Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File:                     Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier:          THcRis7aUkSuaQHWiQIBlqzbodnaGmPPj8VGO/BJxjc=
Subject key identifier:   EB:82:59:7E:CB:69:19:FC:89:5B:33:64:2B:11:B7:6C:9A:2A:66:C9
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       01962E98D3D3F04ACD3689D97010688C17C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
                          2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
                          3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: 3GxWSPSUg5PPkPIi9lGa0Vrb6JUXqEzlkBNNL9LvKTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:d3:f0:4a:cd:36:89:d9:70:10:68:8c:17:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=eb82597ecb6919fc895b33642b11b76c9a2a66c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:66:10:d8:9c:a7:73:62:fb:cc:84:d8:50:
                    a1:cd:3a:2a:e4:aa:59:75:31:58:c7:04:fb:04:ad:
                    42:2c:20:fe:0f:10:e3:57:e8:0e:f4:bd:01:df:89:
                    21:34:f6:a6:93:f6:1f:b9:3f:3e:d3:5b:88:f2:e0:
                    b1:64:e7:cf:60:e4:ca:30:e3:1c:e4:46:db:df:da:
                    3e:18:75:4a:42:95:05:d2:a6:fe:55:ee:25:30:47:
                    c8:a8:27:73:be:10:c0:7d:4b:5d:38:e7:56:42:ea:
                    2e:a3:37:51:c4:ea:90:07:29:05:56:f0:e3:64:90:
                    f8:c5:4e:59:b8:4d:31:d0:8a:9b:6f:bd:45:ae:c7:
                    de:1e:c0:8d:49:b6:8e:9a:66:bb:1b:c4:0e:a4:81:
                    eb:b5:a2:e0:00:da:45:7c:81:a4:1d:79:2a:b5:e1:
                    89:5c:65:1a:02:47:71:4b:be:80:ef:b2:a8:69:7a:
                    19:92:63:a1:31:a0:7e:92:9e:ca:fa:47:71:16:e5:
                    3b:be:4d:e2:7c:bc:f9:14:66:09:64:f8:48:e1:1e:
                    b3:e0:33:3f:7c:02:f8:43:e4:bd:f4:a7:92:60:fd:
                    c5:d5:4e:9f:cf:2f:83:d2:af:55:5f:ee:8d:6f:ff:
                    84:a7:c5:af:8a:3f:ae:87:31:4c:92:04:17:92:78:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:59:7E:CB:69:19:FC:89:5B:33:64:2B:11:B7:6C:9A:2A:66:C9
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b9:7b:e6:98:1e:19:33:42:b2:e3:d3:c3:f8:d4:f3:7b:3f:
         db:82:7b:d9:1a:c0:48:31:88:20:0f:ea:f2:3c:e9:45:b6:04:
         40:04:c3:bd:9a:f5:52:6f:75:0f:79:79:e2:b2:20:08:03:f8:
         6f:38:1c:a5:e9:a7:52:05:2d:fb:18:51:e0:36:27:50:84:4e:
         b6:a0:f1:ee:e5:32:d9:4d:ab:da:7a:34:47:5a:10:b7:e6:37:
         54:0b:36:13:43:5a:e2:9a:26:47:18:fd:a9:c6:1a:b1:fa:48:
         ba:74:3b:7d:b4:f9:ab:82:9e:a4:79:7a:b4:87:1c:df:45:f3:
         de:82:d1:83:69:66:95:bc:55:fe:3a:e4:31:10:8c:a9:16:04:
         60:f8:ec:e2:bd:38:a7:cd:c3:6d:4c:06:2a:5c:6f:72:da:4c:
         c4:6e:c1:9e:49:30:80:6f:04:2d:99:67:d7:d9:c3:48:95:bb:
         8a:09:e4:84:26:6a:ca:3e:3a:6c:04:19:00:ed:20:09:b2:31:
         0f:d9:12:05:f9:33:9f:91:f4:73:fb:84:36:07:30:0e:e5:b3:
         9b:fb:b3:3a:0a:2f:15:d6:0c:31:f2:07:2d:bb:58:75:fc:e7:
         ed:66:29:d9:7e:de:b0:68:a7:b5:b6:0b:04:5f:74:c7:61:5e:
         74:36:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----