Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File:                     IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier:          EnTMDcbHssKc1C1cnH/8G4qWluHguPzYaoNKNdSiaO8=
Subject key identifier:   32:D0:E4:82:C5:D4:64:49:A6:0A:61:08:38:A9:EB:66:F0:B0:A7:C9
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer:       /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial:       01962DF3E6FCF5CFE8D9D6328672C7BFE229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number:          11F6
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
                          2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: iPMKOZX/1HDneJbgKgHZ30bv7jJ/W6bI/Z24Uq+O2Gk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:fc:f5:cf:e8:d9:d6:32:86:72:c7:bf:e2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=32d0e482c5d46449a60a610838a9eb66f0b0a7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:ad:1b:75:b1:c2:08:95:e7:77:fa:38:55:
                    f4:cd:c0:81:46:b7:90:3f:e0:19:cb:3b:dd:d1:f1:
                    38:c2:ca:e1:03:cb:46:c7:37:c6:89:bf:71:5f:c2:
                    9c:d4:ba:93:2a:69:d4:e6:0a:f0:29:9b:c7:81:48:
                    ae:8d:36:a7:52:ee:a5:27:3d:34:06:5f:aa:06:43:
                    0f:46:4d:c4:ab:47:2f:4e:54:7e:d4:a2:04:87:54:
                    bf:e4:62:99:4a:97:95:7f:20:c0:89:89:61:ce:13:
                    8e:75:af:56:34:0b:b5:f9:b0:4e:76:f7:ff:17:79:
                    04:aa:17:e2:3f:d2:03:16:88:36:af:70:48:d1:c1:
                    4b:db:fa:ec:3c:90:24:20:3a:ac:df:8b:1c:df:27:
                    0a:7a:11:39:f1:12:f6:f8:fe:c1:cb:c1:85:43:54:
                    b5:d6:14:90:44:09:da:1d:ea:c2:08:20:c0:6c:42:
                    22:d8:4c:88:87:ac:70:8d:3c:19:58:62:f2:c4:f6:
                    6e:c0:b4:52:67:03:80:54:5a:ae:3f:f6:b7:fe:1d:
                    ec:84:b2:80:08:fc:3b:26:ae:ae:e9:35:02:c1:2f:
                    26:00:2b:57:05:7e:74:93:22:b7:1e:21:08:a0:ec:
                    b4:f3:29:cb:a7:7b:db:71:b3:7a:a1:8f:43:e8:74:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D0:E4:82:C5:D4:64:49:A6:0A:61:08:38:A9:EB:66:F0:B0:A7:C9
            X509v3 Authority Key Identifier:
                keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:25:15:62:a9:b2:71:30:4c:d8:23:3d:ce:23:c9:bb:de:
         b9:d2:6c:b2:90:0a:29:84:24:76:1b:3c:70:97:33:9f:1d:83:
         8b:22:75:36:2f:8e:da:f4:c8:f3:4e:23:10:57:c0:9d:82:e0:
         7c:57:2f:e1:f5:1d:1b:c6:4a:a4:61:62:f9:0e:2b:c0:7d:b4:
         cb:01:f7:cd:dd:9c:8b:51:a0:42:75:92:2d:92:1b:ef:11:21:
         f6:92:ad:7c:9f:2c:bf:99:c8:bf:34:86:67:17:78:67:fb:4b:
         58:30:c2:fa:3e:6d:36:54:91:cb:99:99:d9:bf:59:04:7e:c8:
         36:09:61:eb:d9:61:65:28:3a:92:b3:43:9b:c2:d2:07:90:00:
         00:7f:f5:6a:3f:49:05:43:a2:e2:51:0c:f2:d5:ea:16:09:c2:
         99:d9:e7:85:18:48:2e:97:df:a4:09:51:f6:ac:b3:80:56:06:
         71:4c:cb:16:98:d2:24:93:0c:9e:96:20:ec:f3:48:93:0b:65:
         33:78:57:5e:20:4b:43:c6:cc:a2:f6:73:56:97:a7:89:bd:de:
         ac:b5:d2:11:6a:1c:de:c5:83:a4:a6:23:ca:37:40:57:c0:41:
         88:26:a8:4b:3e:bf:bd:f6:c9:44:1a:74:10:24:6f:84:8e:60:
         4b:5a:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----