Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File:                     igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier:          NTyvO8DVus2lGaaRgGPlIK7qJ98gNgPJDIYHyU111zE=
Subject key identifier:   1A:4E:8C:98:E9:F4:A8:D8:05:D3:80:96:CD:1D:93:92:19:B8:62:8B
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer:       /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial:       01962F3D38236E2F46802DBE2EA86B5F92BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
                          2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: gw1qRwL3bkB18EYDSL35CgKitqITTuKrBSPHYM79rPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:23:6e:2f:46:80:2d:be:2e:a8:6b:5f:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=1a4e8c98e9f4a8d805d38096cd1d939219b8628b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:b2:f2:f2:f5:12:10:7c:72:12:a3:c0:bc:
                    a6:60:df:4d:1d:1c:29:b0:0d:3b:08:4f:69:ec:3d:
                    6b:51:a8:10:16:bb:6d:80:11:b5:0c:8d:75:aa:e1:
                    94:95:37:63:40:7f:28:6c:70:7a:8c:4d:e2:7d:bb:
                    89:5d:a4:4a:d7:ad:e8:0a:c5:0d:e7:ee:78:18:5f:
                    b2:b1:44:2b:a6:f4:89:9c:c4:13:ec:d8:e5:68:4c:
                    ab:53:17:4b:99:5d:d2:00:6d:09:39:f9:e2:f9:f1:
                    59:4a:e4:cf:f2:b6:14:cf:5f:d6:cf:3d:0a:e5:06:
                    0b:04:db:5c:e9:95:02:e7:32:b8:5b:4f:d2:88:e8:
                    78:d6:45:b6:8f:78:88:5a:25:7a:95:cd:ae:8b:1c:
                    5a:53:39:43:31:7e:bf:82:c7:9c:4c:f7:06:71:be:
                    fd:8a:7a:eb:8c:00:59:7f:db:c1:cd:f0:1c:2e:60:
                    2f:3e:30:7c:6f:01:08:13:eb:4a:fa:d1:60:18:1c:
                    a6:ae:b3:63:82:9a:88:c4:4d:92:43:b4:dd:4e:bf:
                    28:1a:d3:08:c6:92:1d:fe:4f:4e:32:7c:12:fa:24:
                    ea:61:83:d7:c3:43:60:5f:88:03:96:04:bd:d8:33:
                    88:80:4d:09:ac:a4:2d:7b:f9:e7:19:a6:7b:5c:88:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4E:8C:98:E9:F4:A8:D8:05:D3:80:96:CD:1D:93:92:19:B8:62:8B
            X509v3 Authority Key Identifier:
                keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:5a:86:aa:21:06:2b:65:9c:fc:a4:c4:29:50:8b:c5:6f:
         bd:3b:fb:89:9f:b0:bd:24:48:77:28:a1:6e:38:be:cb:75:74:
         4d:b4:69:f3:22:ab:ca:10:c7:c6:1a:d0:d0:10:d3:fd:b4:ef:
         06:88:dc:05:23:0a:e0:d4:ed:ff:55:1c:46:d3:94:bd:f2:86:
         69:22:15:20:ac:10:e4:7a:2b:48:19:89:bd:a9:22:1b:f8:e4:
         00:a5:1b:ac:8e:22:29:c4:3e:32:d0:44:98:3a:12:6d:0b:41:
         a5:8d:05:11:06:54:06:ad:d6:d8:23:bb:97:c0:42:a7:1e:0b:
         ab:51:a3:44:47:0e:61:8d:65:e6:69:6c:f3:c6:b0:59:e1:be:
         e7:1a:92:4a:7d:ec:39:c6:97:93:8f:9f:87:bf:4c:13:76:07:
         d0:55:eb:b4:44:db:cb:6e:e6:b4:2c:3a:07:34:b5:8e:8e:02:
         19:01:76:03:67:3d:b4:cd:51:77:01:bc:5e:ba:77:80:b7:9d:
         f8:75:c2:bd:ec:f0:df:e4:03:b4:af:91:5f:d0:83:8f:ad:aa:
         5f:d2:c8:cf:65:d9:67:86:be:71:b7:8e:21:a4:73:88:d5:ba:
         ef:f8:3a:7d:e0:17:95:e4:64:18:63:2b:9d:e9:af:57:c7:62:
         47:9b:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----