Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File:                     ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier:          KCgJXd+3vBLsyRRmQutChWxevE9ZWFk8DQG/KTBgWBM=
Subject key identifier:   EC:85:E3:93:37:E3:B3:BD:ED:19:5D:8E:C0:88:DD:FB:94:89:C8:3B
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer:       /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial:       01962F7422E9EEE989D12D878DD9B453F493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number:          C7
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
                          2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: gmR22f3pYrcytHNVozEcrwIozlwFSYI34RSM1HEAwzk=)
                          3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
                          4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:22:e9:ee:e9:89:d1:2d:87:8d:d9:b4:53:f4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=ec85e39337e3b3bded195d8ec088ddfb9489c83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:36:24:55:53:60:10:1e:12:6a:1f:b3:48:
                    9e:38:04:01:11:f8:30:08:6a:6c:35:30:52:24:9e:
                    86:3e:54:39:23:95:b4:6f:7c:d0:c7:bb:9b:6f:80:
                    0c:ca:7e:87:ac:37:3e:84:e3:14:e4:9c:85:f2:f7:
                    fe:81:bb:4b:cf:fa:55:59:25:d8:8c:9e:92:44:85:
                    f9:6c:03:f3:c5:81:78:61:87:3e:81:7a:6b:a4:bb:
                    fe:2a:cb:a6:17:e2:37:f2:95:cd:7f:fb:0d:3f:72:
                    11:00:01:aa:ee:27:db:d0:fa:f1:22:4f:89:83:17:
                    5e:1a:32:7d:41:df:e2:3e:06:48:d9:78:1b:0e:1e:
                    63:8c:4e:be:7f:a5:48:ac:5c:05:be:ce:8c:26:b6:
                    13:dd:7b:34:9e:a8:33:3a:c4:9b:9d:3a:0f:09:ef:
                    51:bd:c2:bc:d8:7a:e3:e7:83:a5:b9:ce:77:cc:8b:
                    6f:0d:9a:3b:5a:95:f1:31:de:fc:6f:e9:9d:b8:4c:
                    45:5c:12:9d:f1:fd:50:9a:95:bd:38:52:49:d8:c1:
                    e2:c3:65:f3:d3:74:49:e9:cc:83:54:65:b5:18:cd:
                    f3:c1:a2:a1:be:d1:3e:61:17:3b:e9:86:46:c7:8b:
                    b8:4b:11:a1:f6:81:9d:f2:e9:cd:7b:0b:a3:e1:73:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:E3:93:37:E3:B3:BD:ED:19:5D:8E:C0:88:DD:FB:94:89:C8:3B
            X509v3 Authority Key Identifier:
                keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:3b:b2:71:6c:d9:6a:59:36:a3:37:56:c5:fd:aa:81:55:
         97:66:1a:fa:73:82:ab:06:96:84:2c:bd:0f:68:9d:fb:e2:56:
         dc:f2:ff:ee:6f:30:31:f6:3a:3b:a6:a1:be:1f:95:b0:d5:ad:
         8d:ff:cd:ca:d7:51:88:73:b2:14:e8:34:a7:43:84:f3:de:ad:
         f4:77:90:db:5b:42:2c:fa:f9:1a:c4:13:3f:05:6e:29:a5:03:
         32:1b:7d:a4:de:57:36:3b:a6:64:a0:18:7d:95:4f:7e:41:29:
         cf:79:30:73:a9:e2:ff:bd:d0:7c:0c:f5:49:92:6a:3b:6f:c2:
         2a:d2:b8:39:9a:0b:b6:71:78:d4:c6:66:35:ec:9e:49:a8:22:
         cf:eb:01:75:ac:bf:ce:93:91:98:4b:96:fe:98:f9:50:03:e7:
         ea:c7:1d:47:78:9a:59:b6:83:d4:4b:55:4f:64:81:0f:fd:30:
         dc:75:08:9f:a4:1d:a7:82:39:c0:d8:5e:12:02:18:2d:09:66:
         aa:10:a1:b9:44:b6:90:2d:5d:da:68:b1:9c:e5:eb:be:35:1e:
         2f:83:fe:af:6e:04:61:94:9e:af:35:3d:94:3b:30:10:d6:04:
         7d:2f:12:5b:c8:44:13:16:e5:22:1b:9c:91:42:77:7e:da:c2:
         e0:e0:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----