Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File:                     IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier:          y6gInpuGeg/cfrO8Kur8/2zATgPlyWM9+o+GI4W/nKk=
Subject key identifier:   ED:21:40:8F:6C:B7:ED:0B:33:DB:BA:F6:58:91:2D:FE:0D:F6:1C:94
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer:       /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial:       01962DF418FD1A2F4600BB763AA11F0CA991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: X661UhnsrE54r4tTLiG2Avn6Di2HulZCsy6U4rjnuXU=)
                          2: cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa (hash: c0tlMuDM/vPMybXrB0sIatVwyL/aO7RZmUvD1wZIObw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:18:fd:1a:2f:46:00:bb:76:3a:a1:1f:0c:a9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=ed21408f6cb7ed0b33dbbaf658912dfe0df61c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:5a:47:d1:e1:1a:7d:d1:0a:ff:72:fe:db:
                    84:9f:14:93:08:66:66:bd:57:f9:9a:de:70:33:92:
                    a4:a5:41:31:67:f4:e7:11:d9:f8:5f:b6:4a:09:d3:
                    1a:f8:f5:88:94:24:ce:85:4a:ad:0f:72:2b:6b:60:
                    1b:83:ad:5e:fc:ba:e2:0a:a2:cf:ea:55:75:07:99:
                    38:10:90:b2:95:d5:b9:04:0c:5e:60:78:9f:82:f1:
                    86:56:b2:3f:27:6c:70:27:0f:fe:a3:68:92:20:91:
                    5d:c8:b4:2f:8b:42:aa:4a:32:d6:33:61:cd:b5:f1:
                    4e:98:b1:f2:cb:29:c4:a3:d1:dd:8c:2b:a1:db:ec:
                    ba:01:ee:bb:9c:8e:1e:5c:ce:90:88:7f:91:f5:b6:
                    0a:ac:f0:d8:d6:3f:f6:c5:e2:e6:c3:df:2a:5a:6c:
                    38:af:d9:be:4a:1f:f6:f8:b2:9b:1c:c9:1b:40:b8:
                    c5:84:af:18:ad:6d:fe:19:13:79:e8:b4:1d:48:12:
                    dc:d6:46:82:34:d1:61:1b:5c:26:11:de:0a:ae:80:
                    58:6d:ad:aa:a8:b2:2d:30:86:ad:22:9b:59:e9:2f:
                    1d:ec:70:cd:1e:56:57:5a:6c:3b:9e:ae:75:a8:78:
                    5f:b8:17:7f:17:44:93:a7:0d:fd:78:77:cf:27:6e:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:40:8F:6C:B7:ED:0B:33:DB:BA:F6:58:91:2D:FE:0D:F6:1C:94
            X509v3 Authority Key Identifier:
                keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9f:13:fc:40:a7:85:71:e3:91:43:e7:a0:b9:d4:24:f1:33:
         11:64:16:3d:26:14:f6:2c:7d:b5:c4:de:f2:c9:17:9c:09:fd:
         f6:0e:62:c3:05:0e:57:dc:9e:d6:4e:ab:2a:77:88:4b:50:dc:
         f0:6c:fe:00:28:88:69:31:a0:e8:f2:b5:82:04:3f:7d:df:2e:
         89:8a:f3:44:37:07:e6:fb:e3:e1:28:8c:40:84:60:b0:04:92:
         7b:e1:04:9d:64:8b:bf:33:b7:f3:dc:d0:0a:52:5c:e6:25:2b:
         45:5d:b7:9a:6d:be:a6:c5:af:e3:a0:d3:2e:00:36:f2:12:6d:
         84:bd:86:8d:17:a6:0a:9a:01:ed:93:74:dd:74:12:70:a5:8f:
         51:df:7e:66:18:a4:16:fc:b2:96:07:86:89:a8:e7:bb:3d:0e:
         91:0e:10:da:75:53:99:45:38:3a:aa:d7:e1:f4:1b:ce:37:73:
         96:de:6f:86:c5:9e:f6:f8:e0:87:22:04:85:a4:a0:a7:57:ca:
         23:d1:34:9b:93:b0:86:69:1e:cc:be:2a:35:58:cf:3f:a2:31:
         fa:83:68:9d:af:f0:ee:3a:d0:f3:20:f5:76:5a:87:9f:4c:ad:
         1a:90:71:0a:de:3a:cf:42:e3:88:82:d6:c0:1f:f4:d1:8c:4e:
         f9:99:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----