Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File:                     ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier:          ShE4H1TuDHIpaxVg8n+jHZaKhUMB06/9iIo3nZL0n7Y=
Subject key identifier:   46:C7:64:B0:39:52:6D:0D:A4:E9:71:49:15:B8:64:AC:70:17:F4:2B
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer:       /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial:       01962F749120FAC2972855C46FC35BBC83E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
                          2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
                          3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: GTFLLVbZ73E5Iz1/SRr6mjXTv6MUwcX3KHuEq6/a/Mk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:91:20:fa:c2:97:28:55:c4:6f:c3:5b:bc:83:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=46c764b039526d0da4e9714915b864ac7017f42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d0:10:ee:04:fc:93:78:0c:a5:5c:d6:37:73:
                    7c:9c:af:ea:b5:be:4e:6b:f8:f2:dc:3f:95:9f:54:
                    22:1f:c5:75:00:f5:00:87:f6:26:bf:36:08:25:8b:
                    b2:39:96:a1:00:00:a7:75:c2:e1:4d:52:02:6c:9b:
                    5a:f4:5c:4b:4e:02:38:21:72:a9:c6:fd:54:17:94:
                    f1:05:65:51:be:48:cf:8f:68:15:26:66:6e:1f:12:
                    47:14:6a:ab:ac:6f:f9:55:e6:2e:bd:e0:9a:80:47:
                    ea:3b:fb:3a:30:82:71:f7:3a:ef:62:2b:0f:c4:6c:
                    48:85:52:c7:d4:b0:13:20:d3:90:9b:82:94:18:ee:
                    b4:1b:d4:c0:b0:af:87:ae:38:2a:50:d6:44:50:8b:
                    da:25:ea:1f:12:0d:67:92:28:b2:ef:fa:43:57:df:
                    87:d9:95:86:0f:b7:ab:de:03:1e:2d:6f:ca:05:d7:
                    5a:a3:6d:0a:d0:b7:17:10:9a:ae:71:3f:d6:02:3c:
                    59:f4:c3:6b:06:90:f9:cc:7e:ef:2e:8a:f2:15:c6:
                    d3:cb:55:06:15:83:66:ae:06:40:96:11:a8:60:ff:
                    e8:31:29:ae:ce:29:2d:81:04:61:19:7f:47:1b:4d:
                    62:0b:51:2e:dc:f4:77:67:07:4f:1b:78:65:31:2c:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C7:64:B0:39:52:6D:0D:A4:E9:71:49:15:B8:64:AC:70:17:F4:2B
            X509v3 Authority Key Identifier:
                keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:65:6f:12:20:2e:c7:25:51:e0:3f:57:be:b3:14:37:01:
         92:a9:59:7f:9b:58:c5:d3:9b:24:47:8d:1e:f9:41:c5:77:9e:
         74:c1:df:54:a6:2d:8d:06:87:b3:5c:d3:58:d6:cf:aa:9b:8b:
         30:92:0f:61:68:d7:5f:a5:74:5d:9d:ff:34:ed:68:c9:9d:c1:
         3d:3c:47:9a:bb:f4:de:d6:4c:ec:bf:b4:44:d2:0e:97:4e:9b:
         ea:88:1e:cf:a5:44:fa:7c:1f:15:dc:84:d9:39:e9:19:47:8e:
         85:22:21:4e:15:3c:66:10:1a:c3:cb:44:a3:e6:18:64:5b:e1:
         40:23:39:d0:d5:df:e6:03:3b:10:e6:d9:b0:6f:74:e3:6f:1c:
         84:34:e7:61:57:fc:08:07:67:6a:d5:13:48:3f:b1:d8:9a:84:
         61:ef:dc:4e:04:ef:8d:5b:fe:1a:e0:eb:fa:d0:a0:95:a5:ee:
         90:bc:70:f7:75:d5:58:10:2b:28:30:d7:db:54:84:9f:fb:a9:
         41:26:8a:5d:59:f7:1b:a5:b8:83:7d:7b:67:27:9e:d0:1e:57:
         dd:54:ec:9e:c0:05:28:25:ba:9d:80:67:0d:e4:29:4e:b1:96:
         08:6b:6f:b1:7e:d5:3f:ac:3b:9e:db:6e:e8:ce:d3:3f:4a:52:
         38:7a:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----