Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File:                     IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier:          Plbnmaz8GRJPlBpNAskHGAEUZUNtBZvaXJVRjgOAb7Q=
Subject key identifier:   43:E8:CC:D4:64:72:A5:56:DF:B8:A6:E8:F0:89:B6:FF:29:89:40:A5
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer:       /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial:       01962E2B05C8D19C3DCC1EC234947D239FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: LswiVOt8JGy3g2e2pRI/Ixmf6obz+2GdyWVM3PkYqZI=)
                          2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:05:c8:d1:9c:3d:cc:1e:c2:34:94:7d:23:9f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=43e8ccd46472a556dfb8a6e8f089b6ff298940a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:42:4b:c3:57:6f:f4:1e:71:d6:85:dc:65:
                    35:e6:5f:5e:c0:d9:8a:51:47:ca:5d:58:57:79:77:
                    74:9a:02:e5:c1:e0:a1:ff:1d:e5:25:5b:bf:3e:e1:
                    d1:4a:49:3f:b9:d8:92:7d:48:a3:e1:d4:47:71:c7:
                    d8:c0:a7:70:87:b0:8e:8d:1a:88:30:be:88:75:2f:
                    c0:93:7c:9b:f5:ac:64:fb:17:bc:93:24:f3:0d:7f:
                    bb:9e:6f:9a:ca:06:5a:bd:d6:ac:5b:60:f7:32:38:
                    c9:57:78:a4:42:04:78:b0:d0:32:8d:d8:43:b6:d8:
                    80:21:ed:21:89:1b:3e:0b:b6:4a:f4:34:73:f8:02:
                    f5:bb:cd:3c:e5:c9:bb:0e:3f:55:ed:5e:0b:47:3d:
                    c5:41:63:bf:3b:3c:52:38:e3:a5:5f:fb:2d:d4:d1:
                    88:31:f3:c7:b5:50:d3:57:7e:29:a8:8d:38:6d:13:
                    30:5d:f1:27:13:ac:92:05:e2:56:79:d1:16:3b:34:
                    f3:44:09:52:ba:32:b4:30:4a:e4:9a:33:62:20:b4:
                    41:5d:bb:6d:eb:e1:39:df:7e:8a:b6:e6:83:b2:9b:
                    62:10:98:3d:2a:59:2b:f3:42:f3:7c:11:ec:69:f5:
                    78:ef:b0:02:4d:75:5b:79:0d:f7:c3:ba:80:fd:f5:
                    49:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:CC:D4:64:72:A5:56:DF:B8:A6:E8:F0:89:B6:FF:29:89:40:A5
            X509v3 Authority Key Identifier:
                keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:02:cf:e6:09:e7:e9:b7:fc:59:95:b1:3a:2b:5e:32:05:
         67:36:b4:45:c1:1e:46:1c:16:65:08:8b:8d:2d:e0:6d:a4:57:
         73:94:53:f4:f2:83:6d:87:5e:6c:e4:eb:da:47:7d:46:a0:4e:
         e5:19:4b:ac:24:cf:0c:e6:5a:6a:50:51:11:49:e1:c2:97:3b:
         9a:bd:9e:5d:f9:64:72:45:82:9e:72:1b:38:a4:4f:7b:44:09:
         8c:41:21:81:2f:3b:aa:d9:f5:8f:11:7f:0d:48:a6:14:2c:05:
         16:16:dd:7f:be:d3:b9:26:65:b5:89:34:5d:55:b4:7f:42:8a:
         6b:8f:24:14:96:f6:3f:33:fc:4e:3f:76:47:99:65:de:ce:2c:
         bd:ed:8b:60:6e:70:17:95:58:e2:d8:b2:14:05:bf:04:d5:07:
         72:7a:62:0c:6f:88:2d:43:dc:e1:9a:1e:96:c5:08:2f:8e:ff:
         e7:0a:82:c1:d9:49:88:93:75:3f:bb:c0:2a:65:7f:65:60:0a:
         8d:e4:3a:43:21:3f:24:54:0b:9a:5c:95:dd:ee:4a:40:f1:5d:
         9e:1b:50:76:d2:5c:8c:11:23:b0:8f:f1:6c:26:7d:bd:c9:fc:
         97:c0:3e:be:c9:6d:42:74:f7:71:d3:da:5d:bf:fb:c1:1c:61:
         89:19:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----