Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File:                     IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier:          M3QXR+x6qo2ubBG/BNMLKuAg3AchMbCmL9gxyYYTrO8=
Subject key identifier:   48:13:E5:51:81:CF:4F:0B:CF:66:CA:74:26:A3:7D:29:2C:19:3D:E8
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer:       /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial:       01962F3D747BC765A474B09282A4A848A2BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number:          059D
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
                          2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: 6kytxttCfUWaszjgl2UsnUUUZw6eYnkVECRGoLzSXb8=)
                          3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:7b:c7:65:a4:74:b0:92:82:a4:a8:48:a2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=4813e55181cf4f0bcf66ca7426a37d292c193de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:2f:99:e6:01:da:0f:ab:51:74:97:95:c3:
                    9d:5d:af:e9:fc:4a:0f:9d:f8:fe:99:24:f0:5b:85:
                    41:88:1b:93:a9:4e:c3:64:54:df:20:9a:a9:ae:6d:
                    da:e5:09:80:ad:64:b1:d0:54:49:d1:c4:ba:71:5e:
                    91:a8:c3:05:f1:a1:bc:c2:ca:3c:ba:0d:3a:8c:46:
                    59:88:b2:7f:1d:b7:d7:9a:66:0d:4e:aa:52:1d:c4:
                    1b:aa:4d:4b:c6:ee:77:52:2e:ac:8f:c3:15:f9:66:
                    ca:77:4d:06:7e:35:55:f7:c4:4b:ca:1b:21:79:5a:
                    8a:b6:b7:c7:06:63:6e:b4:1c:ce:61:70:c3:a2:d4:
                    1d:43:d0:b0:f7:48:a8:a4:84:89:86:a2:11:c9:5f:
                    cb:ed:29:ed:1c:ec:8f:90:1a:3d:c3:7f:20:d2:c9:
                    b5:9b:5a:f8:39:15:77:83:ee:01:a3:43:9c:df:c5:
                    bd:f5:84:d7:e0:5f:4c:a6:3b:dd:be:44:76:22:f6:
                    74:35:33:ae:89:ec:0a:83:c0:c6:56:7b:93:07:ee:
                    0c:f2:de:4a:ce:65:e3:26:0e:84:76:0b:f1:9e:76:
                    a1:04:af:bf:22:5e:82:8c:8a:c5:85:4f:6f:3b:74:
                    4b:c1:86:6f:17:81:e8:60:1f:11:b5:ea:1f:7a:16:
                    e9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:E5:51:81:CF:4F:0B:CF:66:CA:74:26:A3:7D:29:2C:19:3D:E8
            X509v3 Authority Key Identifier:
                keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:98:84:f2:32:51:41:2d:28:22:ca:2e:30:d8:3c:7e:51:1f:
         fe:9f:10:12:07:97:9a:f9:76:8a:1d:59:f0:58:89:71:41:f7:
         99:0e:b9:f5:43:2f:30:4a:13:d2:94:ac:11:33:96:f8:87:e1:
         57:88:b5:1f:37:7f:c7:d6:19:22:7a:49:e3:63:56:14:59:11:
         8b:e4:07:c8:4d:99:57:54:bf:f1:0a:82:8a:c9:2d:79:a3:3f:
         dd:f5:63:0a:45:db:e8:12:e8:a4:ca:41:87:fc:09:1c:26:ec:
         22:e2:d1:dc:4b:a3:72:d5:e4:79:ab:7c:50:1a:5e:83:ea:66:
         65:11:4d:60:78:30:62:a7:df:f2:d0:03:6b:85:0d:4f:72:95:
         92:dd:18:2c:f4:91:4d:ed:37:1b:10:ee:fd:e6:ad:db:28:87:
         37:8b:c2:3b:58:d4:6a:a1:cc:96:71:cc:2c:78:92:c7:4d:a2:
         a5:ef:14:8b:f5:45:9c:5c:47:77:3a:d6:20:7b:fd:bf:47:af:
         d6:89:d6:97:64:bf:56:8d:26:ab:01:80:a7:7f:c2:50:6d:b2:
         2e:99:97:4c:dd:a9:55:69:c7:e0:d7:f5:f8:0c:ed:c6:4b:fc:
         f5:9c:7a:6d:8b:f0:77:21:31:b8:8f:2a:fa:b4:d1:53:b6:86:
         9a:b1:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----