Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
File:                     IKDFQA4CP5P1GOQwBMM7x50vayE.mft (raw, json)
Hash identifier:          qV9zd0eAFpHJ7f7e4iNv0Ji8xPOEM034USYvinlgW7I=
Subject key identifier:   33:B7:11:7B:8B:68:20:09:29:16:0B:87:F7:16:16:5A:68:62:2F:0F
Authority key identifier: 20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21
Certificate issuer:       /CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
Certificate serial:       01962F06945129A10223431B070D7972A833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: HbgX7OEx-8g9VTQvYvbD_e0bPJ4.roa (hash: W8tzfEVYuZk67nGO3GJK/wSiRVXk9GPJqQ4Zpo1nq8A=)
                          2: IKDFQA4CP5P1GOQwBMM7x50vayE.crl (hash: oavnprojBeVS+JX7Q9qsrz7HuTDyk3zY5QZ9rq5ZrZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:51:29:a1:02:23:43:1b:07:0d:79:72:a8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20a0c5400e023f93f518e43004c33bc79d2f6b21
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=33b7117b8b68200929160b87f716165a68622f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:cb:d3:e3:e1:6a:e6:2a:30:17:34:05:7b:
                    cf:28:f3:56:94:29:7c:d2:f4:47:95:45:ba:fb:79:
                    0b:01:f5:83:2f:5b:69:b8:97:07:ee:8f:09:4c:b6:
                    8d:a1:20:dc:7d:ef:9d:7f:4b:cb:d1:a5:cc:ee:d9:
                    19:90:30:d5:12:61:1a:36:8f:eb:06:bf:1c:b8:3c:
                    f2:52:b7:09:d6:a1:43:67:a1:ae:80:ce:ba:90:03:
                    83:ef:20:6b:7d:00:a4:a8:be:bd:bc:be:7b:f7:0c:
                    3e:d9:65:17:5b:51:c3:9e:d6:6c:64:87:39:55:ef:
                    d4:68:d9:71:6b:e6:04:f1:a4:39:89:2b:b6:c2:47:
                    43:61:bf:06:41:17:a8:8f:e3:93:b3:eb:2d:d8:94:
                    ec:ce:44:ae:91:dd:96:57:0c:f7:c6:dc:b3:77:5e:
                    ef:52:7b:e1:77:49:ef:f2:88:c5:8d:fb:e0:2d:ae:
                    98:77:c9:7c:9d:55:80:d0:d6:a5:2a:c0:88:a6:95:
                    d7:08:70:8e:cd:cb:91:9e:32:ba:3a:9b:91:4d:86:
                    1f:71:fc:a6:33:fa:19:0b:d3:b4:22:53:5f:78:bd:
                    2d:f9:d1:77:82:7e:2b:37:af:ae:0d:93:56:87:9a:
                    1c:6d:0c:27:b7:93:12:5a:81:c3:9d:68:71:ac:b3:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:11:7B:8B:68:20:09:29:16:0B:87:F7:16:16:5A:68:62:2F:0F
            X509v3 Authority Key Identifier:
                keyid:20:A0:C5:40:0E:02:3F:93:F5:18:E4:30:04:C3:3B:C7:9D:2F:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKDFQA4CP5P1GOQwBMM7x50vayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dfeb10-9524-41a5-bbd3-0769aa6271e6/1/IKDFQA4CP5P1GOQwBMM7x50vayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:03:a7:17:dc:5b:5a:a8:ec:40:71:af:c9:3e:96:71:8e:d3:
         d9:b7:0c:f6:cf:2f:fb:38:3e:5f:0e:cd:f4:0b:24:7a:f3:57:
         c0:cf:49:ba:df:ba:60:55:17:0b:f8:14:97:49:97:68:4b:0e:
         81:ef:69:72:7f:3c:6a:08:27:6d:25:cb:db:03:05:f0:a0:21:
         1f:e4:e6:1c:69:05:6a:d7:0e:d3:4b:63:9b:25:64:16:ff:54:
         1b:0a:65:b0:96:9b:76:74:da:d3:dc:b9:c2:a6:38:a5:54:b5:
         4b:dd:34:82:ae:01:da:30:c6:9a:a3:86:25:ef:22:f6:f5:49:
         ee:7e:32:c9:9e:1c:19:d3:36:81:5d:6e:fa:67:5b:61:52:08:
         81:fc:a8:c7:9a:a1:80:02:1b:75:ed:bf:ce:3a:1a:1b:0c:23:
         fd:22:5d:94:dc:da:39:04:b4:16:1f:ae:4c:ff:83:07:ee:b6:
         57:44:be:95:95:17:e0:2c:63:df:9c:40:81:49:e6:3d:14:3e:
         4a:29:5b:24:50:6f:0a:0f:47:5f:1a:1b:7a:01:29:73:19:88:
         97:eb:9b:70:6d:d4:9c:86:d5:2f:2c:0f:2a:aa:d6:94:1d:f7:
         d7:14:47:7a:77:48:e5:d2:44:8b:02:51:ab:8b:1b:cb:1d:cd:
         7f:19:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----