Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File:                     iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier:          Ohj0lm9JU9tt0yCsgEXvl7vA117pbnAgz31GQyFgZq4=
Subject key identifier:   0F:20:47:CC:85:5C:1A:3A:45:50:0B:DC:BD:A0:8C:3C:A6:D9:10:89
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer:       /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial:       01962E98E299C19E4451772CF5644D00F711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
                          2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 9F7hkdTWyCCZQGRQhixD5KpGoMHWplQiy3/Xm/3EIjc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:99:c1:9e:44:51:77:2c:f5:64:4d:00:f7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=0f2047cc855c1a3a45500bdcbda08c3ca6d91089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d9:2f:eb:4e:2f:e2:73:35:ff:4f:65:79:72:
                    1a:c8:9e:db:e1:1a:82:b4:af:2d:7b:ee:c0:e1:27:
                    b8:6d:35:bc:9c:1f:6d:d8:55:81:b1:4d:b4:d7:ff:
                    8c:90:b3:bc:7e:ae:3d:63:d4:e7:78:4c:74:43:8b:
                    37:cf:29:f2:0f:44:a7:ac:c8:85:88:bb:7a:07:4f:
                    8a:fb:d6:95:c5:c1:e7:44:59:27:bf:9a:86:fd:8b:
                    31:db:aa:9f:ab:b6:10:a7:bb:a1:07:be:6a:7a:19:
                    86:dd:50:0a:f7:88:50:08:92:90:e6:4a:62:0b:49:
                    48:82:5d:26:f7:c9:4d:1a:44:31:8c:2d:a2:27:dc:
                    c7:1c:07:cd:53:df:ed:55:d5:7f:4c:c5:d5:ca:77:
                    1e:a3:ea:76:6b:92:b1:e5:bd:7f:59:c5:a1:36:45:
                    2d:5b:84:57:5e:f2:fe:7f:4c:2f:1a:f0:f5:a3:cc:
                    a1:6e:7d:ee:c1:3a:bd:e2:44:1d:45:40:96:be:3b:
                    51:e3:fd:3a:4b:d5:99:25:b7:cb:c4:ce:1e:3e:58:
                    cd:62:e5:92:2b:5d:b9:58:ac:b1:3a:d0:6f:99:84:
                    53:2d:86:a9:56:3e:21:ec:28:a1:6d:60:ed:e3:1b:
                    f6:48:0b:50:48:41:d9:d5:74:67:f6:c6:04:3e:dd:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:47:CC:85:5C:1A:3A:45:50:0B:DC:BD:A0:8C:3C:A6:D9:10:89
            X509v3 Authority Key Identifier:
                keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:85:2c:c4:fe:3f:82:b2:80:19:e2:aa:df:91:b1:bc:c4:83:
         6c:9e:42:37:e7:2d:00:d0:e1:af:91:f3:55:49:d1:09:48:d0:
         7d:1e:73:0e:91:05:91:85:71:f2:d2:83:3f:4a:9d:bc:1a:fc:
         cf:a7:18:c8:fd:d0:02:68:0d:aa:60:2d:73:2b:41:d5:ae:34:
         1e:43:13:9e:17:92:24:7e:79:12:22:e2:db:e2:fe:93:09:4b:
         91:e8:72:1d:c4:8d:09:d0:a5:8c:ea:9b:f7:f6:c1:95:58:a4:
         1a:24:80:c2:96:f1:2b:d3:3a:3f:3e:6e:fe:77:09:2a:23:f6:
         de:05:25:95:d8:56:15:00:84:3d:d3:3b:7e:e9:78:2f:3f:59:
         8d:48:32:b0:b7:c8:02:fc:b8:58:73:b3:9c:2b:53:0e:1b:65:
         6f:ea:da:c6:d9:43:03:89:67:79:2a:46:10:2c:11:41:4f:a4:
         3c:6f:49:87:9b:d8:57:ac:79:c4:6b:37:af:60:c4:e9:cd:b5:
         00:84:34:09:eb:d0:e3:eb:6e:be:0f:7f:41:e6:b1:32:76:bf:
         2f:93:12:88:99:36:fd:c2:7b:49:c3:8f:97:e1:7e:a2:cf:5f:
         92:34:21:0b:6f:46:9a:ac:ec:4c:80:56:20:d3:eb:8f:ef:16:
         eb:fe:28:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----