Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File:                     ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier:          Q50UvKUujVscFOXMgre3z1Nt07t8gHixjikQ5Hr+NRQ=
Subject key identifier:   EA:F6:F0:CC:14:EE:F6:14:39:3A:1C:AD:32:BD:17:F9:D1:FA:CC:30
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       01962E61FFFB7E9F1D745A637C8AEBA825BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number:          05BD
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
                          2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: BjSmgGpwkBarKdpJajqzFEIdChdz/NK2xKj52U6S5gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:fb:7e:9f:1d:74:5a:63:7c:8a:eb:a8:25:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=eaf6f0cc14eef614393a1cad32bd17f9d1facc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:cd:84:59:38:5b:55:73:a9:dd:a7:3e:5e:
                    88:29:d3:e5:c7:f7:32:a3:5a:3c:a0:43:54:9b:99:
                    99:5b:6d:26:8e:9c:28:ea:07:70:f8:bc:3f:43:bd:
                    00:07:70:d0:46:9b:71:c2:75:61:b6:87:46:e4:3c:
                    1c:76:ef:52:91:a8:86:2a:a3:c0:45:56:99:94:95:
                    0e:e0:7e:ea:1e:66:82:52:ee:5b:b7:dd:99:6b:81:
                    e7:65:2e:74:1c:32:9b:9a:4b:9e:a3:20:40:b6:36:
                    c9:0b:3f:c4:a9:82:7a:f4:27:dc:0e:c0:36:63:ef:
                    7a:93:79:27:a7:0d:58:7e:5d:ce:ae:a2:40:32:d6:
                    bf:c1:19:fc:34:63:3d:2e:1c:1c:c4:61:3c:f4:9a:
                    66:77:3b:c2:5c:73:04:85:2e:63:b2:ae:3f:0d:e9:
                    a8:63:fe:86:b6:5d:a3:12:36:40:a5:ca:7b:10:a2:
                    45:dd:b2:99:80:c0:9f:0b:02:29:a6:c8:57:5c:c1:
                    0c:2f:9a:b6:1c:4e:3f:b3:2d:69:9e:7b:f3:2b:ee:
                    b6:3b:49:c2:77:67:1b:d6:46:0a:e6:fd:8b:27:ca:
                    fc:1c:28:b1:18:25:1d:ee:89:66:cd:67:f6:26:dc:
                    55:27:0b:fd:89:36:6e:1c:b5:45:77:a2:7e:79:66:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:F0:CC:14:EE:F6:14:39:3A:1C:AD:32:BD:17:F9:D1:FA:CC:30
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:87:2a:04:fa:33:f8:68:51:0c:68:dd:d0:28:a5:2f:fa:
         a6:09:f5:73:af:4b:2c:39:43:07:53:5a:eb:93:ad:c2:79:41:
         db:2d:8f:e7:0e:e7:09:3f:82:5f:33:ab:8c:e3:a5:e7:10:6c:
         23:a6:31:0c:08:61:9e:65:b9:5d:78:2b:77:c3:92:7a:b4:4b:
         fd:f5:7c:d8:b6:b1:77:29:c1:47:f6:9c:89:90:18:3f:7b:a9:
         e7:b6:48:b0:4b:dd:42:08:6a:96:f0:35:04:04:36:5c:b7:0e:
         d0:98:d3:71:b6:17:81:a6:f3:f2:0f:48:5b:8d:f7:8e:a8:e9:
         fe:d5:dd:0f:80:a2:9a:be:dc:5d:1d:23:05:37:52:60:b3:9f:
         2c:3e:0e:94:7b:6a:af:e2:0e:d8:9f:26:84:3e:ce:48:fe:d7:
         fe:4a:c3:b0:8b:72:ce:91:7d:a1:08:c8:d4:41:b5:3d:96:77:
         46:82:2b:32:ff:09:d2:ea:04:71:87:1d:4c:b0:86:77:5b:39:
         8f:84:3f:d0:fc:cc:37:97:1e:ed:0c:84:5f:3e:30:2a:97:d1:
         98:bf:00:72:45:10:d9:13:80:43:b4:89:f4:44:a1:58:35:4b:
         29:d6:9b:55:63:e6:de:7b:c6:a7:df:61:dc:83:7b:13:a9:00:
         27:e9:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----