Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File:                     Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier:          a/EcUAjSHbGgWdHT11tUZvk7duQvff3clrnfx0xmua0=
Subject key identifier:   2D:D1:01:B4:E4:21:09:B1:32:34:EB:EA:28:51:79:A1:D0:46:42:71
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer:       /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial:       01962FAB3D4D1F20F6A388215BE2670E87DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number:          CF
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: 4zkPTVU3lAiisxC18ZoXu8mbpIcKCD0MxmZ4y5bG0m8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:4d:1f:20:f6:a3:88:21:5b:e2:67:0e:87:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=2dd101b4e42109b13234ebea285179a1d0464271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:92:d0:07:df:1c:6e:ea:8e:f7:38:d0:50:
                    3a:5d:a0:38:90:a8:3f:96:d9:f3:e6:a5:f5:c6:bf:
                    5d:1f:5a:6e:8d:a8:38:d0:b4:e9:1a:15:19:34:52:
                    17:86:99:10:de:52:c0:f7:1f:27:3f:92:19:07:94:
                    42:ec:04:9f:58:52:f9:12:dd:8f:f9:00:b5:41:ab:
                    ee:7e:ed:02:7d:04:5e:a4:08:99:7d:bc:66:aa:e6:
                    84:30:f0:4c:b1:b7:4f:fa:19:1c:4c:9c:6d:5c:12:
                    7f:99:68:cc:f0:1f:3d:79:44:fc:84:4b:1d:f8:26:
                    b2:40:93:48:a2:86:ea:ae:16:13:ab:17:31:b4:63:
                    0e:31:f6:38:6a:6a:3b:aa:7b:86:c2:7c:9b:92:f9:
                    07:19:f8:77:7b:1b:09:bb:dc:94:ea:47:f4:52:89:
                    c4:88:9e:67:c5:ff:77:88:9a:0e:e9:e8:e3:e7:4e:
                    7f:19:73:6b:33:05:64:76:6b:f6:da:19:fa:53:c7:
                    e5:b8:16:9a:e7:8a:39:44:c9:3d:52:82:f0:7b:d2:
                    cf:05:9d:ef:b8:37:c4:01:91:6c:f5:54:1b:d1:23:
                    bc:ec:d6:31:76:47:11:c4:ad:3d:38:a1:f3:6c:c6:
                    9c:b7:6f:22:68:1f:54:75:30:43:3d:29:f2:c4:4c:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:01:B4:E4:21:09:B1:32:34:EB:EA:28:51:79:A1:D0:46:42:71
            X509v3 Authority Key Identifier:
                keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:8f:7b:6f:d4:8b:70:ee:86:cf:08:8e:c7:3b:01:33:ce:
         1c:f9:12:3b:d3:63:a9:5c:22:b0:59:7e:7c:78:09:9d:02:1d:
         ec:d3:41:bd:8e:12:b0:24:09:80:6f:3c:c1:4e:b5:38:1f:b2:
         85:78:6d:02:41:37:88:5d:9a:2a:98:07:39:f8:b5:b1:37:cd:
         0c:5a:a2:7e:94:20:76:d6:56:9a:6b:5c:13:48:54:0f:e1:cc:
         00:76:a3:a6:70:5f:6e:c3:d5:a1:4a:5f:98:e1:7e:81:35:8e:
         0e:ab:42:ee:b6:d8:a4:31:37:af:7f:f8:81:61:d6:5b:31:c7:
         e7:54:c4:a6:3e:ff:0e:f1:a0:f5:8b:a5:a5:d6:61:f3:62:74:
         06:a1:89:8c:4b:18:52:4f:c7:6f:d4:37:1b:9b:06:71:5d:80:
         b1:be:ce:bb:38:e8:ad:74:27:2b:ca:1f:36:b2:16:67:1d:f9:
         cb:bd:8c:f0:95:94:a7:dd:65:60:6a:e8:b5:75:a4:39:53:0a:
         b7:d4:93:2f:e6:3e:14:84:5b:e2:b7:2c:d8:dc:23:55:54:08:
         e0:90:e5:4b:f9:8f:e6:93:03:21:24:a1:22:3b:59:61:82:80:
         ea:77:71:11:1e:83:b2:59:e2:94:7c:b0:5d:54:4d:e9:d7:c2:
         ce:26:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----