Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File:                     IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier:          vgXqFPDhegqviN+T0b3Bz+pw6Sf0ZWzX/bHTsSkYmig=
Subject key identifier:   25:A1:99:43:52:8C:B6:E6:17:0D:37:E3:F5:31:CB:27:86:A7:35:16
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer:       /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial:       01962F74842215389B28154024EA233376F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number:          1230
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: hhARYAM0GsiARWD+4vKcj3nQtvPMciLa/Xtv1EM+yTA=)
                          2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
                          3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:84:22:15:38:9b:28:15:40:24:ea:23:33:76:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=25a19943528cb6e6170d37e3f531cb2786a73516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:da:77:2d:f9:69:7b:73:22:4d:70:2c:ba:
                    f5:c3:de:86:aa:47:3e:49:b3:b9:cd:9f:f0:8c:fe:
                    3a:c8:cb:44:59:04:e0:2f:ce:41:0d:4d:99:15:20:
                    24:4d:72:bf:34:f7:08:ce:fd:16:cb:95:e9:ab:5e:
                    aa:77:ce:52:0f:81:20:bf:08:cc:b8:f5:c7:37:32:
                    7b:33:2e:e5:fe:69:6d:26:dc:b1:a7:77:a7:05:ed:
                    07:6d:39:b7:c5:24:75:25:5f:8a:19:3f:29:7b:4a:
                    00:eb:c8:0f:34:72:3f:5c:7b:f2:6b:f4:c7:24:f4:
                    ab:ac:96:aa:e0:30:9d:aa:cc:d1:5c:61:db:f4:eb:
                    da:eb:52:12:5c:a7:00:e9:1c:fd:11:62:bc:f6:a8:
                    4c:81:33:ee:b8:91:b8:af:2d:20:c7:ea:d2:af:22:
                    43:5c:ff:9c:6a:86:20:a9:ac:b5:0b:27:fd:5d:30:
                    ff:8c:56:d5:0b:99:22:ae:21:01:8c:57:e0:6d:b3:
                    b9:0e:e5:5a:aa:d4:73:b6:5a:d4:4a:dc:2b:cf:0b:
                    ea:df:45:d9:49:42:f5:02:90:ff:1f:47:92:46:87:
                    ed:d9:a0:c4:b4:98:c2:ff:45:ea:0c:d0:9d:36:49:
                    7b:d4:d0:84:4e:12:1b:a7:55:39:70:eb:10:82:d0:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:99:43:52:8C:B6:E6:17:0D:37:E3:F5:31:CB:27:86:A7:35:16
            X509v3 Authority Key Identifier:
                keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:49:6e:31:71:bd:f9:72:ce:4b:61:3c:7b:77:69:58:a6:0c:
         84:da:56:9b:43:2e:53:3c:91:df:66:ae:d3:7f:35:bf:e0:24:
         f7:70:4b:b3:81:32:5f:cc:0e:e1:c6:cb:6a:12:60:89:d8:48:
         6f:a1:c5:3e:9e:b2:3f:73:35:ce:52:69:59:4a:57:2e:ad:ef:
         50:db:71:f2:1d:ef:4c:2e:18:3e:87:e4:4b:a0:34:b5:99:46:
         81:3a:c9:87:fe:34:5e:6f:76:0b:b5:69:18:5f:8a:b6:71:66:
         0f:08:7d:44:15:fa:0f:49:3d:af:db:2c:33:47:b0:3f:ee:77:
         0f:9a:19:72:15:56:c6:c4:9a:5b:52:b9:e1:97:ea:b1:24:5b:
         78:82:90:94:aa:0a:5e:44:11:52:2e:fb:6b:34:7a:bd:f4:68:
         64:ce:c7:8a:b3:2e:3b:81:ea:e9:29:90:09:48:83:ac:2e:ad:
         8d:92:8d:9d:d4:06:46:09:b0:4a:3f:ba:fa:e4:34:67:b0:ed:
         39:f6:65:12:15:6e:93:79:cb:f5:2b:b8:c8:75:70:9c:48:4a:
         33:c5:20:d9:b1:22:cf:b6:c2:84:40:bb:b2:ba:14:5a:77:f5:
         c6:66:7e:4c:03:8e:0a:cc:3a:4e:7c:96:99:e3:32:42:55:4b:
         be:61:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----