Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File:                     iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier:          F4zDfuGZ1sTRT+2BxOCqrA7xZgmTxA3JtVyG5NIw8yI=
Subject key identifier:   45:DB:DE:A8:89:63:DE:42:1F:0A:63:16:73:F2:C6:17:DE:5F:5E:0E
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer:       /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial:       01962ECFCBCEDDEECEED2D133B4E490B5A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
                          2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: K1ntzvm9mxfRHF3NCarO4o3QI4ejaPOOGRpeN8arvkI=)
                          3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cb:ce:dd:ee:ce:ed:2d:13:3b:4e:49:0b:5a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=45dbdea88963de421f0a631673f2c617de5f5e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:4f:f3:a6:16:bf:00:27:2d:c6:e3:ce:2a:
                    6d:83:87:2c:24:cd:dc:c8:ae:d4:5a:fe:df:02:0c:
                    92:2d:3a:1e:09:f9:d1:b0:5a:5a:95:85:1f:bb:5e:
                    a0:35:61:56:0d:9a:9d:94:1e:2e:19:73:a6:d1:9f:
                    ea:d4:7a:a8:2c:84:cf:da:d7:e4:49:d6:88:7b:98:
                    98:f2:39:fa:51:b0:00:8e:7a:4c:8b:d9:0d:1c:15:
                    7d:e3:df:5e:ef:6b:e8:bf:21:5b:88:4a:92:32:03:
                    81:25:72:6d:b1:77:2a:bc:8c:44:27:b3:67:30:a1:
                    6f:bf:57:7d:47:dc:07:40:1f:53:af:f0:d8:e3:98:
                    88:ec:80:fd:19:dc:d6:db:c6:da:86:7b:ec:96:4b:
                    e6:b8:8d:75:65:c4:7e:0b:a7:a0:14:7c:4c:81:1c:
                    cc:79:9a:77:3f:88:5f:76:87:76:cb:bf:60:32:b5:
                    ab:2d:61:6a:69:14:22:bf:de:56:3c:fb:c0:89:db:
                    bd:38:18:a0:0d:55:73:a8:02:fd:05:0a:b1:23:64:
                    f9:32:f9:4b:8c:0d:e0:b6:0e:de:fd:f5:92:f3:21:
                    14:fe:b9:e4:32:87:93:d8:c5:63:b1:67:7e:17:3b:
                    76:01:68:77:ef:0c:29:64:9e:cf:d1:77:c7:30:1f:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:DE:A8:89:63:DE:42:1F:0A:63:16:73:F2:C6:17:DE:5F:5E:0E
            X509v3 Authority Key Identifier:
                keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:99:cf:dd:f8:93:d0:d8:49:ad:52:58:8a:ff:cd:15:d1:e0:
         c2:f2:4d:4c:12:f9:66:7b:6a:25:96:ee:83:02:0d:17:0b:a1:
         90:3d:c7:f6:d1:77:e0:96:d9:2d:ec:dd:12:34:bf:9e:11:83:
         a1:8d:4a:a1:e5:b2:ae:b7:dd:08:80:d5:1e:f7:3b:6d:3d:ce:
         ae:36:c4:b5:63:33:99:0e:0b:71:f0:91:24:36:ac:f4:28:1c:
         ef:62:56:d3:be:21:b5:fa:c1:fa:f1:04:ee:b4:ca:7a:ba:a4:
         8f:77:a3:f5:6e:0f:d8:ef:5c:af:9b:8d:66:db:8f:c2:32:56:
         b8:7a:40:7e:18:0e:35:b4:19:99:bd:ef:ed:10:89:e7:6c:e4:
         0f:a1:4b:40:14:f4:2f:7a:83:12:de:5e:ea:7f:ff:41:48:de:
         0a:5c:cb:40:ae:62:a5:f0:37:6c:83:1e:b1:a9:32:c6:af:62:
         0c:db:5e:39:e2:1d:ff:c3:80:82:3a:f4:ff:dc:38:16:87:19:
         b3:75:fa:fa:a2:3c:bf:5f:d4:2f:b6:9c:91:c4:7a:1f:38:31:
         30:71:53:e9:fc:d1:6e:60:8b:b6:bc:54:fe:75:04:90:a6:42:
         c1:b2:73:92:ea:16:a6:da:2b:ca:d5:4c:84:57:1b:b7:90:fb:
         dc:fb:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----