Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File:                     IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier:          SeWySKje+25nCThjiho5LCEtnRlueQZCAajvBvukJoI=
Subject key identifier:   CE:0F:8E:63:2E:6E:97:E3:30:F6:F4:A7:C7:C0:57:36:25:68:E8:63
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer:       /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial:       01962DF3E0BA1531E9D36913BB1A6AD1400F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number:          0265
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: q5t6ZnbQeXG8sjkw7cC/f8H08jcjPYC2R6xIKKrfH0E=)
                          2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e0:ba:15:31:e9:d3:69:13:bb:1a:6a:d1:40:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=ce0f8e632e6e97e330f6f4a7c7c057362568e863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:b5:1c:5c:9e:4a:91:7a:6f:c2:3a:de:74:
                    e1:48:d4:04:e7:9d:14:fc:98:2a:ce:44:83:be:cd:
                    75:1d:48:56:ca:2c:30:e0:42:aa:0d:e4:14:c2:cc:
                    0b:48:34:dc:91:93:86:6c:95:51:91:cf:ce:a9:b1:
                    b6:76:71:e5:0c:62:ec:f7:5e:e3:1b:50:21:21:20:
                    9e:b1:5c:85:99:25:fc:08:21:be:06:0b:28:a0:c7:
                    92:60:28:fc:fb:b3:3e:68:ed:6e:45:2e:81:b6:e9:
                    5a:cf:f1:98:52:d7:a0:33:c0:c7:68:b4:ff:06:99:
                    68:03:d2:e1:93:d4:96:ee:41:3d:8c:fe:bd:df:6d:
                    79:c8:a1:88:89:d7:c3:88:23:65:6a:3a:ec:e1:b6:
                    7d:4a:5e:bd:2e:2a:a4:19:45:b5:c1:06:15:42:77:
                    73:1b:82:0a:88:72:56:4b:df:01:4c:63:90:36:b5:
                    18:49:a7:8c:26:a0:d3:bd:3d:52:b5:be:f7:46:c5:
                    59:11:b6:d2:78:b1:ed:4f:d5:18:50:a1:95:89:16:
                    87:08:e6:ea:2d:7b:a6:fd:d3:0c:47:5f:ee:9a:72:
                    0e:0e:4e:16:17:fa:24:c1:e6:83:fd:05:e3:0d:15:
                    f2:9a:4b:58:d5:68:96:1e:4d:7d:fe:a0:5e:32:2b:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:8E:63:2E:6E:97:E3:30:F6:F4:A7:C7:C0:57:36:25:68:E8:63
            X509v3 Authority Key Identifier:
                keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:43:43:02:76:5f:ea:39:f8:78:37:40:7d:9f:92:0e:0e:85:
         61:4f:5e:c2:76:f8:23:8d:03:bf:ba:ed:94:41:64:76:7d:b7:
         9e:fa:74:df:01:44:c2:c2:03:ad:9e:a7:0f:f6:1a:5e:b4:7a:
         bd:10:96:fd:42:a5:44:f2:a7:e2:a8:0d:ce:0d:bc:c7:cd:53:
         ff:ae:42:d3:b4:b7:16:23:89:8f:c0:12:65:27:c6:b2:e9:2b:
         fa:2e:a5:b3:07:7a:02:ec:74:17:fc:97:d6:d2:87:b2:93:79:
         f8:1a:ff:97:95:ab:8d:ff:33:4c:b2:5a:1d:d6:27:a2:66:bf:
         07:70:a0:82:ae:01:07:2a:da:9e:04:df:56:fb:aa:81:e2:39:
         08:dc:42:b6:c3:a2:84:c8:31:8a:f2:93:33:55:c4:cc:e7:c5:
         a6:27:04:f3:cb:6d:37:b5:3b:a7:31:ca:36:1e:2b:c3:97:88:
         9b:27:0d:d7:c4:5e:60:59:f6:d0:b6:11:90:18:1b:e9:e4:98:
         d4:af:15:91:e1:26:1f:c4:46:d7:c5:5d:6f:d8:2b:5d:83:2c:
         89:d3:34:35:55:10:4e:fd:ff:3f:c7:91:25:1a:94:52:38:62:
         7d:28:4d:b3:14:aa:53:aa:dc:49:01:f5:21:c4:c7:bf:f5:d7:
         3c:ad:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----