Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File:                     IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier:          rSixtrzVOSpKonVi5sMt2X84eN8U6adIMyMobWfu58I=
Subject key identifier:   FE:D6:BE:35:41:28:4D:67:14:D6:41:3F:DE:48:71:90:9C:E3:80:B0
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer:       /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial:       01962F3D9F87D5DA00820508AF3DE4016DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number:          0DC0
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
                          2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: g4P2EwJxACrVQW3NYM52smtw0INQYLubHQ3SAGMUX3M=)
                          3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
                          4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:87:d5:da:00:82:05:08:af:3d:e4:01:6d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=fed6be3541284d6714d6413fde4871909ce380b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:83:c8:96:e9:47:4a:d4:73:3a:0e:6a:d4:
                    a8:f6:83:bd:64:db:bb:0a:3e:9e:44:7e:05:8c:e5:
                    93:cf:b3:47:d0:c9:81:29:40:e5:e8:e1:c3:f1:f9:
                    88:2b:36:29:1e:05:33:95:f1:f5:4f:4c:0b:85:e4:
                    81:1b:0e:64:b2:f5:b3:62:c9:fc:e0:9c:53:fb:df:
                    31:63:1b:ce:41:28:8e:d8:b8:f0:f5:81:2a:9e:99:
                    6f:c9:cb:69:22:1f:b6:6b:60:4f:bb:27:17:36:a5:
                    b1:d2:36:65:aa:a4:ab:df:31:f6:be:af:a2:d5:c3:
                    80:53:e4:2b:03:12:bb:1e:aa:4f:ad:87:e8:44:6f:
                    64:1a:56:99:5a:95:c2:fb:30:18:91:05:44:1f:cb:
                    21:24:e3:77:3c:58:8a:95:89:8d:30:59:1c:fb:65:
                    01:6c:1a:1c:35:ed:aa:26:aa:a3:85:b8:d6:15:7a:
                    fe:6b:d2:a9:e1:f6:b6:f0:eb:56:d9:80:11:d6:51:
                    7f:90:b3:18:e0:db:68:6f:2a:3d:d5:78:82:e0:d4:
                    fc:9e:4d:79:ea:80:fc:7e:cb:4e:aa:de:6b:b9:44:
                    cd:43:5e:3a:4a:1f:fa:21:53:ec:c9:78:d2:ac:54:
                    46:ee:9e:5a:ba:32:93:04:3f:eb:bf:8a:de:95:66:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D6:BE:35:41:28:4D:67:14:D6:41:3F:DE:48:71:90:9C:E3:80:B0
            X509v3 Authority Key Identifier:
                keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:b4:cb:fe:55:da:08:95:76:ac:d6:04:05:a5:5a:a9:47:
         aa:66:b8:69:41:06:51:76:85:01:a9:45:c6:67:e6:58:0a:de:
         22:a0:17:64:41:ff:04:3f:ed:18:36:7e:0e:48:97:ad:70:83:
         18:30:49:f3:b0:13:f6:1a:ad:ae:84:a0:2e:b3:7e:bb:7e:3e:
         78:b6:7b:73:54:01:0c:2f:45:05:52:98:91:5a:e6:4c:df:69:
         7b:52:97:41:26:b7:83:c9:fd:18:cb:a1:87:54:f5:58:34:e8:
         a8:88:6c:a9:77:4a:9e:f3:eb:65:2e:cc:f8:1e:79:c9:d0:02:
         76:7f:af:8a:00:69:c7:4f:60:a5:4e:79:a1:48:20:53:65:16:
         82:00:da:d3:7d:eb:e0:8b:0c:46:29:79:63:bc:e3:a1:2b:4a:
         98:5d:01:38:23:a5:56:94:61:9e:8b:8e:2c:1f:88:cb:dd:16:
         29:36:c5:6c:74:4b:0a:17:1f:7b:24:40:71:9b:91:be:18:fc:
         66:65:46:1f:a0:b4:4e:6e:72:2f:5f:65:50:40:15:bf:6d:b2:
         bf:c8:23:eb:b2:52:31:a5:75:cb:a6:b1:30:9f:d3:18:1f:db:
         ed:19:96:41:95:04:07:19:45:1d:1d:29:58:ba:39:b2:77:4e:
         5f:5c:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----