Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File:                     IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier:          JnXR2uvl/cxQNNJbFy4+8HhD1OAHB9o81km4FusglGw=
Subject key identifier:   D4:5A:22:3C:78:E3:15:8B:B5:15:8B:72:43:2A:A4:78:7B:A3:2B:D3
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer:       /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial:       01962ECFB490AD2AEFB49157AC078550496D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number:          1085
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: de7Mr47ZGfgqroOa4Rz+0sO7lucg5ZE7N3ypWdIpXNI=)
                          2: eKykDDSSUelkgfwH3TO0n13mPZk.roa (hash: P9dt2Lrz0okP2zrUj3Cql2lI4c4A2LE13LjuP2FhidE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:90:ad:2a:ef:b4:91:57:ac:07:85:50:49:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=d45a223c78e3158bb5158b72432aa4787ba32bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ac:ca:e7:19:a5:04:68:c4:58:5f:15:e2:d7:
                    ed:29:18:37:ef:6c:fc:0f:4d:43:58:d2:5b:8d:48:
                    20:c2:45:d6:5c:63:72:6e:af:15:b1:23:94:ad:92:
                    e4:36:92:a1:0f:2c:9e:83:49:4f:e2:0f:1b:06:d1:
                    bd:f2:ac:79:2d:82:52:97:cf:ef:37:c2:90:16:fd:
                    9d:a1:6c:f0:b7:ae:8e:f8:93:b1:aa:0a:8d:a2:cf:
                    6d:24:40:dc:ed:7a:13:a2:79:f2:72:00:06:ac:d5:
                    fa:75:c5:ed:ef:e6:8e:63:dc:b5:42:eb:68:c5:09:
                    7c:29:99:41:68:54:c7:4e:3d:d1:86:e3:92:7a:d9:
                    7b:4b:20:7e:79:34:e1:2e:8d:2a:47:ad:41:bc:73:
                    4c:d2:09:35:b6:19:24:4c:26:35:1f:40:2f:8c:6e:
                    19:e1:ea:41:4d:ae:2a:99:83:97:d3:de:8c:a4:2d:
                    a0:0e:1a:a6:33:ce:60:6f:ee:f0:8b:0c:0a:b7:bd:
                    0a:ca:c0:c5:d1:8f:4a:2d:6d:78:7f:35:b1:ab:31:
                    b9:de:3c:82:17:77:95:f0:b0:b1:84:25:1d:1c:c8:
                    2d:b0:2c:5d:1c:1b:60:e5:79:eb:0d:5a:69:83:f6:
                    09:d8:18:e8:c9:66:af:ee:5c:e4:7f:00:97:ce:dc:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5A:22:3C:78:E3:15:8B:B5:15:8B:72:43:2A:A4:78:7B:A3:2B:D3
            X509v3 Authority Key Identifier:
                keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:0a:71:61:6f:50:3d:bc:ab:0c:35:fd:e5:ce:59:7f:e8:
         8f:7b:e0:cf:15:94:66:85:9e:85:a0:b6:17:2d:05:78:c3:38:
         62:04:96:e7:4a:5c:70:78:f8:90:83:70:a7:e3:8f:9d:55:8d:
         62:25:00:90:d9:33:f4:8b:80:0f:f5:e9:d2:f2:bf:b5:61:3f:
         51:68:70:8d:b9:96:ec:47:3a:75:f0:2b:4f:ad:3a:0a:9f:f2:
         c5:59:fe:5d:02:d6:c1:93:5a:7a:2a:b6:6c:16:91:31:e3:2b:
         a7:f7:4c:dc:6a:5c:46:0d:31:44:a2:b0:c0:07:87:78:e5:f7:
         43:24:81:db:1f:fd:99:95:d4:db:31:29:84:b9:07:58:94:dd:
         96:01:6f:5c:d2:d9:47:e0:04:e1:9e:a2:8c:4a:0a:2b:65:9c:
         1e:c2:f2:df:c9:9f:af:e1:d9:af:41:2e:2f:a6:5a:4b:f3:b8:
         cb:d6:19:80:63:68:56:3d:45:d0:10:bf:94:6d:34:bd:db:14:
         9e:e1:6f:ea:c0:3d:3b:aa:0b:a7:ca:c6:c4:0f:bf:dc:52:fb:
         42:bf:95:13:76:6d:23:36:51:f3:fa:54:55:2a:99:87:59:53:
         74:64:4c:ae:c0:96:a7:12:c0:15:2f:36:d3:85:0e:35:37:e9:
         0d:d4:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----