Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
File:                     IkCgcYD88zY191fMFEng1dvU_bg.mft (raw, json)
Hash identifier:          T9LSEnLfxFeRbKSrOqryc5q72bK0EYdVxJ1t3CckWQo=
Subject key identifier:   4A:B0:21:C7:2E:4B:C9:5B:22:AC:4E:0F:B7:4C:68:7C:FA:23:B4:DE
Authority key identifier: 22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8
Certificate issuer:       /CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
Certificate serial:       01962FAB2024B20596BB8D2A448C375D53CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft
Manifest number:          D2
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: IkCgcYD88zY191fMFEng1dvU_bg.crl (hash: +3p0DCb9CisoEFjvnRHHNCaOOEAv72ef4SNBFIKvjyI=)
                          2: nvx0QRZQO1QzuvMN00Bva6hTGZw.roa (hash: Gw59i4bicuVuHEY8V6dHsuW9MPHvsYhnw1rq0LLdv8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:24:b2:05:96:bb:8d:2a:44:8c:37:5d:53:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2240a07180fcf33635f757cc1449e0d5dbd4fdb8
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=4ab021c72e4bc95b22ac4e0fb74c687cfa23b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:77:1d:e2:12:9b:6d:d8:81:ec:f9:c0:73:
                    51:d3:ed:64:1e:24:62:9d:f9:de:3f:f3:2b:6f:0c:
                    e3:90:8c:90:39:8a:98:f7:8b:66:d0:3c:8a:c3:ec:
                    68:6d:f4:16:5e:2d:18:f7:1b:46:19:b5:26:e6:1e:
                    9d:91:29:87:b0:cb:b2:d2:30:33:b6:d2:ab:54:89:
                    8f:fd:d2:3f:6e:4a:9c:97:64:b5:6f:d7:b7:b9:6d:
                    92:aa:41:50:b6:50:7e:4e:ae:55:b0:ae:8b:be:9f:
                    f9:d6:2a:ee:45:19:e6:d2:d4:a0:51:26:33:bc:a2:
                    60:9c:71:0e:80:bb:a4:eb:87:dd:91:98:3d:39:06:
                    df:a5:21:fa:e3:a0:78:41:c2:da:53:84:ab:b0:25:
                    0a:06:7e:e0:0e:da:3c:c4:c2:d8:b5:cb:15:41:b7:
                    fe:17:ba:fe:34:c8:13:d6:b1:a3:47:d7:78:ea:b5:
                    3b:36:a1:23:b2:83:9e:bc:f2:be:14:c0:fd:45:7e:
                    2d:39:88:f5:97:ad:0d:61:e5:c9:1b:55:f0:cf:f3:
                    32:2b:8a:74:65:6d:73:b7:09:eb:88:9d:be:c1:9c:
                    aa:be:af:11:f6:71:db:3a:a3:d9:44:0a:4a:1f:54:
                    6e:2e:d6:c4:25:34:a0:7a:f7:12:31:51:70:1f:14:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:21:C7:2E:4B:C9:5B:22:AC:4E:0F:B7:4C:68:7C:FA:23:B4:DE
            X509v3 Authority Key Identifier:
                keyid:22:40:A0:71:80:FC:F3:36:35:F7:57:CC:14:49:E0:D5:DB:D4:FD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkCgcYD88zY191fMFEng1dvU_bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a314cc-066e-4c09-a36a-d0bd0e803fd1/1/IkCgcYD88zY191fMFEng1dvU_bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:87:00:fd:d6:fb:4d:33:20:6d:be:d9:15:af:32:e9:af:18:
         26:31:98:4e:9c:77:7c:c3:6b:c1:63:e7:15:8e:5b:e7:3f:1a:
         28:b0:80:1a:62:47:85:e5:21:63:8c:d2:2e:eb:43:bd:a0:2a:
         01:51:0a:00:31:2c:b0:1d:06:04:63:d6:b5:54:45:79:87:63:
         91:c3:48:a9:1a:e2:d5:f8:a5:58:4f:03:eb:8d:e1:6e:36:79:
         be:2f:2e:68:2a:15:05:04:a1:b1:d1:75:2a:75:29:97:0e:b2:
         60:f6:4f:f7:ce:3d:a6:3e:ae:af:c7:a1:21:c3:e0:cb:df:5f:
         fd:f8:60:35:9b:1b:55:88:91:17:6e:6b:52:0c:ed:9a:db:1b:
         61:d5:57:24:de:06:f7:7a:89:22:86:77:56:d4:27:fb:03:66:
         6a:f7:0b:9d:13:5e:90:27:48:8b:e1:3e:aa:8b:68:a6:94:83:
         20:11:21:dc:62:ed:26:85:23:52:b2:8f:f1:04:35:4e:d1:09:
         18:c6:74:ea:a8:f3:5b:14:2c:d3:80:4f:28:1f:bb:05:94:81:
         7a:ee:22:48:8b:4a:15:e7:b1:a6:c9:4d:64:e2:37:c1:14:ea:
         d2:9e:95:be:47:4f:df:94:c9:f5:b5:0d:bd:46:a3:69:8a:8d:
         b7:ed:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----