Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File:                     IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier:          M2P6LrPLR84YrTOhNw/3Eb2q0uP4TnHpyIiVPGgOnes=
Subject key identifier:   E7:5C:2A:18:45:97:1F:CC:40:66:0F:A3:20:32:3D:B3:F7:76:B4:2E
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer:       /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial:       01962E99916EF5FDAFB5D9E2989FE9576558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number:          106A
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: 3KviZ1eXkpu1GxWy8KvKGIH/+RaPNcdOp9PlVUP03Ys=)
                          2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:6e:f5:fd:af:b5:d9:e2:98:9f:e9:57:65:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=e75c2a1845971fcc40660fa320323db3f776b42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:47:4d:f6:72:7c:eb:e4:6f:5f:e5:a3:a2:
                    80:1c:c0:49:9e:6f:15:b8:7f:07:1c:e4:27:59:2a:
                    4b:5c:08:69:61:5c:29:00:70:8f:ab:76:18:43:4c:
                    cc:57:4a:91:1a:d4:60:25:eb:f7:75:09:29:c3:1e:
                    13:71:13:08:bd:a7:4f:ab:c6:8e:25:82:19:fb:08:
                    22:5a:f0:fb:b2:aa:56:9a:35:2e:53:f1:31:6e:ed:
                    e9:6a:c0:52:16:13:3f:bf:21:e1:4b:b0:57:ba:03:
                    af:a7:6e:1d:2f:8b:95:cc:88:b3:30:f3:5f:ae:6a:
                    3d:ed:a1:8c:a2:c8:b3:13:fe:70:f8:27:d8:15:94:
                    c1:44:10:38:80:49:f7:cf:60:f8:20:89:0a:8b:49:
                    c5:23:5b:1b:43:a2:82:e9:81:c4:8d:1b:76:c5:58:
                    56:a9:47:db:ff:63:6e:be:4c:d2:93:03:94:91:0d:
                    da:b3:98:88:59:35:78:59:9f:cb:2a:d9:a3:ec:c7:
                    d7:2d:e9:8c:18:77:9d:ed:40:d9:15:44:75:6c:52:
                    31:7e:cd:47:5e:63:ca:45:59:55:d4:80:55:74:29:
                    18:c6:c1:2e:67:56:5a:30:80:0d:07:43:b7:d3:1b:
                    3b:aa:89:5b:ae:8b:37:0b:5e:6c:e7:0d:1c:57:98:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:2A:18:45:97:1F:CC:40:66:0F:A3:20:32:3D:B3:F7:76:B4:2E
            X509v3 Authority Key Identifier:
                keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:5d:31:06:26:16:b3:da:4a:0e:7c:dc:b0:f7:d8:7e:be:
         00:69:69:96:57:11:1e:c0:4b:17:00:71:61:d6:cc:09:d2:92:
         dd:a7:66:d4:0b:b3:d2:8a:0b:1d:b9:f4:c4:66:01:28:0b:1f:
         0b:f1:68:23:08:00:2e:1d:2c:ae:d3:09:8a:9f:80:6a:99:72:
         2c:94:1a:fc:02:2f:48:36:e1:e4:51:67:3b:45:03:c2:23:7d:
         68:d0:60:a3:ae:c8:be:2d:1f:04:a2:8e:60:8d:9d:b9:0d:63:
         30:12:f7:47:a3:bc:61:eb:0a:89:3f:dd:f1:ff:4a:bf:62:f8:
         95:23:b7:b4:d7:b5:e6:5f:64:0a:ee:3b:10:c6:55:fe:26:1a:
         9b:0c:b5:09:93:d2:10:f2:78:a3:06:e8:2e:2b:48:4d:9e:6a:
         35:5d:b6:76:32:e0:f2:00:c8:64:be:de:9c:f1:c8:26:03:1e:
         a7:81:48:18:5d:b3:9a:8e:76:7a:3a:ab:54:20:73:72:71:db:
         45:bf:3b:04:a6:fa:4e:23:8e:14:49:4a:7f:b1:5b:33:36:28:
         9a:66:26:ad:64:68:42:c8:f8:f4:5b:c4:1f:cb:4b:ca:da:0c:
         12:32:55:0a:b5:a5:ed:42:c8:11:04:27:10:95:82:2c:3c:d3:
         5d:d7:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----