Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File:                     ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier:          scd3cMEThD6Mxg7BGLBmuB+voxJVA18WIlgGHE6Sg4o=
Subject key identifier:   E0:26:8C:BE:1D:9D:FC:3C:93:16:D1:4C:19:F2:3C:44:64:BE:46:A7
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer:       /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial:       01962F74D31CB12545F2734EB0F6019406A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
                          2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
                          3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: pJ/fe6kTq8Vr+meQLJAm76D+al4McdKxFLAq17P3AgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:1c:b1:25:45:f2:73:4e:b0:f6:01:94:06:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=e0268cbe1d9dfc3c9316d14c19f23c4464be46a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:9b:dd:29:7a:c5:23:bd:b1:d7:41:b8:e4:
                    c4:5f:5f:1f:2e:f6:f8:a1:24:76:06:ce:ad:84:ca:
                    6d:0f:8c:9f:54:72:f4:79:10:ed:7a:a1:50:7e:e6:
                    15:75:21:ac:c1:ce:71:a4:d4:29:c2:0c:8f:7c:97:
                    05:ed:54:5b:8c:9e:cc:23:a0:4c:74:62:0e:75:51:
                    be:cb:93:84:c6:94:32:05:54:1c:df:49:cf:e0:1f:
                    19:ff:14:41:f8:70:d4:eb:5f:1c:40:20:de:0d:0e:
                    e5:3b:a8:f5:a2:e5:e6:cd:d7:73:d9:26:e1:02:7f:
                    08:4a:b0:7f:d4:4f:34:af:d7:b6:37:a9:60:0f:01:
                    00:46:89:e9:b6:0f:ab:5b:27:b2:b6:6c:45:3a:71:
                    f9:75:c1:4b:73:7e:dd:22:44:82:27:ee:a8:42:9f:
                    66:3d:9e:b9:cc:95:75:fb:8e:7f:ac:d7:58:88:b8:
                    50:b5:ff:55:d9:7d:70:06:2c:b1:88:0c:76:93:b3:
                    0f:1d:7a:60:30:36:7c:03:63:aa:ba:9d:30:c2:fe:
                    e3:91:0e:9c:ef:5f:e6:5a:5b:83:ea:c6:ef:4b:94:
                    5e:3b:69:24:4f:63:f9:65:18:be:ac:be:dd:06:97:
                    9d:92:0b:23:17:4b:4f:9d:f6:b9:e9:64:eb:40:19:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:26:8C:BE:1D:9D:FC:3C:93:16:D1:4C:19:F2:3C:44:64:BE:46:A7
            X509v3 Authority Key Identifier:
                keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:0a:b5:75:bd:30:2e:2f:b0:57:2e:b0:cb:2a:58:47:6c:
         18:e3:77:f9:28:5a:0b:0a:13:3b:05:70:8b:6b:79:79:0b:9c:
         3a:db:30:29:36:19:37:5c:7a:32:9b:ba:32:9a:1d:08:66:9b:
         a6:34:8f:e4:ac:97:08:3c:19:dd:f9:c3:ae:63:e3:8f:5a:db:
         c0:e2:37:c6:ce:a8:3a:e6:7c:cc:d0:0a:9e:16:d2:69:78:1f:
         87:d3:f6:d9:11:99:86:b1:9b:af:4c:c0:3d:8c:6a:ce:3b:0e:
         ba:c6:e8:39:18:56:96:44:ea:87:83:b9:81:bc:06:bb:91:ab:
         2e:52:af:c6:67:4c:47:3c:7e:92:80:06:60:3c:58:5b:23:15:
         70:6d:69:30:5c:21:a5:18:0d:93:cb:53:15:ba:e8:86:7b:1c:
         71:30:46:35:ac:dd:62:7c:7e:74:4f:6b:2c:3d:65:c5:40:d8:
         8e:c1:06:8a:b5:30:86:1a:6a:81:be:e5:ec:03:fe:17:1a:ad:
         1b:2c:24:4f:b2:23:97:dd:52:94:6f:fd:34:5d:90:30:54:e8:
         79:62:61:cc:6d:fe:ab:15:72:31:d6:ff:db:8a:7c:31:bd:ee:
         86:fe:e6:3a:e1:b9:a4:fe:81:17:66:71:4f:6c:12:24:ef:bf:
         00:3d:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----