Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File:                     IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier:          oAfTSKxEGSwuoW9KeLl8oox0gJenED7KRj/bKQtPfVY=
Subject key identifier:   AC:68:8E:B6:74:86:B6:10:B5:B4:EA:1C:7F:0A:3D:0A:FF:E5:34:D7
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       01962E6180E5089F8B7AC1FC0675EB6F990A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number:          089F
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 71dBKZAR3KEq556siGRKEIYCmxOSXSNtrPkCVoeFp1o=)
                          2: U9FgNuO_WVlbI20UhIUyI7NG_LE.roa (hash: BGOqRAx/QBvRa7zIMAAuvcSBrTI6cGoaM4mGtdpxDLU=)
                          3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
                          4: XIWD4tmKPBUNLGHuM83XfdqSQLo.roa (hash: 1D5W9f26KTQarHJTs0xIKCgYO2HEyTRn2m31rQHLa2g=)
                          5: dUOQVFKkqXcofaQY7c6c16-DmdA.roa (hash: KWspMWEnDlPl4b4PCtdlEsvsuj9RREZsSwrJoJ7d9Fw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:e5:08:9f:8b:7a:c1:fc:06:75:eb:6f:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=ac688eb67486b610b5b4ea1c7f0a3d0affe534d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:a1:8f:9d:7a:dc:26:23:29:c0:bc:e6:9b:
                    9e:55:c4:ff:91:e6:74:20:11:e8:70:61:a5:d8:03:
                    ba:c0:43:f7:14:a8:c8:10:da:5b:7b:7e:b9:f2:32:
                    94:ba:5d:43:70:5f:f7:d9:c5:95:fc:af:9c:c0:f6:
                    c5:ef:08:73:b7:19:0b:8a:88:76:38:c0:be:54:ec:
                    36:05:c0:48:2a:39:22:6f:53:a5:ab:8f:9e:0d:75:
                    94:7a:49:b3:29:67:69:f1:7e:4c:61:e1:9f:b8:bf:
                    55:b2:e2:9c:a9:f3:66:00:26:a1:8d:2e:86:23:ba:
                    34:63:75:6d:60:33:02:67:09:f6:26:a7:1f:6b:be:
                    66:9f:bc:88:00:30:2d:73:11:e6:1d:36:0a:83:c7:
                    db:6a:64:85:65:23:ae:9b:b7:0d:9c:55:59:5d:fb:
                    85:76:43:31:5b:51:e9:78:1b:39:aa:de:ee:4a:b8:
                    96:00:f4:41:ac:73:5c:81:18:26:27:61:05:d5:fa:
                    a2:57:59:4f:cc:71:a1:c5:2a:08:4c:38:07:48:79:
                    c2:7e:43:75:4d:4a:b7:40:23:9e:ea:16:3a:62:0d:
                    f5:be:76:ab:6a:13:73:87:a9:fb:fd:05:12:4c:0c:
                    da:06:9a:49:33:13:90:53:df:d5:f1:08:fe:81:a2:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:8E:B6:74:86:B6:10:B5:B4:EA:1C:7F:0A:3D:0A:FF:E5:34:D7
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:4e:3d:1a:e8:1d:24:d2:f7:13:c6:3f:01:c3:f1:8e:3b:
         19:f8:fd:86:3a:21:8d:ad:d7:3f:69:a0:c0:5a:3e:6d:c3:da:
         38:39:70:f0:cd:25:53:3f:bc:da:ad:5e:de:c9:05:d8:4c:64:
         f4:9d:da:a8:eb:2b:77:46:78:a0:77:27:bb:99:1d:2e:4b:c5:
         46:7d:f7:16:c8:15:9a:54:b5:0f:72:62:e4:d6:15:41:f7:6b:
         60:08:c4:82:31:8f:4a:63:98:bb:bc:fc:9a:35:90:a2:a0:d8:
         e3:67:38:7f:b2:16:0e:d1:41:e4:d7:b4:9a:30:3a:b8:e4:c1:
         7e:45:03:67:cc:0d:23:a5:0c:4a:6a:04:39:38:12:5b:4c:29:
         59:47:db:cb:79:75:bb:52:01:0e:be:67:c5:9e:d8:96:f4:cb:
         40:b9:d8:d4:88:2b:79:07:0a:32:4b:00:e0:5f:d3:ac:52:5f:
         33:49:a5:dd:26:c0:dd:a6:15:8e:cd:a0:cc:bf:0f:9b:f4:e8:
         88:a9:06:17:67:77:35:ad:4f:71:c0:82:6c:15:6d:f4:ef:13:
         e9:af:b6:02:8f:d2:45:6c:a6:28:cc:24:d5:e0:fa:22:f9:e4:
         37:8d:62:10:2c:4f:9b:86:ee:55:f7:7c:d2:82:84:e5:58:a2:
         7d:6b:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----