Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File:                     IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier:          X7f7vUvkE5kxrhEJClqDQaj2rxbwYndn25LRCn0u9jY=
Subject key identifier:   F2:1F:C9:82:3F:BC:A8:5B:C6:C7:F1:C3:85:80:A5:7C:06:80:BE:26
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer:       /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial:       01962F06741941688EDE8DD6C4B9F861E7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: 9GY/ts+g6y9RTwDH/W9V5GLqxaUDklus/zHRV27xwA4=)
                          2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:19:41:68:8e:de:8d:d6:c4:b9:f8:61:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=f21fc9823fbca85bc6c7f1c38580a57c0680be26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:50:c3:40:37:3e:07:a8:ea:49:29:06:d1:
                    e6:03:aa:1d:47:5a:fb:ef:d1:e4:30:f0:11:ff:bf:
                    cf:36:8d:c5:94:44:74:6d:11:6e:4b:5a:df:bc:07:
                    40:88:ed:2e:37:45:76:eb:ad:81:66:fa:10:81:f8:
                    7a:4c:f7:0a:15:e5:15:63:c6:38:8f:2a:e4:c4:48:
                    5e:ed:62:25:53:52:4a:e1:af:95:eb:71:6b:35:94:
                    8f:9e:49:53:fc:b2:24:f2:06:b3:a0:70:c2:74:eb:
                    da:ca:7c:37:3a:11:f6:a7:75:d1:7c:9a:76:c6:71:
                    f7:b2:0b:1d:9b:7c:80:e8:02:a7:8c:0b:cf:83:7f:
                    0a:05:77:c6:75:b6:80:81:ef:36:ce:a3:e4:a9:6c:
                    34:1d:d3:8e:80:2b:95:66:fd:db:a9:86:62:7f:e1:
                    d6:eb:ed:9c:5e:a2:d9:cd:fe:a5:94:85:55:92:84:
                    21:c6:30:e8:d4:20:51:e4:61:1f:5d:7d:c6:ea:e4:
                    a7:b2:d1:fd:13:18:55:71:b6:ea:0d:6d:04:b1:bd:
                    67:ed:be:43:2b:ea:9c:12:11:b9:cd:03:93:40:de:
                    c7:bf:f7:e5:e6:fa:a8:8a:3c:68:73:c0:b5:9b:d7:
                    9c:c0:b3:79:45:61:20:2c:da:82:51:1a:8d:e3:a7:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1F:C9:82:3F:BC:A8:5B:C6:C7:F1:C3:85:80:A5:7C:06:80:BE:26
            X509v3 Authority Key Identifier:
                keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:33:ee:05:aa:aa:cf:19:47:50:1b:d4:2c:b7:d7:1f:b6:16:
         cc:68:7a:33:42:28:4d:de:49:d1:19:22:ad:46:7b:45:52:db:
         35:1b:7f:bc:38:a2:e1:42:c0:6f:20:31:92:0d:ea:55:87:f1:
         ae:c0:0c:25:24:00:0c:62:c3:f5:d0:c7:7c:50:e2:64:28:17:
         f0:94:e3:76:fb:69:a7:66:24:af:4d:61:b1:b3:11:b1:6e:2f:
         35:f7:4c:d1:d4:1c:02:61:1b:1e:94:fd:f6:26:a4:6b:49:84:
         61:6c:c4:56:ee:0a:24:0a:53:d1:57:5f:66:ca:5a:42:f4:f8:
         6b:40:48:a6:59:b3:1c:0f:ae:8a:ce:ba:2b:55:78:2a:59:dc:
         df:c5:6d:15:68:5b:96:cc:01:f9:00:a5:25:20:8d:18:70:d5:
         0e:d5:6a:ce:fd:fe:1f:50:d6:cd:62:b6:f9:25:e6:d6:35:73:
         7e:88:7d:b0:90:35:2f:24:f9:cc:4c:41:95:74:26:c8:4b:fd:
         cc:12:82:d6:35:aa:ab:2c:bb:11:4a:98:86:5c:cf:61:df:fa:
         d9:29:94:64:69:79:80:6d:a6:44:ec:e0:3b:54:49:af:49:d0:
         be:e5:55:45:e0:8d:61:b8:98:02:df:4b:15:1b:ae:56:a7:e5:
         7d:eb:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----