Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File:                     1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier:          yN+xOJxuScaIYSUFe6I5dCCe0HVFTBjnEcxGBudeecw=
Subject key identifier:   DD:2E:D8:50:AA:F8:D1:D5:D2:73:C0:C4:F9:3C:3C:37:24:DB:E5:2A
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer:       /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial:       01962F743B11E14F111E25913B172D5A15F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: nWODJSgFOj+G1DRkZ+hpvYGsKngd1o5LbkrKtfQd7CE=)
                          2: Oic624JnJmz9lkyUCkfkxynrzXU.roa (hash: reuQNdNLE9OYq59c7HheLuUPxQ+GdUmZR0j+FA5WU8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3b:11:e1:4f:11:1e:25:91:3b:17:2d:5a:15:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=dd2ed850aaf8d1d5d273c0c4f93c3c3724dbe52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:e8:af:d1:21:4b:a7:49:79:66:37:93:74:
                    74:d3:b9:02:6d:1f:99:33:6c:7b:f3:c7:bd:73:7e:
                    7b:23:97:f2:7b:fe:83:1e:c0:00:76:29:85:82:e9:
                    83:af:cb:ad:b6:da:f4:e7:30:f1:01:6d:e6:aa:b2:
                    c2:7b:dd:3c:5e:ec:9c:48:fd:42:fd:14:f1:cf:3a:
                    11:13:f3:eb:d0:4a:50:a8:fe:30:b9:1f:33:0b:c5:
                    99:c6:5a:20:10:5a:ea:8c:8f:34:a4:df:06:d1:8e:
                    09:bf:8e:3d:81:a8:b5:8d:74:d7:2f:ce:b4:98:3e:
                    84:79:7e:b3:7f:66:d7:4b:2d:6c:0b:93:25:3c:67:
                    34:66:65:9d:ba:0c:e1:7a:2f:43:ce:33:ea:cd:b3:
                    ed:7a:cf:c7:e3:40:41:e2:e4:e5:4c:c1:2b:e3:5f:
                    10:a0:7e:75:34:01:72:59:a5:02:c5:d2:6b:f2:d1:
                    a1:cd:d9:ae:a8:18:bb:8a:ac:4f:4f:4c:bd:6e:eb:
                    44:93:e3:97:6f:2b:f4:28:25:bf:01:bb:26:5c:03:
                    ee:09:0f:a3:92:75:bd:fa:84:bd:c9:70:bf:64:01:
                    4b:a2:09:a9:1a:cd:81:84:e4:1f:b6:b5:78:5a:f7:
                    3d:42:25:6c:89:7b:e0:49:96:ea:35:bf:4d:90:6c:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:D8:50:AA:F8:D1:D5:D2:73:C0:C4:F9:3C:3C:37:24:DB:E5:2A
            X509v3 Authority Key Identifier:
                keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:47:5d:9b:57:de:c5:6e:56:e7:10:2d:45:40:b6:b0:ff:
         cf:f2:cf:2c:cc:e6:61:06:84:7d:50:4a:d9:8f:a8:03:f1:a1:
         56:ce:27:67:6c:bf:b4:24:c6:c0:27:00:f2:de:8e:b1:b1:d0:
         20:89:11:71:2f:ed:73:6f:a8:8d:1e:e2:29:2f:26:19:66:17:
         55:32:1b:60:a6:0a:ee:65:9d:e0:d5:63:86:fb:11:67:9f:3e:
         a9:92:2f:69:ab:f0:58:1b:d2:d2:ba:ca:51:6e:1a:e5:68:d8:
         fb:5e:22:14:f5:56:40:34:6c:39:39:6b:92:8d:65:0d:a8:fc:
         0b:c0:ef:4b:fc:05:35:e7:24:84:7f:20:f9:e7:a2:fe:52:7c:
         fc:40:cb:05:7e:13:60:75:26:3a:5a:3b:50:2b:81:da:c4:cb:
         95:bd:56:ff:6d:71:14:d0:ed:45:fe:59:b7:58:7c:53:06:09:
         34:e2:66:54:b9:fb:92:f8:45:48:0d:b9:f6:68:e5:d8:81:a8:
         a4:63:d2:b1:13:a1:56:09:1b:d4:8c:da:bf:8d:3a:22:e3:32:
         3d:76:8e:78:56:02:dc:07:05:a0:f4:5c:51:5b:dd:b9:49:ff:
         f4:c7:51:03:33:2c:24:4b:f5:ec:ca:cb:e1:19:f1:15:ef:66:
         57:e4:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----