Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File:                     IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier:          hlStK3ijzAOV7KUVnh9A6TNPgrNkwML6w1XLsaMbTX8=
Subject key identifier:   63:E6:25:D5:C1:ED:75:CC:1E:6E:F1:77:91:13:02:AA:F7:46:48:11
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer:       /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial:       01962ECF584CBD046419A0FBCFDB5089C666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: meMbnQBslfnI0/qEu4JNJ2CUqZIKliRFIyL9hKFBfk0=)
                          2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
                          3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:58:4c:bd:04:64:19:a0:fb:cf:db:50:89:c6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=63e625d5c1ed75cc1e6ef177911302aaf7464811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:7c:88:02:2d:3c:d1:05:43:33:72:73:11:
                    82:46:5d:4a:ba:10:5a:48:95:2f:8f:9e:dd:85:31:
                    90:ce:8f:4e:d7:e7:96:57:d0:88:a6:55:a5:46:ec:
                    57:d6:7c:22:71:f9:4b:e9:d1:4c:29:b7:7d:2c:92:
                    2e:99:1d:3c:71:92:03:69:3b:4c:f4:f8:c5:3e:eb:
                    5b:88:1a:87:b5:5d:a8:92:70:62:d5:6a:82:74:bd:
                    e8:96:81:94:d2:94:5d:c9:cf:4a:20:16:70:63:b5:
                    3e:27:c3:c8:c0:ea:b9:aa:ec:35:0a:b9:88:b5:24:
                    eb:ee:58:4b:85:8e:aa:38:f8:22:d2:1c:fe:67:a5:
                    4b:d8:8b:e4:fd:ff:7d:e4:9f:49:0a:9c:a1:28:fb:
                    80:ae:c9:ef:d9:7a:d5:02:72:54:bd:93:be:b3:0b:
                    95:ec:f8:af:40:fc:b1:bd:c7:0c:4b:68:15:4e:c0:
                    98:b3:a9:2f:9c:7a:45:ad:61:f4:61:92:45:8a:c2:
                    90:d1:bc:b8:ad:36:c7:f0:3c:bf:bb:42:fa:9a:22:
                    c2:bd:8e:61:9b:0d:14:11:fd:10:f6:bc:b7:9e:39:
                    4a:41:93:4c:ec:81:da:8e:65:d0:b0:1e:79:99:e6:
                    13:e2:65:be:6d:9b:ec:41:da:b0:7c:95:fd:0c:b9:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E6:25:D5:C1:ED:75:CC:1E:6E:F1:77:91:13:02:AA:F7:46:48:11
            X509v3 Authority Key Identifier:
                keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:72:e9:d5:2e:79:04:32:57:a3:28:ab:54:56:fc:63:77:
         e2:79:b7:b7:90:d4:21:c3:b3:70:db:34:f4:2d:39:41:bb:d8:
         61:29:ce:f5:c6:26:c0:cc:04:48:68:02:c2:20:f5:4f:1d:49:
         bc:49:28:1d:75:e4:54:d7:a8:26:3d:50:e3:3d:31:7a:ca:5b:
         a0:23:36:0a:de:af:d6:7e:fa:44:4e:0a:f0:f7:16:aa:3e:8a:
         18:df:ef:75:c5:b0:d3:79:27:7e:d6:b2:53:03:f6:f4:31:b4:
         e7:df:07:90:57:2f:fe:75:de:97:be:3d:12:4e:49:44:cc:5c:
         a5:a7:a4:8a:fe:74:00:41:8f:a7:31:b8:72:e6:67:8a:df:71:
         78:45:85:5a:b1:e9:fd:ee:e7:c1:d6:02:3d:f5:b0:0f:fe:06:
         b7:b7:ea:e0:cd:61:a0:8a:d4:34:29:92:ed:91:c3:80:9b:19:
         48:5b:9d:75:ef:a6:7f:7b:da:6f:99:3c:f0:60:6d:39:80:7d:
         fc:aa:df:24:21:86:42:35:f5:a6:bf:b9:44:ec:d1:d4:36:4c:
         d5:3b:b0:da:fb:c6:cf:85:3c:e4:d1:68:ac:bd:4b:77:2c:44:
         84:7b:41:93:76:fb:20:b4:bd:b0:9f:65:f8:6d:b1:50:f1:17:
         65:27:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----