Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File:                     8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier:          mkpwzu+Un70bWmzs3rgJG85Y6YzQFpMbMVMcSmwmhfc=
Subject key identifier:   6D:24:33:61:FF:4D:F3:F9:B2:35:BC:E6:10:83:AD:27:C3:BC:5E:98
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer:       /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial:       01962E99390C22E5F7C3EE41571B95D63D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: WLlEGx1OXXhLUMBwOADsKEDUBEc0+gWHv45c/zWCAI4=)
                          2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
                          3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:39:0c:22:e5:f7:c3:ee:41:57:1b:95:d6:3d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=6d243361ff4df3f9b235bce61083ad27c3bc5e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:ac:1a:d8:eb:f0:9f:4d:c4:2e:9b:7b:32:
                    92:52:9c:fb:c6:bb:59:98:c3:a2:54:ae:cb:f1:2e:
                    9b:63:8b:b7:f4:36:ca:d4:8c:db:57:f3:80:e0:b4:
                    8d:09:e7:57:a1:01:f2:2e:96:8c:ce:56:72:77:08:
                    62:7f:9c:fa:9c:30:2c:38:64:da:0e:14:8b:8f:1e:
                    9a:40:26:9a:49:56:49:f4:b2:25:01:96:e2:2b:b7:
                    68:e9:76:4e:24:5b:c0:a7:e0:8d:30:3d:61:13:98:
                    7d:6f:fc:e3:4e:fe:d8:7c:8a:a6:ab:dd:48:22:4c:
                    7d:08:e1:d9:c9:87:71:18:0c:e2:ef:66:5d:3b:f0:
                    02:25:e0:42:53:87:a4:88:83:23:dd:81:3c:df:4f:
                    22:b0:55:51:58:b8:45:fc:5d:b3:a2:45:3e:14:57:
                    98:ae:7a:65:80:b7:af:ea:87:db:f2:63:c5:a2:01:
                    42:b0:7a:64:db:d3:2a:18:3d:27:88:7d:a8:32:e1:
                    e1:05:e3:e5:7f:e8:12:e2:1a:1d:54:e3:43:21:4c:
                    f4:5d:e2:7f:48:7a:4f:1a:31:0e:fa:c4:f6:42:5d:
                    fa:e5:38:35:aa:c1:52:b2:55:00:91:c1:d8:8f:3e:
                    fc:94:b6:9a:87:ef:11:d2:67:bd:63:c7:a1:67:89:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:33:61:FF:4D:F3:F9:B2:35:BC:E6:10:83:AD:27:C3:BC:5E:98
            X509v3 Authority Key Identifier:
                keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:bb:60:7a:e0:84:ca:14:7c:4e:92:39:68:02:f1:3a:4e:
         75:47:ab:03:18:a7:ac:dc:40:38:1c:1b:ae:ff:8e:28:79:29:
         bf:d1:ca:a2:17:ea:69:5a:30:ef:75:e1:0f:80:15:41:3a:92:
         e2:df:cc:07:d5:f8:7c:e1:05:27:6f:04:09:fd:f4:0d:39:31:
         7f:49:de:c6:5c:a7:c4:cb:11:86:bf:a2:d4:bd:4d:e5:ab:4f:
         37:28:22:b7:17:2a:5a:bf:7a:69:66:ec:70:8a:a1:b8:b8:1f:
         36:48:e7:87:37:ae:78:b1:e6:1c:32:d3:0a:ad:da:2f:e8:3c:
         e8:4d:c9:4d:2b:4a:92:d1:4d:d9:ed:aa:6c:b9:6a:d9:3a:b7:
         bc:bf:c9:ac:38:ae:c2:05:fb:98:df:c0:b4:eb:47:96:c8:09:
         4d:5b:5a:f4:ba:ec:3c:a7:4a:e8:d2:36:e8:e8:43:b9:38:cd:
         97:c4:8b:32:d8:00:39:2e:ba:ea:a4:98:63:03:cc:90:45:10:
         22:02:7d:b8:d7:e9:4b:b4:7c:e6:5c:ae:46:3c:a5:58:bc:71:
         23:03:34:9a:5c:e7:74:8a:b9:f2:eb:f9:2c:f7:39:b4:be:72:
         8e:18:1e:f9:0b:f2:c7:a1:93:4d:da:d1:62:c4:38:20:32:0b:
         23:a6:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----