Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File:                     IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier:          bKHezTVuJ7NKFxKdZGJ8JxcV0HWlWUn5jUVNnhgM+j8=
Subject key identifier:   27:AB:93:F7:F9:FF:5F:30:8F:96:48:4F:2D:FD:64:18:2C:8F:EF:3D
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer:       /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial:       01962ECF8BEA99C94C79FE454166711E2CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number:          13BF
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
                          2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: lW7QHccLPqPJT1kgF0St+ynhcnnnZMmiaFXM3DTVofY=)
                          3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
                          4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8b:ea:99:c9:4c:79:fe:45:41:66:71:1e:2c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=27ab93f7f9ff5f308f96484f2dfd64182c8fef3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:2f:8b:f0:e5:a6:4d:d1:9e:88:5f:77:48:
                    d9:7e:75:25:be:b8:7e:5d:e7:c8:d0:02:63:59:1e:
                    42:37:a9:75:35:48:14:81:1a:e6:c6:a7:24:f7:85:
                    7d:0d:da:67:2d:a4:39:a2:b0:9b:40:1f:b0:32:71:
                    78:31:37:bf:68:9c:dc:6e:ec:53:36:8f:73:7a:03:
                    00:5d:b5:89:ba:ef:fc:29:00:f6:12:cf:1a:61:55:
                    4a:89:d0:b3:cc:5d:5b:c6:d6:c0:90:85:f0:99:11:
                    08:c3:33:4c:d9:8d:9d:74:6a:2d:4a:69:54:cf:72:
                    8c:e3:c5:fe:65:e4:a4:d3:2c:02:16:aa:ff:60:f7:
                    36:35:06:21:c0:20:31:a4:40:d2:f4:21:c6:de:29:
                    df:7f:27:11:bb:97:00:8d:94:bc:5f:86:0d:e2:72:
                    93:fa:ff:67:05:49:18:d9:a0:9b:14:be:9b:1e:34:
                    2a:03:83:90:5d:27:bb:66:9d:4f:b3:55:ee:5a:f7:
                    ef:dd:b3:11:de:b7:22:0d:ef:17:ca:28:97:1e:dc:
                    61:d4:5b:c9:08:be:ed:bb:f3:e1:41:b8:21:c8:64:
                    d0:0f:5c:62:c6:fd:75:1a:bf:eb:40:f9:03:ad:d7:
                    89:db:b8:c2:ca:ee:e8:7c:93:f8:42:f5:19:32:03:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AB:93:F7:F9:FF:5F:30:8F:96:48:4F:2D:FD:64:18:2C:8F:EF:3D
            X509v3 Authority Key Identifier:
                keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:8e:ac:8f:f1:e5:2c:c4:06:b3:ee:24:5e:bf:f9:ca:41:
         88:d5:83:80:da:b1:95:bf:1a:71:fe:0f:d4:ce:32:31:f3:eb:
         69:3c:fb:3d:05:15:00:18:78:2a:98:f1:90:fd:07:68:47:f5:
         f8:5d:dc:6d:76:93:7f:ba:21:ef:51:b7:b6:90:2e:26:9b:7a:
         4b:3b:8e:42:37:5d:4b:38:63:5c:a4:da:dc:30:1f:5d:8b:6a:
         b4:6a:c7:a0:19:d1:17:e9:93:8b:99:bf:fc:13:12:b5:56:04:
         94:8b:d1:1e:d5:5f:1b:53:73:5d:a6:63:36:0c:4a:79:44:fe:
         33:d7:13:b7:3a:83:24:af:a2:e6:73:3c:9c:26:4a:be:93:26:
         ba:a7:a6:8d:68:71:01:96:51:ef:f5:89:4a:60:ff:4b:c6:cb:
         18:54:e6:e1:e3:0b:e9:d4:cb:5e:69:8a:73:13:c8:45:a1:54:
         f4:c3:5f:0e:99:a3:f7:c8:75:1a:f8:a0:2f:45:f3:b6:4f:a3:
         ee:e9:48:04:22:77:dc:65:9c:a0:7f:92:f0:25:55:30:a6:9f:
         1b:e6:f4:7a:d3:88:b1:f6:27:33:15:b9:fe:4d:2a:24:2b:d8:
         d0:ad:9c:04:99:be:68:3f:49:31:5a:80:9f:5e:0c:7b:17:c6:
         07:f0:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----