Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File:                     IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier:          Xsl1M0gnBA0oFPPOK5AJoh5ywvIsVXyaT8wGUWa3lo0=
Subject key identifier:   99:02:4A:6A:E3:D4:2C:89:0A:7C:F1:60:7A:87:02:88:7F:5D:40:BC
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer:       /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial:       01962E98C416DF4EFDAFD9BFF9294E5F425F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: rGh1ebyGPQ22g7j11IJPJFtypGTtEE51q0mIymK8ywo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:16:df:4e:fd:af:d9:bf:f9:29:4e:5f:42:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=99024a6ae3d42c890a7cf1607a8702887f5d40bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:29:63:9c:76:f2:3d:81:94:9a:d7:5b:6f:
                    c5:e7:59:0a:71:9c:7d:1e:50:84:fb:b5:3a:20:bd:
                    a2:a0:18:c8:da:cf:2e:04:49:e5:8f:f2:bf:47:eb:
                    d0:36:1f:80:c8:e8:c3:06:8f:65:92:01:af:96:a4:
                    2c:41:ac:ea:e2:d4:78:4f:a9:e9:16:71:73:00:8e:
                    9f:e1:4b:49:76:4d:b6:e0:df:c7:10:c6:fd:81:86:
                    69:b8:04:51:18:46:87:bb:f2:e3:41:5b:7e:35:53:
                    27:0f:63:2b:66:a7:d1:d2:4c:2a:76:c7:59:db:11:
                    78:8e:a1:37:6c:73:f2:c5:e6:d4:dc:1e:f4:33:4d:
                    d0:b3:eb:8a:4f:35:ae:bd:c9:d7:ea:a7:d2:58:f5:
                    60:53:18:21:0d:59:b5:93:e3:b1:6e:d9:65:22:4c:
                    b1:4f:fc:3e:97:a0:37:0e:86:bd:6d:a7:e8:9c:fa:
                    a2:93:a7:56:f2:42:90:c7:e9:13:65:c7:60:22:4c:
                    c6:ac:52:d8:53:e7:2d:42:30:43:bf:28:5b:f4:9a:
                    14:08:f7:78:ea:5d:67:fe:29:3b:0a:4c:c9:c7:98:
                    62:6e:ba:77:e7:64:8d:fd:0a:90:6b:f9:94:b9:33:
                    bf:3f:95:f5:cd:4a:ac:08:f9:82:6a:9a:cd:36:b5:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:4A:6A:E3:D4:2C:89:0A:7C:F1:60:7A:87:02:88:7F:5D:40:BC
            X509v3 Authority Key Identifier:
                keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f9:2d:63:9f:e6:83:a5:a0:ab:94:85:d4:92:e9:99:ee:fd:
         27:b2:f0:17:bc:ef:40:a5:0f:25:12:09:2a:a4:e6:43:cb:11:
         af:cd:d2:3a:23:f2:63:47:42:c0:f9:10:a1:da:e7:b3:0e:10:
         fe:8c:69:27:60:0f:88:6f:17:84:5d:af:c2:87:bc:f2:5b:49:
         b9:6e:a9:ca:23:51:34:cf:40:f8:ee:d3:2b:12:0f:7d:c2:d1:
         ac:1e:6d:a8:e9:38:2f:e7:0b:94:87:e3:e3:3c:cb:bd:8a:88:
         e6:1f:13:71:d8:13:58:8a:f7:8a:cb:fc:7e:eb:6c:0e:c2:d4:
         de:3c:f2:39:6b:bf:85:23:db:2e:fe:9a:8f:16:48:ea:b7:57:
         67:c5:08:6b:5f:e8:0c:79:1e:e7:74:9e:84:75:59:1e:40:ec:
         e9:5e:c3:c4:ee:c6:bb:5c:3f:56:4f:07:61:23:1d:81:76:c7:
         4a:3a:4d:20:5a:c7:70:ca:ad:db:18:36:b8:84:8b:95:a2:d9:
         72:5d:73:bb:67:c5:f0:22:81:90:c9:28:51:b1:e1:28:50:cc:
         24:82:a1:c5:1c:c6:a4:c1:ef:5a:11:b3:36:c2:06:a7:11:f3:
         7c:ad:b7:66:25:02:f2:7f:f7:b5:12:7f:94:ba:81:a8:01:76:
         f6:3e:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----