Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File:                     IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier:          2uoYWXcBU4elOr/k9o8BjaJxS86CNgUIMKK9eFpZtvE=
Subject key identifier:   F4:E7:62:A1:4D:8C:5D:DD:F1:06:5B:44:0B:C1:6C:8B:67:FC:BF:2B
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer:       /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial:       01962E9918AE1A1405ACE44333B9C62CBE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number:          07B1
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: NQ9BH1ugR0HpZqd1aVCNGajrHJ7D/zdVnkucWanRhOU=)
                          2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:18:ae:1a:14:05:ac:e4:43:33:b9:c6:2c:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=f4e762a14d8c5dddf1065b440bc16c8b67fcbf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:f3:19:78:23:c0:98:4f:84:21:fa:c4:eb:
                    c8:6a:a4:63:4a:c0:df:be:c0:c9:d4:40:0b:63:71:
                    cc:82:69:0b:46:09:de:36:50:6c:5f:bf:99:0c:5c:
                    23:83:2e:20:fb:3d:43:d3:34:02:2e:95:30:09:1d:
                    de:0c:e3:8b:66:1c:11:44:ab:95:59:8d:88:8e:08:
                    84:3c:1a:1e:a6:49:ae:44:56:43:48:59:c4:72:70:
                    75:df:e2:84:ed:74:71:e2:8e:b0:65:98:76:cf:06:
                    20:17:41:bb:88:b1:84:b2:4a:f4:41:e2:d1:29:ab:
                    f9:7e:86:4a:02:87:49:cf:fb:de:56:b5:d1:aa:3e:
                    7c:1c:3c:f7:f9:34:60:3d:d2:8d:d9:ee:1c:f1:70:
                    32:13:86:e2:14:f6:e4:53:5f:27:a1:08:ca:c1:e5:
                    96:57:e4:27:ba:fe:6b:a7:65:94:42:de:80:e8:8e:
                    39:02:56:1d:f3:a4:3d:93:0f:d9:a1:a6:89:44:2c:
                    20:c6:e9:ca:c8:e9:27:31:f9:bf:23:8f:0b:bd:1a:
                    c0:ed:57:28:e6:28:e1:1d:77:7d:ba:59:b0:39:f0:
                    11:e4:5d:24:ff:f8:dc:6f:8a:63:b1:b9:b6:85:88:
                    7b:bf:58:3a:8c:b7:e6:c7:19:b3:28:eb:02:c1:a9:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E7:62:A1:4D:8C:5D:DD:F1:06:5B:44:0B:C1:6C:8B:67:FC:BF:2B
            X509v3 Authority Key Identifier:
                keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:82:10:7b:4a:06:60:70:82:40:d8:d8:56:d4:5b:3c:db:b0:
         1e:ba:e5:50:b3:f8:2c:1f:ce:f5:ed:56:3f:8f:a7:72:72:ea:
         f7:47:f3:2b:50:66:39:05:37:bb:23:a2:8d:cf:d3:d2:f5:04:
         25:28:23:72:3a:26:87:47:ff:ae:66:cf:5f:e6:90:f0:e0:87:
         68:8d:82:18:b3:14:79:c2:e3:19:d6:d8:86:83:d3:2e:e2:f1:
         f9:d9:c8:02:9a:75:54:14:bc:36:f3:ec:dd:0a:25:2e:65:dc:
         a1:3f:86:ba:fe:4b:bc:87:ff:5b:c0:c9:48:25:a7:27:67:00:
         dc:da:32:2e:9d:63:a2:6f:7b:81:53:69:2b:4a:42:45:63:09:
         8c:cc:c6:aa:a0:46:ed:94:18:4c:80:0d:af:6c:30:50:2a:57:
         26:bd:7c:7f:3a:ba:51:47:e2:98:56:21:68:84:e3:b9:3d:ac:
         26:e6:b1:24:3a:7c:07:96:fd:29:32:7d:7c:61:ce:7a:db:32:
         1f:aa:d0:c4:b3:a3:94:8b:2b:0b:a4:0d:11:0c:58:68:d2:c8:
         73:e8:8c:30:1d:cb:4d:15:bc:7c:d7:ff:3a:9b:df:3e:79:9d:
         eb:e7:5e:c8:e6:6e:5e:dc:b4:b7:e7:c1:19:f0:48:77:23:3e:
         57:fb:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----