Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File:                     jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier:          fNOqEB6e0pSfU9K7R9cMBeJgT8KyQc+Z/VIAaEJ8qLA=
Subject key identifier:   20:FA:30:7B:88:EE:72:AC:43:D1:B0:36:85:EB:A3:4E:C9:62:8E:FA
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer:       /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial:       01962F74929740685E81436308F7209E297F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number:          0BA9
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
                          2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: zf5sYY9NHN/YN5TRYe34eADcFnqGdfGQViGhYm9xGRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:92:97:40:68:5e:81:43:63:08:f7:20:9e:29:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=20fa307b88ee72ac43d1b03685eba34ec9628efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:ee:5b:fd:00:90:63:79:2e:db:a8:89:89:
                    52:e7:91:4f:0f:38:9a:4a:ea:16:0d:10:84:c4:91:
                    f4:07:47:d7:ce:50:27:d7:6e:30:7e:c5:fc:f7:9a:
                    34:bd:cc:cd:36:2c:ae:16:b3:b0:1a:c4:39:5f:3a:
                    9f:fd:43:17:8d:3a:fc:36:b7:36:ec:1a:58:ae:15:
                    67:76:5c:04:f2:2a:85:c4:5b:ba:a2:c6:2e:69:f9:
                    06:e5:13:33:41:a5:7e:fd:69:fe:12:e4:5d:61:f0:
                    77:53:07:59:42:d8:ef:a7:87:c1:1a:b4:a4:24:b8:
                    25:b0:81:f3:b1:85:93:93:00:20:35:f1:88:d0:80:
                    69:b2:a7:d1:84:16:ac:c6:d7:36:77:3b:b3:67:6f:
                    07:1e:b4:06:a3:23:84:7c:50:30:8a:82:08:67:66:
                    52:2d:82:b7:42:d8:5e:01:b2:fb:cd:db:ad:c2:ca:
                    c1:86:59:af:03:01:10:6a:2b:45:3c:e8:f3:73:45:
                    8f:f8:59:03:97:e4:13:1e:e6:3f:f9:18:8e:82:fb:
                    92:a8:10:5f:f4:33:9a:27:ad:3a:1d:82:52:10:ed:
                    63:83:22:e2:d3:e7:b7:41:54:ba:30:d0:10:68:7e:
                    62:9d:fc:72:65:05:be:0c:7a:78:3d:cf:20:ef:85:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:30:7B:88:EE:72:AC:43:D1:B0:36:85:EB:A3:4E:C9:62:8E:FA
            X509v3 Authority Key Identifier:
                keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:e7:d6:7b:b5:fa:47:55:b8:86:22:0e:c8:68:a0:0f:82:
         1f:fd:db:72:7e:85:f3:a6:4d:f5:9b:d0:84:ac:20:a7:27:37:
         53:0e:6b:bc:98:4c:97:f3:bc:2a:0f:23:91:6a:23:f3:f5:0c:
         ae:60:21:85:06:38:eb:ee:bd:c1:98:4a:be:2d:11:18:c4:1f:
         2a:81:c8:cc:a5:87:93:ea:85:a9:20:90:88:1c:7b:cd:19:a2:
         1d:fb:49:36:3f:60:4f:a6:60:9c:70:52:21:4e:e6:f3:6d:53:
         a9:f1:5a:76:f0:8e:be:d4:f9:eb:d7:ed:c4:42:39:b5:3f:fe:
         f9:c0:68:ff:60:b2:b4:59:ff:d0:e4:96:2b:f5:00:9c:06:24:
         9e:53:1e:46:db:4d:ed:98:5b:9a:7b:10:32:12:10:f0:63:4a:
         a1:c3:f1:09:e5:52:3a:20:79:ef:84:11:6b:c8:2c:0d:2c:7d:
         22:de:9a:24:ba:c6:00:7c:cb:7b:29:bd:24:0f:d6:b0:6a:81:
         12:37:48:98:31:55:4d:41:e1:43:ce:49:41:a6:91:af:b9:3d:
         e1:95:8d:51:8c:a4:12:25:ec:90:c1:70:c6:2c:0c:9b:41:13:
         48:4a:32:18:5d:7b:04:33:ff:79:72:24:f1:27:14:0c:72:f4:
         c4:fe:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----