Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File:                     IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier:          6/P3a+ig/LTByVozxczt6opEZ3NZTYlIHAMikgSEn/s=
Subject key identifier:   96:F4:BC:9C:02:BF:01:C7:B0:ED:AF:0C:32:5B:31:F3:EA:7F:02:FB
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer:       /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial:       01962ECF73F867FB564445D2ACA5356420DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
                          2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: oqFPSxFPbEgn57guqFcmd8J86zVKLNHlkLACS+FZmcM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:f8:67:fb:56:44:45:d2:ac:a5:35:64:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=96f4bc9c02bf01c7b0edaf0c325b31f3ea7f02fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:df:8e:85:24:e4:2a:87:73:44:ce:77:3f:
                    77:d8:d4:2c:41:2b:1b:a2:57:49:3d:4e:61:87:fa:
                    14:45:a5:6f:2e:1a:7f:c0:c4:af:ce:d6:42:0c:40:
                    2c:e2:a1:b1:6b:51:ab:27:6b:6b:07:d8:d4:f9:0a:
                    5d:77:20:0f:40:7a:36:d8:a2:5a:9e:9e:06:23:06:
                    4b:3c:2f:97:2d:d4:0d:fd:a6:f1:79:15:ad:9b:83:
                    45:77:e4:92:5e:39:bc:c8:28:42:e2:c8:21:38:72:
                    9a:d0:ca:0c:f0:c5:f8:83:c1:4f:8a:09:8a:43:dc:
                    e0:ad:35:b0:f0:7f:bb:59:27:19:9b:dc:6a:ea:34:
                    b7:a8:90:5e:44:e8:e7:15:09:52:59:cf:f5:f1:72:
                    29:ad:c8:cd:e0:47:02:53:70:74:50:42:f5:11:06:
                    ee:4b:d2:e9:d6:24:07:18:e8:c1:2f:07:e3:f1:62:
                    79:79:d2:1e:3d:1f:66:ef:30:2a:e3:d4:1b:1a:c7:
                    da:26:33:ff:bb:44:dd:10:6a:2b:3c:bf:65:21:9d:
                    81:fe:e6:21:0d:e6:b5:40:66:1a:6a:dd:d3:09:3f:
                    d4:f5:8c:9b:b0:b9:db:39:87:5a:4c:b3:57:26:3d:
                    7b:3c:eb:d1:18:09:fc:c2:3b:e4:dc:63:8b:da:78:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F4:BC:9C:02:BF:01:C7:B0:ED:AF:0C:32:5B:31:F3:EA:7F:02:FB
            X509v3 Authority Key Identifier:
                keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:14:62:e4:32:44:65:10:52:36:57:22:01:54:74:d2:3d:
         a9:3c:4a:65:ab:d4:3d:dd:35:4f:b9:73:0e:6c:a8:01:1b:e2:
         2d:c3:8c:f5:a6:d6:ee:73:25:ab:4a:25:ec:7b:e3:75:c6:70:
         a3:92:b1:ed:da:d0:69:44:2d:fa:cc:cc:b4:65:09:2c:4a:53:
         eb:6d:21:38:e4:a2:61:0f:fd:32:e7:3a:a1:50:a8:3e:98:07:
         58:8f:98:36:e4:ef:ad:bc:86:fa:bf:0b:bc:4c:65:6e:04:33:
         31:bb:b2:4a:2b:1a:4f:f0:e4:f4:a6:56:3c:65:64:ce:a0:f1:
         1f:2f:8f:5e:00:3b:81:73:a4:e2:00:3e:80:cd:74:90:41:7f:
         5c:80:e3:31:fd:3d:1c:af:9a:00:5a:51:3f:09:b5:bf:5c:e6:
         e6:28:46:e3:fb:f1:9c:dd:39:bb:84:8b:c0:47:99:42:ef:66:
         2c:2e:38:de:cc:1d:e8:55:f9:c5:0c:a9:16:28:8d:83:3c:f3:
         65:a9:51:ce:f6:39:cd:7a:9e:40:e4:61:87:c4:f4:cb:73:d4:
         9b:f5:8f:72:ef:fc:41:d0:0d:16:e6:d9:12:25:20:11:40:ce:
         ce:4e:04:81:1c:c8:98:71:96:5a:b4:82:e8:68:0d:99:fa:00:
         f2:5d:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----