Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File:                     IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier:          jcY6fG2HHaFybU/IBH5/YIR7xqrD11qBvLfrNaW+kUA=
Subject key identifier:   C1:4A:31:1F:E2:13:65:1D:E3:C9:04:5F:0D:FE:3E:AB:D8:74:A1:68
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer:       /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial:       01962E997330AACB1099D6E8F8097D3940DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number:          1149
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: i8Od8PLBd+S5WY/KS3a3qq6OmnVbPeRJoaeoaPj27k4=)
                          2: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
                          3: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:73:30:aa:cb:10:99:d6:e8:f8:09:7d:39:40:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=c14a311fe213651de3c9045f0dfe3eabd874a168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:5d:e5:bd:df:d2:34:1b:6e:ad:b0:c9:8b:
                    ee:d7:c2:f7:1c:14:ee:5c:03:cf:cf:40:39:0d:f7:
                    3f:72:b9:63:be:96:5f:32:32:34:0a:d0:23:3b:a6:
                    b5:10:ca:cd:e6:d0:43:80:82:4a:56:64:c4:a3:9b:
                    95:42:6a:f6:46:99:83:d9:9d:7e:22:88:db:e9:c3:
                    87:c3:7c:0a:bd:1a:b7:d0:e6:16:0e:cb:15:d1:38:
                    28:95:71:05:5d:52:b4:d9:77:e2:e3:39:5f:7d:f0:
                    0a:72:c2:36:46:bc:4e:9a:70:a6:cc:07:87:8a:31:
                    5c:af:5b:ab:10:c9:03:60:22:40:7c:96:af:fb:2d:
                    69:52:a2:03:e9:a8:2d:bc:83:77:5a:39:be:3a:0f:
                    51:8d:08:d2:13:b9:2f:a7:b3:67:4c:a8:55:3e:19:
                    4c:b1:c1:51:78:1d:69:b3:3c:86:f3:5b:3c:2b:36:
                    bd:77:08:f7:e6:ef:4c:2d:2c:14:86:9a:79:c8:96:
                    56:59:62:43:a2:b2:81:e0:fd:69:70:86:8f:f8:8c:
                    55:0a:d6:87:e7:8e:40:6b:e2:b4:43:9f:3f:5f:95:
                    2d:92:cf:75:f1:da:44:96:a7:78:24:5f:d5:6f:43:
                    70:9c:60:74:29:18:9f:9f:58:a1:00:1e:34:ca:9d:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4A:31:1F:E2:13:65:1D:E3:C9:04:5F:0D:FE:3E:AB:D8:74:A1:68
            X509v3 Authority Key Identifier:
                keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:c6:d9:44:89:d1:60:7c:d2:ac:51:a1:95:de:8e:55:5c:
         74:60:61:9e:c1:ed:07:d9:8c:4f:a3:9f:87:31:a5:5b:6e:a3:
         1c:40:10:31:9f:18:31:03:7e:de:df:88:62:a6:0f:4a:e7:b9:
         6c:a0:fa:45:f4:a0:11:a1:7b:ff:0f:78:2e:60:f1:2d:f0:10:
         a5:04:93:f1:de:43:59:f6:5a:22:38:55:36:8f:d7:30:83:ca:
         81:d7:9a:15:68:62:f4:ae:c1:20:dc:be:10:57:23:f9:a0:75:
         22:fa:89:58:ef:53:a8:6a:89:01:ab:3b:41:e2:a8:a1:98:1b:
         c6:f7:dd:cb:f3:cd:28:0e:53:58:54:63:a2:3b:c4:06:9e:19:
         36:b3:ee:06:2c:17:ae:be:53:20:3e:23:d3:b3:d8:7c:bd:8c:
         b2:a8:3b:a3:72:c0:37:15:8a:0d:18:c0:92:e7:9c:c3:a5:85:
         11:20:95:f4:37:2a:dd:1a:8b:03:f1:81:28:76:e5:21:b6:47:
         d2:6e:8b:d6:4c:bd:ec:4c:49:dc:b5:c8:f5:80:3c:e3:5e:25:
         08:70:40:dc:18:83:d8:30:43:e1:3b:09:5b:32:23:73:14:db:
         d7:d5:0c:e2:91:e5:c0:55:2e:46:f1:d8:a2:b4:20:ef:d7:78:
         54:e2:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----