Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File:                     iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier:          adQ1zex8D6S6OcLv+JnfeUDVeXhZ8ZjthkO6jd9QNis=
Subject key identifier:   5B:0E:E1:5C:5B:F1:7D:0E:DC:AE:B7:B6:1D:1C:41:25:24:1F:49:89
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer:       /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial:       01962E61ECAE1956CF4281D1CE310906DDCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: 6G1l9wnBDywZk2+OUJiSMTkS63a8moLNfyFu3TH8sNo=)
                          2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:ae:19:56:cf:42:81:d1:ce:31:09:06:dd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=5b0ee15c5bf17d0edcaeb7b61d1c4125241f4989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:3b:34:83:ab:47:1a:7c:f8:55:d1:33:7f:
                    cd:09:0e:93:0e:76:64:1f:14:b0:02:27:fe:e6:7f:
                    0b:3c:71:0b:8d:71:07:00:3d:40:54:de:e3:49:3e:
                    c3:48:96:94:c4:72:84:fd:5c:25:7a:f3:66:9d:76:
                    65:5a:0b:35:dc:45:0a:00:bd:73:dd:e9:11:ee:ac:
                    f6:97:b0:54:17:cf:92:ff:7e:53:19:6e:92:d0:e3:
                    2e:10:3e:8d:e0:27:2d:4f:9e:ee:83:db:4e:6d:d6:
                    66:4f:90:b2:6a:75:34:dc:e9:18:a2:d8:b2:5d:f5:
                    c7:75:f3:d1:48:af:46:af:8d:b5:65:29:d1:13:3b:
                    cd:a6:98:12:97:b3:c6:1e:6e:79:e8:28:be:06:12:
                    be:7c:89:67:e1:0e:d7:d4:44:fc:35:aa:45:07:6d:
                    bf:4c:a1:0a:75:79:4b:0d:d2:8e:61:42:83:f9:92:
                    f1:15:2b:50:db:6d:0f:bb:1d:79:23:a1:02:b3:db:
                    34:e2:23:8b:c4:43:45:4a:af:1d:42:ab:54:e5:03:
                    93:9a:37:74:92:fe:58:d8:c8:8c:dd:ac:74:53:16:
                    f1:2d:45:ef:35:6f:25:12:20:fd:75:7f:68:bc:46:
                    2a:94:49:71:3c:57:d4:64:b2:0e:61:26:7b:88:b4:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:E1:5C:5B:F1:7D:0E:DC:AE:B7:B6:1D:1C:41:25:24:1F:49:89
            X509v3 Authority Key Identifier:
                keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:ab:b5:a5:3e:96:2d:9f:b8:a5:e4:65:8b:7a:7d:17:5b:
         3d:e8:75:0a:84:4c:b0:c7:52:c4:2e:53:4c:3a:52:e9:be:e3:
         0a:11:c9:fd:b5:95:48:ea:0f:f4:a1:00:36:b1:48:8f:14:2c:
         4d:6d:ad:43:56:a2:f2:8a:53:4e:4e:c2:17:1c:ee:b3:66:dd:
         51:8c:05:0a:d5:9e:b1:cd:84:46:d2:2a:99:7d:c5:88:14:1d:
         d7:d8:37:e1:a1:9f:c1:7d:a0:cf:c1:2a:a5:db:46:6e:f0:18:
         10:ea:5e:c3:f4:20:3a:03:fb:45:69:81:b4:b7:a5:80:5e:26:
         1b:b3:45:06:73:fc:0b:3e:4d:2a:34:29:21:de:fd:03:74:d9:
         68:c7:c3:49:e4:4b:27:a8:ee:20:b0:0e:84:b7:7b:72:86:1f:
         46:3f:d0:f6:cc:97:30:c6:6b:4a:59:60:9a:c6:5a:a0:ab:12:
         92:f5:a1:ae:c4:32:7a:60:22:cd:d3:83:49:88:1e:8f:b7:d8:
         d1:e1:8a:2c:ae:11:27:2e:f8:7f:96:30:93:a0:7a:9c:26:81:
         68:8a:a8:90:30:0c:01:e3:fb:21:44:16:23:51:2a:a7:c6:d4:
         dd:80:d4:16:dd:f2:62:22:55:ad:62:3b:4c:bd:33:d8:1d:1e:
         68:b7:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----