                    5f:de:e3:f8:27:b6:72:33:76:2c:72:d9:8a:3c:0c:
                    34:75:13:70:83:bb:d5:01:cb:ec:49:87:e6:2a:4e:
                    c3:d6:6d:ad:cb:cc:64:56:cd:68:80:1d:bd:f8:26:
                    c0:4f:51:c0:01:03:13:1b:b9:dd:92:1b:99:5d:96:
                    01:ac:f0:ce:9d:c9:a5:ba:e0:7e:ab:9d:6a:5f:ad:
                    64:b1:35:60:c6:ce:a6:9b:3f:19:9d:46:20:cd:8f:
                    ac:e4:e3:ad:7a:f6:23:b5:53:f8:10:4a:19:3d:93:
                    62:ff:5e:c3:23:c3:af:5f:9c:90:d5:a7:58:be:48:
                    8a:9c:f8:e8:63:39:ba:ce:07:4d:73:27:67:e1:c8:
                    02:46:3e:53:68:96:05:47:11:88:0b:78:8a:a1:b2:
                    1a:f2:c1:40:24:78:76:e8:ec:e7:ff:5d:2d:cc:fc:
                    48:da:5c:75:ab:b8:bc:8f:5a:05:d6:89:02:a0:6a:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7B:96:77:EE:E0:2E:94:CF:D3:99:87:BA:7B:67:EC:11:03:43:15
            X509v3 Authority Key Identifier:
                keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:a8:d3:73:03:55:15:be:9b:f8:06:fb:33:0c:b8:5c:58:
         36:99:58:3d:94:53:55:3e:3b:5e:99:0b:44:e4:f0:ae:18:63:
         79:2d:f1:db:74:14:c2:87:bf:87:f8:c0:da:76:32:33:9b:cf:
         75:b6:1e:e4:c7:71:67:b6:05:0d:91:07:27:8b:49:b4:5b:21:
         36:a6:99:a8:c3:15:ec:a8:9b:70:32:ec:11:a3:d1:1b:53:8e:
         55:9d:eb:e2:62:e0:86:be:f3:0e:17:b8:5d:53:67:42:9c:94:
         d0:89:96:04:f3:b8:d0:39:b5:ae:1b:f6:8c:15:46:7e:95:31:
         e0:4e:b1:ca:f1:8c:9f:54:df:ad:f3:28:0c:a6:d2:e8:bc:eb:
         3a:38:9d:bd:fa:bb:6c:17:64:f8:be:fa:66:25:26:9a:ab:4a:
         56:e6:c7:e6:6f:51:19:ed:80:38:f7:48:84:a6:2f:14:b7:05:
         df:b5:5c:92:54:ba:2e:a8:7b:18:86:1d:08:2b:56:c0:39:ca:
         3e:46:92:46:fc:83:f8:7d:c9:14:d5:02:a0:ab:d6:67:f1:b7:
         7e:3e:c2:38:98:0a:53:d1:18:e5:5e:37:f0:91:73:31:a4:f7:
         2e:5f:86:3a:8c:ea:11:ff:4e:50:de:4e:65:51:47:8f:55:a7:
         58:01:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----