Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File:                     20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier:          HVQh7ujKqVATTLvE80swewbzHYK0PHsZQ/Doi/U7Pxw=
Subject key identifier:   F2:A4:DE:93:A8:F2:B8:96:5B:4F:6C:AD:0E:1C:10:D3:D3:27:D1:AD
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer:       /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial:       01962F3D9BF6A7AA5384C3F8F3C5509DF1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number:          10A0
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: gGUANzqjpdFqwI50xcYfJp3LRDYzbIVcy1QMZu2KJVA=)
                          2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:f6:a7:aa:53:84:c3:f8:f3:c5:50:9d:f1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=f2a4de93a8f2b8965b4f6cad0e1c10d3d327d1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ac:2f:9e:b5:26:45:06:92:e7:59:cd:48:e7:
                    60:49:f5:18:5c:00:a1:31:e4:a9:79:a8:4a:a6:6a:
                    17:e3:10:a5:67:9f:09:9e:78:c4:6b:b9:2d:c8:99:
                    12:49:a0:a4:94:c3:5b:e2:f0:a9:1b:da:7d:26:e4:
                    f1:a8:a3:a3:05:f3:56:6a:8c:97:fb:18:ac:c8:b8:
                    35:72:4f:cf:1b:a4:d1:ff:61:b7:cb:58:cf:bb:b1:
                    ba:47:e3:dc:a4:9c:14:31:f9:1a:56:42:51:55:52:
                    2c:e9:75:95:b4:7e:dd:3e:28:70:61:38:d5:ad:26:
                    ad:bd:2c:e9:c3:47:67:fd:2f:be:10:03:04:66:62:
                    23:5f:80:ee:11:a4:d6:8d:0b:b0:02:db:c4:82:46:
                    07:e5:5d:03:df:83:44:ba:d5:25:25:5c:c1:67:04:
                    52:0b:ab:d4:58:93:7f:1b:00:e6:10:d1:5b:de:d9:
                    9a:bc:c4:69:90:46:02:b4:18:48:5e:3b:b3:ef:4a:
                    bb:cc:32:7a:95:f0:ab:43:17:0f:86:a5:99:86:5a:
                    25:18:af:4b:ca:6f:15:75:e6:22:ea:60:88:fe:14:
                    0a:cf:1a:d1:ec:13:fe:05:eb:62:2b:05:f7:e8:db:
                    b1:76:73:46:29:82:21:ee:0c:21:fb:18:82:8f:b8:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A4:DE:93:A8:F2:B8:96:5B:4F:6C:AD:0E:1C:10:D3:D3:27:D1:AD
            X509v3 Authority Key Identifier:
                keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:b6:0b:b6:62:41:df:81:a0:09:33:b6:d5:48:00:9c:14:
         c4:49:90:e2:37:0b:35:67:a4:3a:7f:14:5d:cb:d9:6e:2b:67:
         f5:19:6b:36:7d:3a:8d:8d:44:9c:4f:aa:52:d2:4a:00:0c:b5:
         93:1d:c5:92:20:0d:07:6f:d5:b5:48:5a:bd:d5:72:8f:56:d6:
         a3:e8:a6:81:d0:e8:72:69:6b:5d:30:8e:cb:39:0e:ae:c4:98:
         ed:5e:13:92:96:68:a9:f4:f9:ae:dd:77:81:a4:6e:35:5a:61:
         9e:c5:01:81:ed:6e:83:a5:54:87:17:43:b2:79:01:53:c2:46:
         71:72:54:c2:a4:d4:9a:b5:fb:f8:40:33:c2:a1:35:db:08:a5:
         f3:cb:04:54:6e:8e:e7:ce:e3:81:7b:3e:c1:ae:bd:d9:33:c0:
         60:2a:e2:f4:0d:4a:d1:33:4d:26:3a:ed:eb:82:0b:68:49:cd:
         48:9e:b5:54:49:c8:9e:23:fe:34:82:de:13:d2:b6:85:3b:dc:
         c5:73:97:f2:3e:95:95:a3:af:a4:23:a9:42:a5:cf:cd:5b:1b:
         ae:1d:d9:e1:cd:a0:1a:e5:b0:f3:61:79:eb:08:04:92:41:ab:
         d9:a9:7e:a0:ee:9a:e7:0e:ee:4e:26:35:23:fb:77:bf:4c:3b:
         f1:c1:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----