Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File:                     ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier:          Mij055QNMPUyit7qSadUTJYfAJ0JdZjzoFiYsj2N2MQ=
Subject key identifier:   B0:16:94:B2:B5:37:A8:E5:A8:FF:69:AC:B4:FA:E5:06:E0:C9:B4:C1
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer:       /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial:       01962F3DC5FF2DCF07A72B7CC258D2D8DF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number:          F3
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: jtAzwlUyn52K5DzNm8YD9lvruhvn3yVLoB/jA2w0b/0=)
                          2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:ff:2d:cf:07:a7:2b:7c:c2:58:d2:d8:df:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=b01694b2b537a8e5a8ff69acb4fae506e0c9b4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:a9:ee:1b:9d:0e:83:5d:c9:fe:d2:22:64:
                    62:3b:58:10:b8:56:65:51:10:30:5c:da:9f:48:43:
                    c1:ab:8d:36:c8:28:b0:77:94:4c:c2:52:77:3d:23:
                    04:0f:c9:a2:a2:a5:c5:b8:bd:11:2f:40:de:c9:31:
                    d7:fd:15:f4:17:d9:f5:3b:2e:d3:30:19:84:8c:76:
                    23:5f:e2:e3:e0:b0:88:3a:cc:23:fc:22:38:f8:32:
                    16:d9:e9:c0:eb:fc:be:0f:31:f6:60:69:e8:f4:cd:
                    55:85:86:2f:87:c4:76:31:4e:4c:ed:38:95:ba:54:
                    a1:57:3a:ff:00:aa:98:30:7d:b4:73:49:7e:97:78:
                    e0:63:31:83:6a:4c:e0:35:bf:b2:0f:d6:74:9d:03:
                    ef:7e:3f:65:24:15:f0:e6:32:04:05:da:64:20:15:
                    32:fe:ac:16:67:0e:20:d5:b2:ba:e1:a5:a2:f2:56:
                    ea:38:49:86:3d:44:8b:cd:e6:1a:2e:fb:69:bf:e2:
                    c9:4b:46:50:e9:1d:01:0a:e6:dc:1f:0f:af:3f:66:
                    f2:da:e9:00:02:31:fd:bb:fb:94:f0:c1:98:18:94:
                    73:8c:9a:b4:23:a3:81:77:ab:81:38:7e:6e:cd:d3:
                    93:41:28:89:7e:12:83:26:8a:34:8f:a4:a1:c2:c3:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:16:94:B2:B5:37:A8:E5:A8:FF:69:AC:B4:FA:E5:06:E0:C9:B4:C1
            X509v3 Authority Key Identifier:
                keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f2:c0:e2:d2:f5:dd:9d:c9:5f:6a:a6:ef:c7:38:4e:68:a4:
         f1:66:74:33:e5:03:28:43:5c:a1:ac:c7:7f:26:c7:c8:61:6f:
         69:4c:96:e6:41:71:1a:c5:3e:4d:02:c0:48:93:88:95:36:b5:
         41:e4:18:7c:64:14:63:57:00:ac:31:47:85:0e:a6:5e:32:c1:
         d8:72:68:b1:28:df:e4:75:a2:ab:e8:c7:1f:c3:e4:5d:2a:48:
         53:b9:d0:a5:a4:26:90:75:5e:97:d7:86:30:9c:39:6c:9f:e2:
         ea:06:73:c3:0a:41:75:49:da:28:31:b7:32:b1:36:c3:8a:34:
         4d:54:e7:cd:15:49:d3:07:dd:ae:b3:49:8d:be:52:83:f5:94:
         37:1f:27:c0:8a:42:0e:c0:6a:b4:09:ec:43:0e:54:b9:63:da:
         78:fb:69:7a:ce:1a:3c:0e:bd:12:33:c9:c7:c2:24:f0:fe:1d:
         24:71:2a:19:7e:3b:9e:9e:37:b6:46:28:89:2b:a7:91:58:b1:
         ec:31:41:17:0d:aa:c7:0f:5f:d4:d4:d8:a9:0e:63:f1:69:04:
         0c:35:88:2f:07:85:58:35:08:ce:1f:2d:16:49:17:91:3f:76:
         64:cb:33:80:82:89:27:12:db:64:d7:b5:00:dc:a5:ad:42:94:
         59:8f:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----