Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          zSwLuHlxhmiW8wj1Pi4pNk+34jGAowbaz9QFcqSW8nw=
Subject key identifier:   D0:8F:7F:83:B2:EA:9D:25:8F:A4:07:54:06:C6:F0:C8:DB:98:1C:E0
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       01962F3D44CAEF4A603D9FBE1F5D9F3D8FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: eov0CKkUhtozxrz84Y/QwEaZUb5Ua6bYSWEQ40jY/Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:ca:ef:4a:60:3d:9f:be:1f:5d:9f:3d:8f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=d08f7f83b2ea9d258fa4075406c6f0c8db981ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:e9:23:b3:c9:d3:6c:4c:1b:94:26:b0:e3:
                    6d:46:ee:75:c9:28:98:90:b2:09:8a:7c:02:73:29:
                    39:fd:17:33:ef:b3:c2:26:41:2f:66:86:c8:7a:2b:
                    b4:9b:17:d2:ca:66:01:a8:8d:9d:60:4a:e0:e3:02:
                    88:c3:17:cf:b8:cc:60:00:f6:2c:04:c6:03:1e:9e:
                    55:7a:66:e8:bc:b4:dc:32:6e:8d:32:ba:d6:bf:82:
                    43:39:d2:83:5b:8c:32:2a:34:9e:bf:f2:5e:9c:cb:
                    00:2d:70:8b:88:ca:69:66:12:87:56:f0:51:c1:47:
                    e0:1a:79:12:a3:a5:53:f2:b3:4c:fe:63:6b:05:87:
                    9c:cd:f7:96:04:f2:33:f9:2d:29:96:b0:ee:fa:b4:
                    57:f9:b9:fd:6c:95:f9:a8:a0:5e:00:db:78:7f:b8:
                    e9:49:39:da:ec:1a:63:68:f6:37:56:ba:c8:e8:14:
                    51:28:7a:cd:92:f3:be:60:11:5a:53:e2:8e:8a:11:
                    c2:a3:81:00:38:a5:3c:64:6c:72:72:33:04:95:4a:
                    fe:49:4d:81:c7:0e:18:31:30:db:aa:bb:ed:5d:22:
                    8f:e4:52:3d:d2:eb:1a:d9:3a:cb:bc:db:fc:d9:d0:
                    6e:10:ae:79:81:7a:b8:b0:3d:0d:ef:79:5f:21:1b:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:7F:83:B2:EA:9D:25:8F:A4:07:54:06:C6:F0:C8:DB:98:1C:E0
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:5b:bb:3e:7d:08:9e:07:06:55:bc:1f:14:21:4e:20:f0:
         cc:90:04:10:6c:63:d9:0e:5a:39:81:9c:58:2f:41:c5:c1:92:
         9a:44:6e:11:74:bc:0b:12:b3:4a:96:20:10:a4:37:4f:72:73:
         60:82:80:44:89:e0:ff:e1:3f:52:66:65:e4:72:ea:cc:10:28:
         6f:8e:e2:c9:64:58:7b:12:9d:73:f5:41:bc:eb:61:a4:7f:ed:
         9f:ad:a8:95:42:c7:28:86:94:9c:dc:eb:46:c4:0c:4e:7a:30:
         4a:ad:44:71:7e:16:1d:50:8f:74:05:ff:f4:1a:84:be:49:c0:
         dc:85:b1:9f:13:4b:f7:fc:59:00:2a:16:dc:70:86:0a:b5:e7:
         47:d6:74:93:07:2d:ec:1e:ea:29:9d:a2:41:6c:27:fb:ff:b7:
         db:8f:62:3c:22:eb:5c:8f:99:b2:04:1d:9a:10:fb:c0:6c:29:
         83:ed:ee:90:0f:63:67:28:55:59:e2:df:fd:88:d3:25:3b:56:
         f8:f7:f2:c3:f5:95:70:f9:8b:81:f1:c7:78:fe:8c:4c:1e:f4:
         40:81:ae:37:ee:5d:5d:c9:7f:08:f4:a4:93:cb:c3:9b:7a:f6:
         c0:72:b8:2d:e0:92:f5:11:a0:77:14:aa:f6:75:33:74:97:fc:
         32:fe:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----