Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File:                     i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier:          hVBudWfZ9BpZhb/vtTCXAVbhyfLQCmbTNzlTQQa18t0=
Subject key identifier:   58:2E:60:B4:E3:2D:F6:07:B2:8F:23:DD:EF:A8:2D:46:B8:4E:26:B2
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer:       /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial:       01962DF407D275DD19883CC8E0583E305356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
                          2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: qP+sLaMbG+u7AgIuG1dK9xqWU5c/p/EWgkX4pwyVa00=)
                          3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:07:d2:75:dd:19:88:3c:c8:e0:58:3e:30:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b613794927050b22525ab70091835408eee4c79
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=582e60b4e32df607b28f23ddefa82d46b84e26b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:20:dd:17:49:2b:de:87:42:5c:46:33:14:
                    a2:6f:09:51:bd:b1:73:99:64:aa:db:85:51:ea:91:
                    2f:89:d6:79:e6:13:48:21:f2:33:4e:24:db:a2:ab:
                    d5:8f:3c:f6:55:e4:ce:5b:de:a1:d4:d0:b5:84:82:
                    b2:06:fd:07:5d:bb:fb:28:ab:b0:60:f6:91:37:5e:
                    18:33:a3:cf:69:88:fc:43:ce:b1:d8:28:58:01:93:
                    47:f0:c6:c6:2f:24:bf:2a:60:a4:de:79:06:94:3f:
                    a9:7d:bb:53:c2:9d:8c:94:6f:f1:40:16:85:ba:bb:
                    fc:58:db:05:ca:b6:dc:75:3f:24:90:d2:d2:7c:07:
                    38:63:39:38:37:17:22:14:c1:bb:fe:b7:c3:4b:9c:
                    4e:7c:cd:b0:c0:03:6d:b2:02:77:8b:14:df:94:f6:
                    d5:5d:c6:2b:23:23:13:17:8b:82:32:73:d2:df:68:
                    f2:7f:26:06:1e:c5:3c:c7:50:39:cf:cb:ff:8e:b2:
                    95:21:74:34:c4:c2:30:95:3a:d2:26:42:23:c0:60:
                    20:f2:6a:b5:e9:8c:d8:9f:62:ee:68:a6:da:ec:c5:
                    76:c5:15:bd:ee:2c:41:19:0c:99:4f:49:6c:b6:5f:
                    77:81:47:e5:f9:50:59:15:1f:d1:b0:27:ac:41:c9:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:60:B4:E3:2D:F6:07:B2:8F:23:DD:EF:A8:2D:46:B8:4E:26:B2
            X509v3 Authority Key Identifier:
                keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:c2:72:c3:d5:03:7c:fd:ff:55:c5:96:eb:c4:d1:52:80:
         ec:b5:6a:81:32:a0:8a:62:3b:14:30:d3:d7:67:4b:b8:ea:9b:
         95:24:98:8c:1f:d3:65:00:eb:2e:a9:e8:2b:b6:9b:5b:b7:98:
         b7:bb:b0:18:70:fd:a3:22:82:70:23:f1:b7:75:ad:cf:b6:55:
         71:15:7a:45:07:ec:5e:fd:3a:5e:d6:9b:42:a4:39:97:f8:19:
         73:be:9d:90:6d:3c:e3:f6:38:fe:1b:3c:fb:28:90:73:e7:d4:
         2e:e7:b4:ad:9e:be:dd:2c:6a:bf:8c:4c:a8:db:3a:9a:21:5c:
         72:eb:8b:27:03:e7:33:74:7b:71:a3:35:91:03:50:16:e5:e8:
         75:df:4a:b6:45:a3:28:42:ca:f0:a5:64:c2:13:a2:d3:60:fb:
         b2:f0:44:a5:08:41:c0:f5:9f:7f:20:d7:4e:d4:45:b0:79:75:
         b7:e5:23:96:ab:46:7e:1c:77:7c:e3:c3:8f:f5:c8:6d:dd:86:
         95:6b:71:ae:30:5e:d3:5b:d7:3f:b8:1a:4c:3b:9b:72:71:86:
         93:cd:8e:e5:df:b4:39:51:39:da:56:e8:48:88:29:26:5d:15:
         3e:d2:dd:4e:d6:a5:94:f4:82:7d:39:67:84:b9:c5:96:94:f2:
         58:53:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----