Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File:                     IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier:          eczvxqoYq3CO4c6HzEJz2cFf908dV7Y3+Fxq4OXqNyk=
Subject key identifier:   D8:B7:51:37:09:79:79:DA:4D:1F:AB:03:07:74:A3:26:35:18:C5:45
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer:       /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial:       01962F3DB1A59FA4A73BDC5D709E99CC3F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: ByispDTZEKVn3dZAD4ENIZOgpckPFtEZlWUKjeCbS/o=)
                          2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
                          3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:a5:9f:a4:a7:3b:dc:5d:70:9e:99:cc:3f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=d8b75137097979da4d1fab030774a3263518c545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:18:a1:27:0c:f7:12:e7:fd:51:79:f4:ff:
                    7c:ab:5b:3e:13:18:27:9d:2b:8c:46:9f:75:74:94:
                    10:3f:b9:65:2e:03:04:df:1d:18:fd:a5:16:76:05:
                    84:10:c1:02:98:58:58:8d:1c:a8:b6:86:98:7d:d7:
                    5c:fd:9a:54:87:3a:7d:c4:8c:22:27:e7:fc:d8:1e:
                    fd:ae:a5:64:de:83:2f:6c:f3:01:9a:27:51:d7:70:
                    84:b6:24:35:26:79:15:aa:04:a3:2d:b6:af:cc:9a:
                    85:ee:8b:f6:8f:cf:cd:e9:33:cc:0c:37:a9:f1:0c:
                    db:3d:ad:fa:7c:e4:f8:61:b9:07:de:16:05:73:00:
                    7e:b9:eb:de:ef:ce:86:1b:68:a1:aa:26:00:63:57:
                    84:57:bc:1a:be:f5:1a:46:ae:3e:da:14:22:90:45:
                    de:f6:7e:30:51:91:f0:ab:8a:d5:64:3f:64:17:a9:
                    b0:8d:35:d6:2a:5f:9b:92:f0:a3:c3:4c:ad:aa:ee:
                    ac:38:c4:b5:32:fe:8b:72:17:59:cb:5d:e1:35:97:
                    a7:2c:fe:9d:60:0b:32:42:26:89:cd:d8:d3:c6:0a:
                    06:b8:b1:90:c7:16:0e:b2:0c:2a:18:96:35:2f:23:
                    fc:47:af:a5:c8:70:68:e8:c4:85:03:90:31:2a:c6:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:51:37:09:79:79:DA:4D:1F:AB:03:07:74:A3:26:35:18:C5:45
            X509v3 Authority Key Identifier:
                keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:7a:e6:77:95:02:ed:b9:4a:c6:05:f3:af:62:26:08:e0:
         9e:5d:b3:ed:82:04:d7:97:69:88:d4:3e:3c:73:84:6c:68:c6:
         d9:21:f3:9e:10:66:81:1e:4b:d5:c7:29:30:03:30:4d:1c:65:
         d5:27:9b:8f:f4:f2:25:96:e2:1e:a2:cb:3b:41:de:94:51:a8:
         f6:60:e7:9d:c5:1b:81:66:a3:02:a7:fc:a5:ff:a0:03:c3:23:
         22:76:08:2a:63:12:04:35:84:ac:94:07:06:85:4f:9b:40:cf:
         b9:b9:14:85:fc:57:a3:cf:ab:ab:78:a2:e8:de:c0:09:cc:fa:
         97:fd:f5:ff:a9:72:a7:33:97:16:3c:d1:d4:23:99:e6:2c:99:
         90:78:85:ab:02:22:94:05:1a:3f:10:dd:6a:5d:c1:af:5a:c4:
         03:e1:0a:e7:f9:a3:57:1a:d9:e0:b2:ea:e1:11:28:cc:ce:46:
         82:f6:b4:b8:db:9f:ed:e0:e8:0d:d0:90:65:50:77:b7:1e:55:
         b3:64:27:f5:33:05:c0:6f:13:26:69:02:fc:6e:a1:ce:34:da:
         97:88:3f:a4:28:47:a0:42:a9:53:b1:cb:bb:68:54:22:69:df:
         b2:64:ed:e7:86:64:87:35:84:37:0a:88:77:96:ec:2f:a6:09:
         35:08:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----