Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File:                     iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier:          GoS7KCG/F+7XVpDllE55lfUrqH8qbk1HAfxdGsNwjSg=
Subject key identifier:   F8:B7:DA:39:05:E2:E8:64:95:A9:B0:D6:CB:A5:13:AE:C2:16:F6:9C
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer:       /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial:       01962DF3C8B21804FE27DA1BF18E00A56BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
                          2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: cAL59B0qKXprE4Nu88BzPlktnnMsZEot4eAzoNa58UM=)
                          3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c8:b2:18:04:fe:27:da:1b:f1:8e:00:a5:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=f8b7da3905e2e86495a9b0d6cba513aec216f69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:66:e8:3a:67:61:e8:dc:80:74:14:c1:ac:
                    03:f4:b2:ca:2f:04:23:30:c0:fd:d6:4b:0b:57:2d:
                    34:d0:25:dd:0e:2d:0e:a9:46:24:37:d1:e3:d1:ff:
                    9c:03:28:6d:c1:e7:52:95:38:bf:0a:ca:5f:1b:f9:
                    39:ec:f0:22:c3:1a:2e:f6:97:99:bd:bf:32:11:95:
                    b7:5a:e1:b3:a8:24:14:e5:d3:c6:e0:d4:2c:df:25:
                    9d:0f:aa:bc:6d:bd:7f:38:d1:59:7b:a3:4a:bd:14:
                    e5:9a:a4:08:99:cb:a5:07:84:84:15:3f:a6:58:fb:
                    3e:c4:15:0c:8e:05:3a:03:94:a5:0d:5e:b0:a4:59:
                    fa:44:40:6c:ef:82:1e:86:57:61:0b:fe:43:72:8f:
                    5a:ab:f6:1a:37:fb:54:09:2d:e6:4c:99:f7:e2:72:
                    7a:da:ec:72:a8:fe:08:35:34:ec:04:8a:67:e2:94:
                    3d:69:c5:f6:63:6a:b6:0b:a5:87:ef:dd:e4:78:50:
                    53:c7:25:b5:e7:0f:ef:89:99:24:cb:0d:0e:21:35:
                    95:74:dc:5e:7c:cd:cc:2b:e3:9c:2c:1e:f3:dc:47:
                    ab:13:58:bd:b4:9b:e4:6d:ba:85:30:9f:62:d8:21:
                    06:8b:b9:9f:ce:51:7a:78:3f:f7:37:37:c3:5a:da:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:DA:39:05:E2:E8:64:95:A9:B0:D6:CB:A5:13:AE:C2:16:F6:9C
            X509v3 Authority Key Identifier:
                keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:af:e6:1a:e2:f5:df:7d:37:23:ef:97:45:74:8b:bc:1d:
         ec:a8:d4:9c:0f:64:7d:30:9e:7a:31:be:a7:c9:93:28:58:07:
         09:50:f9:36:e6:42:bd:25:c3:bc:78:3c:3c:1d:b8:8e:73:8c:
         96:ad:5a:2d:48:6d:5c:a6:26:58:b0:ef:be:47:a3:40:e8:2a:
         9c:21:bf:1b:c6:dd:23:fe:73:8b:e6:40:0c:ed:c3:29:2e:b3:
         19:4f:26:47:7a:cd:17:7c:95:cb:e5:9e:54:32:0e:19:07:ca:
         cd:38:82:a7:d0:a5:85:af:2d:d8:1e:dc:2f:65:57:9e:61:12:
         40:a0:1c:a9:ee:6f:10:2a:77:99:c1:ff:b8:d0:4a:39:fb:93:
         b4:1d:f5:76:7c:6f:a7:44:44:2c:c6:3d:b8:93:5e:a6:20:1d:
         35:ad:25:36:a1:fe:df:3b:60:93:87:86:54:ed:5c:cc:15:0d:
         b6:29:a2:ee:2d:9c:50:39:6e:95:d5:d3:be:9f:a9:d7:6f:6f:
         eb:32:c0:86:ba:06:c1:ed:1e:e4:9c:14:3b:af:bc:ca:64:d2:
         11:a9:4f:8a:d7:b2:9e:20:54:1e:93:2d:a5:b0:14:9e:6d:ab:
         ab:74:c7:06:c9:b5:0c:8f:f3:9b:39:f0:65:1c:34:10:bf:0d:
         4f:c6:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----