Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File:                     iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier:          t5X3C4VwQAqFYzhyg823iHzl31suSPyQVVz5rp8Sw2c=
Subject key identifier:   8F:95:F7:90:C5:BC:EB:F7:A7:3C:12:F6:15:47:32:4E:50:C2:03:20
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer:       /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial:       01962E99A4EB7846E4C45E332BD05DD1FB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number:          0D45
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: gGw6ft1sLBQmsJ-vRfx6KJXkhbk.roa (hash: S1p9cVSO3FaBQReociITznoI/L2Cqm4kk12uycY2TsA=)
                          2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: iiGFz8P0P9HtmMTHYSH3j5VmE5IYc594F/hVFjCWk3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:eb:78:46:e4:c4:5e:33:2b:d0:5d:d1:fb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897378126f55d96519553daa48e02e3282121644
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=8f95f790c5bcebf7a73c12f61547324e50c20320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:a6:5f:59:b8:f0:1d:2a:7d:62:7c:54:86:
                    1c:2e:82:3e:e9:b2:c3:6f:6b:d8:3c:83:05:e8:9e:
                    14:e1:16:31:c4:be:d4:72:c7:6e:2a:aa:73:72:fb:
                    4f:82:6b:6e:cf:d1:b1:fe:6d:11:c3:5c:60:06:4e:
                    38:d0:a7:81:41:c8:2e:a1:29:f4:55:2c:62:33:ac:
                    ad:d3:24:27:af:e0:e3:61:12:e8:1f:1f:75:fa:30:
                    8f:a3:cb:d0:61:00:12:31:f3:18:a5:81:66:56:a8:
                    cd:75:fe:ac:4e:8d:ab:54:a0:91:a7:d3:30:6d:1b:
                    3f:c0:1c:21:33:fe:08:a0:d9:0c:9c:ed:59:76:e9:
                    41:c2:8d:e3:65:88:06:31:5a:0b:f7:ca:7a:10:e5:
                    48:ef:5f:0b:e4:89:cc:a1:53:34:50:64:12:2b:f3:
                    e7:d1:bc:dd:62:35:21:ac:ea:bb:8f:6c:46:b8:b2:
                    83:dd:dd:13:76:9a:31:b6:7b:98:58:74:d1:2d:24:
                    41:cc:26:d4:db:72:10:44:9b:68:82:1b:3e:07:e8:
                    9a:6d:a1:af:33:b7:fd:f5:32:b8:f4:ca:25:ce:8b:
                    91:6a:33:e7:fa:97:94:20:b3:41:78:b2:ec:48:e7:
                    09:25:4d:15:a2:95:98:45:d7:1c:ad:a9:19:57:70:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:F7:90:C5:BC:EB:F7:A7:3C:12:F6:15:47:32:4E:50:C2:03:20
            X509v3 Authority Key Identifier:
                keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:00:64:2d:7d:c8:5c:d8:a4:2e:c3:c3:3d:7b:da:5d:92:85:
         de:bc:e5:30:77:b4:45:18:78:bd:14:9f:4e:72:d3:c9:0d:f4:
         b7:ad:bb:6e:a5:2f:bb:cd:f6:f4:f7:b2:43:77:18:35:e5:67:
         eb:9c:c1:24:8d:3b:27:59:84:2c:d9:5d:e1:f9:90:df:78:75:
         c3:d7:89:80:1a:e3:ff:5f:98:b1:e1:2d:a1:d1:b4:b5:b0:a0:
         0c:55:c4:41:87:24:2c:b2:32:96:62:5f:6d:0a:ce:bb:58:86:
         d6:41:91:7a:10:59:30:2c:c8:13:dc:df:0c:73:8d:e9:ae:85:
         d6:b6:27:f5:19:ec:e1:88:b6:93:27:0f:01:99:a2:de:41:18:
         69:ed:b3:f7:ba:ef:b5:c8:8b:8c:ee:dd:11:1f:33:3b:5f:9c:
         e4:66:b6:4f:2d:90:f5:eb:c8:59:aa:1d:e5:9d:c0:b1:0a:c2:
         5c:7e:4b:af:6b:7d:18:5f:60:c7:5f:9b:71:a0:e5:91:04:1f:
         ee:73:03:0c:63:d6:e5:01:e0:82:55:b6:55:94:66:4b:4d:5e:
         3d:cc:3e:55:4b:37:6b:3f:da:77:d8:2b:36:7e:70:47:3b:12:
         3b:1f:37:5e:d7:24:6a:4e:86:e9:82:5a:51:d9:59:86:08:1f:
         57:e4:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----