Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
File:                     IGcM4wRP1TINnHYtX5viba8wI-w.mft (raw, json)
Hash identifier:          rKegSrQkXqg8IoZQRZ4X3Z+C21lG43+msrTMbLXdFHo=
Subject key identifier:   CA:E5:E9:A7:B5:30:D5:8A:F4:16:6F:C2:CB:74:D9:B4:ED:57:6B:40
Authority key identifier: 20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC
Certificate issuer:       /CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
Certificate serial:       01962ECF68553EB095CF146D8505B7915253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft
Manifest number:          7F
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: BtHL3XHEieb1gWKcjsadU5qjZac.roa (hash: 1jFZs/t3ujMVEG8CZ4mhr6EfSszS7y3HVxTcxs6WBzE=)
                          2: IGcM4wRP1TINnHYtX5viba8wI-w.crl (hash: bNwnLTZ7RMriPrk5lWeAsBQeoIAQTZOxFBRKgQcGmD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:55:3e:b0:95:cf:14:6d:85:05:b7:91:52:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20670ce3044fd5320d9c762d5f9be26daf3023ec
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=cae5e9a7b530d58af4166fc2cb74d9b4ed576b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:e9:e4:7e:0c:fb:3b:25:ad:e5:55:b1:e2:
                    99:35:a9:c2:1b:cc:cf:2f:42:a3:31:89:71:1c:e5:
                    c5:9d:c5:01:c3:e3:fd:61:80:20:2a:b6:71:60:42:
                    29:1f:7c:77:1a:c9:4b:d1:b3:af:33:cc:e9:02:e8:
                    7b:32:95:50:82:8f:59:ee:ee:47:ee:18:3a:97:f9:
                    06:94:fa:ee:41:92:54:a0:2e:a8:f0:2f:82:75:b9:
                    f0:d8:2b:01:9d:f9:e5:3d:90:6a:b4:ee:c1:15:fb:
                    ae:1a:07:d6:e8:5f:77:1f:02:1c:01:9c:35:f6:e2:
                    db:79:de:e2:79:a4:14:50:42:02:d4:6f:0e:da:0b:
                    ca:8c:8f:1d:ef:2d:78:f4:bf:4e:64:41:7f:a3:46:
                    ea:6e:cb:5e:50:38:c6:69:46:a6:5b:d9:48:05:bc:
                    3b:40:e1:f6:0d:b5:80:f4:06:21:8e:4a:60:8a:1f:
                    61:c1:9d:fd:0f:9c:1c:54:97:4d:4e:12:52:00:32:
                    d3:13:aa:75:68:f0:23:7f:ad:41:10:f0:41:f2:2e:
                    2d:e2:1f:90:7b:91:49:30:35:e6:7b:b0:9b:35:b5:
                    0a:d6:60:05:95:7d:5f:99:56:f9:f8:57:46:a8:30:
                    5a:f2:98:a0:dd:80:eb:b0:14:7f:9b:2d:42:5c:a3:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:E9:A7:B5:30:D5:8A:F4:16:6F:C2:CB:74:D9:B4:ED:57:6B:40
            X509v3 Authority Key Identifier:
                keyid:20:67:0C:E3:04:4F:D5:32:0D:9C:76:2D:5F:9B:E2:6D:AF:30:23:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGcM4wRP1TINnHYtX5viba8wI-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f1c25-d506-4ae5-a51d-c1c815b95726/1/IGcM4wRP1TINnHYtX5viba8wI-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:ee:19:89:04:0d:30:3f:e4:6e:63:a6:c8:77:4f:5b:e5:
         e3:56:e0:e5:51:12:26:f5:2b:e0:f5:70:87:bd:7c:2d:3e:ef:
         27:c4:cc:d7:28:86:d8:8f:95:d8:0a:73:b1:a6:cf:a8:32:03:
         05:c5:88:c4:dc:d6:ea:13:86:68:26:f5:7e:66:8c:c0:ae:0c:
         15:19:d2:b1:48:f4:5a:90:b6:8c:5f:a0:bb:4b:9c:0e:37:d6:
         33:f7:bb:f4:32:70:87:75:09:bc:1a:6c:67:12:f6:42:e8:04:
         fa:db:dd:21:72:ad:bb:02:9b:2c:49:a3:96:b5:e1:38:aa:a9:
         90:61:28:1f:fe:fb:9b:ab:c4:1e:1e:cf:a3:9c:16:8a:7e:06:
         1a:ed:73:ed:99:cb:97:71:e8:aa:4d:fe:99:53:b2:d0:dd:d9:
         17:50:25:c1:2b:6b:f4:0c:9e:64:a6:d3:38:cf:62:fb:18:5b:
         27:ba:ba:47:a4:d9:e8:f5:5b:a5:4a:ed:8a:e8:0b:fa:3d:10:
         b1:8b:b5:ce:0b:3f:b0:08:1a:fd:de:ea:1a:59:1c:b2:d5:f1:
         86:75:29:c7:d3:8f:22:19:33:bd:5c:98:a0:95:44:5a:90:9d:
         0a:05:50:93:09:be:96:ef:cb:79:16:51:36:5b:c2:19:cc:c2:
         5f:8d:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----