Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File:                     INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier:          rNODqjCjjyw6lOVaifdIeNF9dT/ArQXhv0xvRN11FZ8=
Subject key identifier:   D2:A1:E0:59:A4:07:C2:2F:E4:E5:03:49:ED:90:2F:65:F0:B1:C9:B0
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer:       /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial:       01962F74C19C4DB798D8E6CC3F3821A470D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: Bgnmw2M/+a5ybB7BItTG++xrozHuf4ClRNuDFN5tZlU=)
                          2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:9c:4d:b7:98:d8:e6:cc:3f:38:21:a4:70:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=d2a1e059a407c22fe4e50349ed902f65f0b1c9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:d7:5c:f7:a7:87:b5:29:0a:18:33:66:29:
                    9b:3c:ed:e4:35:6f:ea:b8:1f:37:d7:12:f8:7b:a8:
                    45:03:f2:dc:8f:d9:ac:09:1c:fe:f2:a1:46:91:86:
                    57:13:20:34:7a:cd:0c:dc:62:83:95:fa:bc:b6:58:
                    33:5a:86:f8:c2:12:52:59:55:60:da:9e:8f:91:3c:
                    15:25:38:2f:a9:ca:52:9c:22:13:af:b9:33:95:02:
                    8f:2f:c4:27:e0:eb:c0:e3:6d:5c:a9:a6:0c:d2:04:
                    bb:b8:aa:ae:49:fd:87:ea:0c:14:72:f5:7d:14:82:
                    ba:c4:98:a3:6a:47:a7:9d:96:6e:c3:0b:9b:52:a3:
                    55:b6:46:e6:33:b1:cf:61:3e:a1:79:1a:cc:df:3d:
                    15:13:60:37:fa:8b:fd:6c:63:22:bc:2c:e7:22:71:
                    2e:f8:6e:b6:31:2b:b4:38:3b:c7:ec:5d:43:70:1f:
                    3e:91:ec:85:e6:73:98:39:5c:4f:ad:0f:0e:42:0f:
                    09:bf:03:d3:83:13:a3:db:1a:44:a9:f4:e1:f8:0a:
                    75:18:c6:6a:28:35:f1:d5:86:2d:0f:0a:80:a6:44:
                    1b:33:fa:f3:e2:9c:84:e8:4f:a4:ba:c5:cc:a4:36:
                    ce:00:db:6c:9a:e1:9e:64:61:35:af:c2:40:0c:8a:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:E0:59:A4:07:C2:2F:E4:E5:03:49:ED:90:2F:65:F0:B1:C9:B0
            X509v3 Authority Key Identifier:
                keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:b5:a3:a7:f1:f4:93:74:32:9a:f9:a4:e6:1f:47:ba:95:
         a1:0c:c8:95:5a:b9:4c:7f:94:0e:94:2a:29:73:16:0a:2e:42:
         2d:e4:a6:bc:7f:36:07:29:9d:66:5c:00:eb:ed:3c:a7:79:c1:
         12:8a:e2:72:9e:14:b6:65:51:a0:a2:3b:c7:eb:ef:46:7a:d1:
         85:1c:c6:65:69:6a:41:13:6d:34:91:c4:0c:27:1d:03:66:78:
         38:cc:f6:25:87:83:10:d0:df:07:53:f5:d1:d6:0a:ff:c3:15:
         1d:7d:51:6a:cb:5d:c3:2c:6b:9f:c9:91:cb:35:c3:c0:9a:1a:
         a6:be:50:25:76:1a:b6:69:7e:c3:69:7b:b7:2a:5d:4d:54:59:
         ec:03:43:ca:39:9e:c9:01:61:f0:6b:56:54:e8:15:0c:25:56:
         36:29:ff:17:74:0c:00:a1:f3:57:0a:ce:f9:e3:cd:ff:d0:d5:
         93:0e:42:7f:48:cd:0d:10:f2:25:76:bd:a5:ae:c4:fe:4f:77:
         77:16:5f:03:25:80:45:28:e9:0e:79:5b:fe:b2:b0:ab:73:c7:
         95:a3:96:4e:e8:d9:a1:99:21:6a:47:09:ab:10:91:0d:94:f0:
         1f:bf:8d:b5:a1:43:b9:a0:86:0c:18:2b:80:0e:4a:6e:25:1a:
         1a:cc:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----