Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File:                     ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier:          5ic4TSAELbcNm48DAWxQblT9bacKp7CmNTvDQOsaxaA=
Subject key identifier:   15:52:88:54:92:7D:49:50:3A:B9:6C:E4:1A:C1:6B:BE:97:B5:17:30
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer:       /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial:       01962F0721D773612059D86805894186B921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number:          0D58
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
                          2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: jmp1I7Hs5MLh3dpMK3O8elNxCFt5NpVWnpa5XYW4n9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:d7:73:61:20:59:d8:68:05:89:41:86:b9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=15528854927d49503ab96ce41ac16bbe97b51730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:3c:63:ed:26:a9:00:d5:4f:14:b0:c0:11:
                    68:35:8d:94:6d:5f:12:0d:2a:87:ba:13:ec:e6:27:
                    b1:9b:a2:ca:b1:d8:b3:bd:d7:39:a3:05:45:bf:04:
                    14:5e:dd:8c:b2:3e:23:83:35:37:f2:b2:bb:42:e8:
                    af:03:5a:1d:e3:14:16:b7:26:b9:1c:ff:8d:50:c2:
                    34:41:cf:62:3b:fb:6d:93:d8:fd:18:1b:b0:3a:a0:
                    52:9d:ae:35:a3:2d:e5:b1:7c:65:7b:39:eb:03:6d:
                    41:8a:43:d7:bb:89:df:5f:d0:dd:f4:f8:b6:9e:08:
                    b7:b1:9f:b1:a0:ee:80:13:32:f5:a1:3c:aa:13:3c:
                    69:aa:6f:fa:91:c1:ae:52:38:fb:e4:6c:a2:47:95:
                    3f:c2:1d:f4:69:54:d1:45:de:cc:fe:f6:ca:d4:f4:
                    4c:4b:ad:a2:14:f4:2a:fb:dc:25:1b:ca:d8:e0:41:
                    e4:93:28:40:ba:0a:32:44:4e:c2:8f:64:9e:a0:17:
                    0f:80:69:b7:1b:45:db:f3:81:fc:8c:e2:f5:0e:b7:
                    b3:b7:65:eb:39:1d:1d:74:9f:81:aa:c9:2e:20:73:
                    62:29:a7:40:63:6f:ff:a9:c5:d9:71:b2:d8:98:5c:
                    58:0b:d6:d0:eb:0c:41:77:a2:b6:06:7d:12:bc:2e:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:52:88:54:92:7D:49:50:3A:B9:6C:E4:1A:C1:6B:BE:97:B5:17:30
            X509v3 Authority Key Identifier:
                keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:53:c0:25:cc:5f:ea:ce:57:fe:b7:87:b0:dc:b4:41:94:d4:
         8d:54:c0:d9:8d:44:a4:3d:23:45:f3:a1:69:99:fc:ea:d4:ec:
         b3:66:26:2a:57:8d:cd:09:68:a7:d4:be:11:c8:1f:3d:64:aa:
         60:50:dc:e3:8d:39:9c:ae:c6:0b:7d:2c:17:9e:67:38:e3:f4:
         e7:96:d4:7d:c8:72:b9:db:bf:66:f2:71:5f:ce:50:d1:f5:00:
         f3:11:25:a4:3a:6a:7b:44:ba:11:eb:fa:86:71:8d:78:e6:ad:
         f6:97:94:92:04:e5:ae:4e:2c:82:16:a9:bd:eb:df:9b:3c:04:
         43:eb:e9:01:9f:4b:68:31:d8:10:48:54:bd:99:f1:42:48:c4:
         8b:36:58:68:8e:64:ed:2f:25:2a:c6:01:ad:5d:e1:f0:8a:ce:
         f0:bf:d8:5a:1c:5c:27:85:b9:58:6d:ee:d2:71:10:b0:c5:35:
         7b:a3:0d:a2:b7:5b:b2:f8:c2:ce:d3:ec:78:77:d4:da:c9:8e:
         3f:9b:77:ad:06:21:4f:e4:63:9c:b8:16:37:de:1f:50:ae:88:
         2b:89:48:44:61:17:2c:8c:13:95:cb:89:fd:8e:aa:d9:45:9c:
         0c:55:31:cd:c5:39:56:d2:e9:cf:c9:e0:f6:4a:81:7c:fc:a0:
         a7:3c:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----