Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File:                     iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier:          ZvF4tf5cVWlgyLVlJDqN1XAo/WY+RnWawm7yq9LzZVo=
Subject key identifier:   34:C0:E0:2E:BB:18:DE:29:72:11:B5:AF:30:51:A7:0D:3D:B9:95:D8
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer:       /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial:       01962F07026A3CB532C7613A31AB9CD9A1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa (hash: HPlJ0x+8hEc9+twnaORN/j75RT2RjTnSkW49RshA3cE=)
                          2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: AqzCw4m84zhH3MDhLqZv5qAMjcnxqnzNtWkPhwyx8vE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:6a:3c:b5:32:c7:61:3a:31:ab:9c:d9:a1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=34c0e02ebb18de297211b5af3051a70d3db995d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:c4:91:0a:7b:b4:a9:fa:93:e7:3c:ed:64:
                    19:b2:71:de:72:88:51:05:4f:30:b1:67:93:18:86:
                    93:28:06:49:87:68:17:ba:3e:65:0f:ed:b0:15:37:
                    2e:69:cd:21:b3:c8:6d:b1:aa:b4:34:b6:ef:b6:6f:
                    3e:2c:bf:39:8b:c7:f2:ff:75:e3:e4:45:72:1e:ae:
                    20:f2:73:8d:5c:ee:15:60:d3:fd:8b:fa:4a:5e:ba:
                    a9:2c:e0:58:ae:37:5b:b6:39:d2:8c:4a:02:5c:57:
                    80:d1:8c:15:b9:07:db:3c:4d:1b:80:ef:68:63:19:
                    08:c1:54:f4:45:1f:f9:65:b1:13:fa:41:de:33:df:
                    18:84:77:43:d6:a6:f7:7b:8d:30:c9:a1:54:b1:00:
                    1f:96:a6:b5:1d:73:8c:36:c5:d7:bf:5e:65:42:54:
                    45:dd:7d:0a:f1:d3:e2:4e:64:92:b3:d8:a1:49:d6:
                    bd:15:0b:cf:64:09:08:b0:3f:7f:95:3d:35:40:3b:
                    3e:ed:af:3f:fe:f3:cd:01:0f:e6:f8:3e:fd:69:1f:
                    4e:9e:59:39:5b:1f:c5:4e:9e:60:f3:0d:0b:a9:76:
                    20:73:0a:f9:9f:c9:43:3d:45:26:77:fb:ab:f9:b8:
                    49:85:89:fb:ec:fa:cc:ee:9c:80:eb:4b:90:53:2b:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C0:E0:2E:BB:18:DE:29:72:11:B5:AF:30:51:A7:0D:3D:B9:95:D8
            X509v3 Authority Key Identifier:
                keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:a7:c0:75:c6:08:1c:24:02:6b:f7:d4:65:22:18:27:01:
         78:17:6b:4d:5a:1f:18:ef:9c:f6:21:20:ca:41:10:2a:9e:ae:
         00:42:c1:b8:41:a3:12:97:18:8f:e8:08:76:53:c4:b0:38:df:
         74:74:39:fb:2d:f5:b7:f8:e1:4c:b8:d0:bf:fa:40:5b:70:8f:
         07:75:dd:69:ad:0f:16:a9:46:65:d5:cf:74:e4:2c:0d:1e:37:
         6a:e1:71:6a:7c:de:7f:54:ac:d2:fc:71:26:46:ac:b1:b4:da:
         12:7c:78:71:4b:e4:08:61:d8:d7:0a:13:9f:99:77:cd:1f:d5:
         2a:ff:e9:7e:17:f8:ad:5d:60:83:e0:e2:32:b9:1c:b0:ee:77:
         0d:af:03:0b:52:39:0d:5c:fb:62:84:80:b3:6d:c7:78:09:04:
         fd:2c:e4:f0:e9:34:8c:15:a9:01:88:d1:d5:bb:47:bd:79:b7:
         66:b2:f0:2b:69:95:2b:79:1d:1f:a6:f9:f6:ac:46:1d:63:13:
         af:bd:c6:d5:fa:f8:68:4e:a1:4e:c4:a4:3c:cf:6b:98:77:8a:
         7e:87:ac:69:ae:72:33:be:b2:70:5b:46:7f:00:39:6d:7c:f5:
         22:61:c8:dc:ab:29:ff:e7:ce:50:d6:48:d4:41:e1:00:13:92:
         4d:98:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----