Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File:                     IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier:          l+68XUdTatAijy8S7iRtAEuurbs9EGoVHyfXWAg6T2M=
Subject key identifier:   74:60:5C:D4:D8:4E:6A:8D:37:57:63:9F:4E:B6:0F:9D:B7:38:19:3F
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer:       /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial:       01962E995C340CDE9E6C53EAA2461DB5833A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number:          0E1A
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: o7S3o91ao1Sr/3CkBdwNEpdX29EJcc3R/JYa7GrDzWU=)
                          2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:34:0c:de:9e:6c:53:ea:a2:46:1d:b5:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=74605cd4d84e6a8d3757639f4eb60f9db738193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:c7:00:16:8a:30:f1:ed:26:f3:98:9b:7f:
                    dd:97:78:f3:8d:e7:94:9d:40:56:73:e1:d7:80:ee:
                    d9:88:b1:10:fe:53:a2:1a:e6:06:55:e5:27:ee:09:
                    22:78:8f:9f:9f:72:8f:90:02:c4:4d:3b:bb:4b:12:
                    41:a9:c6:46:3b:38:36:43:97:5f:89:08:d8:ed:fa:
                    35:4d:1e:2e:ce:0a:1d:6d:94:1c:8a:fc:04:7e:34:
                    fe:af:4d:44:b4:a7:19:1c:3f:64:1b:cf:10:36:9f:
                    d2:62:5e:32:8b:5a:0a:2b:91:37:3b:f9:8e:b0:76:
                    55:2f:ff:b1:af:8d:20:c9:2c:17:f5:65:88:2b:5d:
                    95:45:1c:32:48:18:c5:12:1f:bc:40:be:8c:1d:ca:
                    79:e0:ab:4b:ba:7d:35:09:b0:34:27:ff:3a:bd:49:
                    45:4c:0d:91:bc:68:4e:be:24:a0:14:48:2f:7a:e9:
                    5f:7b:5c:c1:7f:2f:0f:74:36:85:58:d9:9d:8b:34:
                    1a:e5:75:93:ff:36:e1:e7:8c:52:34:8c:99:f0:84:
                    4f:c8:1c:ff:34:fe:e2:05:0f:f3:00:91:14:03:41:
                    b9:db:7e:93:e1:b1:65:00:14:6c:d5:82:0c:09:61:
                    3f:87:2d:8b:8e:38:49:63:31:00:e0:9c:44:a7:f2:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:60:5C:D4:D8:4E:6A:8D:37:57:63:9F:4E:B6:0F:9D:B7:38:19:3F
            X509v3 Authority Key Identifier:
                keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:2f:40:ae:d7:f2:bd:5a:c6:42:3d:f3:77:e5:cc:e5:e1:
         31:5f:c7:67:9a:0e:ca:c3:e6:fb:4d:50:e9:65:68:93:25:e8:
         af:33:a3:7e:5e:1f:19:c8:8e:21:53:95:b6:5a:3e:9b:b5:d8:
         70:49:00:2c:37:f0:49:cf:af:f1:f1:19:fc:82:e0:5e:cd:da:
         af:1b:a5:ab:94:9e:c9:09:e7:75:c8:9e:43:62:73:d8:d7:bd:
         ba:fa:07:be:39:c0:1f:58:d3:5c:66:1d:65:35:eb:32:c6:15:
         b9:95:a7:d1:0c:a8:e4:a5:f6:8a:b7:5d:7f:13:d4:99:a3:d4:
         3a:34:54:0c:a1:1a:e4:59:4a:8e:0f:9c:b9:fb:0a:c2:bb:ea:
         8a:6a:37:53:fe:86:6b:94:6e:f5:1a:3d:0e:83:c7:71:5c:64:
         e8:9b:36:ae:57:fb:f9:ac:58:4e:6d:ed:e2:52:eb:6c:cb:8b:
         60:d2:b5:3e:9a:d0:e7:f2:ca:64:00:75:11:b9:45:a7:58:ba:
         77:b4:00:67:c2:b8:66:27:42:cd:d6:ed:c5:af:a6:da:10:12:
         c0:fb:0d:16:35:a0:cf:ca:40:36:3c:24:d7:60:f7:4a:e2:7f:
         54:6f:de:46:ca:fb:29:a0:49:1c:f8:e2:8d:6e:b2:88:b5:e9:
         67:d3:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----