Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File:                     Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier:          Hkk2vRA4DVL1j9mOcf1wfagzltRmVvFnaOzcJsSUsVQ=
Subject key identifier:   2D:C0:80:80:DC:73:D3:9D:56:29:53:02:C6:17:25:F2:E5:DF:5B:37
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer:       /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial:       01962E61B82F7F12CD6FB40A69A968C3F0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number:          0525
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
                          2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: QuVhFhFqGyvFEKV4ZXSsuwY4mPyA7hO7BCYL4UncSKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:2f:7f:12:cd:6f:b4:0a:69:a9:68:c3:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=2dc08080dc73d39d56295302c61725f2e5df5b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:f6:e7:b0:b1:d1:03:c0:72:3c:db:06:28:
                    90:b8:d3:ae:c3:c4:ea:91:ca:f6:af:6f:bc:d6:35:
                    f5:2a:bf:54:d9:4f:5b:f7:b5:cc:db:3f:08:16:73:
                    7b:2f:98:3a:5f:a3:12:e3:ca:4c:be:ce:4c:5f:e6:
                    26:a7:b8:32:10:40:00:a8:ee:b4:f8:97:51:8e:85:
                    bc:47:74:2c:3b:f1:a9:ff:b2:62:44:16:16:13:04:
                    15:8a:72:24:ae:3c:90:ab:fc:44:52:f6:2e:b4:bc:
                    a9:0b:b1:0e:05:94:dc:17:28:2b:2a:f2:d1:4f:73:
                    05:d3:01:aa:2b:3f:b1:b0:1c:1a:d8:b1:75:18:30:
                    d8:4e:05:cd:c1:64:51:eb:e0:aa:36:ab:57:b7:30:
                    fc:5c:93:c4:fe:15:ca:52:a2:56:2d:f2:b5:2f:a1:
                    e6:bc:4f:f2:04:60:03:5c:fb:df:6a:54:2e:8b:8c:
                    bc:95:7d:65:14:9b:23:71:4e:e8:58:d5:41:03:7c:
                    4b:68:1e:56:ab:ba:d2:4d:75:08:30:4f:a4:29:0e:
                    4f:6e:6f:98:51:75:fd:bc:4d:e7:85:a4:dc:11:f9:
                    d2:10:4c:1f:ea:81:8b:3c:3f:6b:77:ed:3d:97:23:
                    af:d7:8d:0e:a4:23:46:5f:4a:0d:b6:c6:47:80:d4:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C0:80:80:DC:73:D3:9D:56:29:53:02:C6:17:25:F2:E5:DF:5B:37
            X509v3 Authority Key Identifier:
                keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:bf:a9:fb:16:d6:56:e1:c9:6c:e5:5e:38:07:7c:5f:07:61:
         87:c1:e3:5e:81:20:1b:f7:92:41:c3:27:8a:7f:b0:e3:d6:ad:
         4c:97:07:02:90:d4:a0:e4:cf:11:53:9e:8f:7d:bb:68:d5:45:
         47:f6:34:fb:b7:b3:73:fb:14:02:46:c3:b3:d4:30:c5:f7:8d:
         e8:c2:a8:76:b9:5f:28:f1:b5:44:f9:69:30:45:e7:1f:5a:1e:
         3e:96:51:06:1b:5f:8f:19:97:10:cf:34:97:a8:7d:c7:25:50:
         53:b9:b0:ef:ad:c4:c5:1e:8b:b0:3b:c7:f6:d0:17:ca:e8:fb:
         83:c3:e1:48:42:c9:7d:c4:d1:fe:7c:08:f3:f3:d2:3c:87:5e:
         57:fa:74:10:fa:bc:c2:7f:0c:23:17:b7:31:97:0a:b1:bb:70:
         a6:17:36:c2:48:6e:7a:18:ad:4b:fc:bf:87:81:8e:96:ca:29:
         4d:a5:b3:9d:76:d1:cc:bd:09:08:d2:47:34:75:c1:dc:a6:35:
         41:7e:16:dd:5f:a8:f5:40:25:e8:e5:1c:4e:c1:44:71:31:85:
         7a:e9:d4:af:9f:2e:5f:9e:64:32:b3:ab:e1:5e:7c:43:26:e5:
         12:02:5b:7a:ce:82:91:87:0e:bf:5e:c7:67:f2:ee:25:7d:d2:
         d6:6c:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----