Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
File:                     Illqyngn2jIPE1xhMpnjWi4iJUM.mft (raw, json)
Hash identifier:          GCBDBbXTv5zZ++t8MF8whZI/igqHGmj38kylJkxE9hY=
Subject key identifier:   53:2C:DC:FE:60:81:A5:4A:0C:1D:4A:8E:DD:C1:1D:93:E5:60:23:D6
Authority key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Certificate issuer:       /CN=22596aca7827da320f135c613299e35a2e222543
Certificate serial:       01962F063E439D01C4DAFDF8668D25F8697C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
Manifest number:          08D3
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: Illqyngn2jIPE1xhMpnjWi4iJUM.crl (hash: BpzOWODoOZW2a0f0iRBEX8wumGvMRcL5xFilgbJaOxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:43:9d:01:c4:da:fd:f8:66:8d:25:f8:69:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22596aca7827da320f135c613299e35a2e222543
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=532cdcfe6081a54a0c1d4a8eddc11d93e56023d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:0b:47:97:f1:9a:1c:10:db:f4:94:76:34:
                    5a:9c:b0:b0:e8:df:37:63:8c:6f:b2:54:f8:0d:b2:
                    30:5b:ba:48:75:b7:77:75:86:8d:65:34:33:54:7a:
                    23:db:7f:cd:88:49:29:c8:29:30:72:1d:88:4f:a7:
                    7a:f4:55:14:ee:69:58:6f:24:ec:3b:32:70:e8:25:
                    54:2a:9b:88:34:e1:b9:91:27:fe:c2:a1:99:bb:11:
                    83:24:fc:d1:b0:e9:35:12:dd:e3:eb:c4:5c:95:e0:
                    c4:7c:83:6f:e6:6b:b0:7f:b3:cb:0a:f9:1c:30:b1:
                    00:33:0f:79:3a:11:2d:17:48:38:85:cf:10:3d:4a:
                    df:62:de:64:0d:91:9a:b9:f0:60:d1:da:ce:e4:16:
                    88:60:50:ba:41:68:71:19:c7:43:1c:21:a9:65:b2:
                    b8:83:3d:11:30:76:7b:90:5b:7e:67:38:fc:2a:92:
                    18:9f:91:e2:bc:ed:94:07:c9:e6:32:e2:83:cd:b8:
                    c8:bd:d3:2b:62:9e:12:cb:f2:18:a6:32:d7:0e:82:
                    3d:83:6c:93:1f:af:41:2d:28:fa:35:c5:80:39:86:
                    97:29:fe:4a:6c:ba:dc:47:df:cc:00:0b:07:ee:5b:
                    45:60:47:2b:65:4e:61:cc:34:82:10:77:1b:1c:b5:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:DC:FE:60:81:A5:4A:0C:1D:4A:8E:DD:C1:1D:93:E5:60:23:D6
            X509v3 Authority Key Identifier:
                keyid:22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:93:47:39:fe:2e:f7:31:e7:56:d1:0c:cf:86:ef:ae:fe:
         c7:4b:82:9f:8c:02:80:d7:74:18:76:db:87:58:d1:04:dd:78:
         a9:a9:d0:4a:77:91:b7:43:2d:a3:a6:68:63:98:59:05:72:bc:
         43:0b:99:1f:86:4e:a1:83:4a:26:db:4a:6f:e8:b8:31:d6:5c:
         a1:a5:c8:4c:03:d0:5c:e9:dc:11:7f:1f:5a:4b:f3:4a:10:0b:
         45:26:3d:8e:8a:73:79:56:c5:d6:85:db:24:7e:48:43:c2:64:
         32:f1:cb:38:75:cd:64:33:52:40:8c:97:5c:d5:91:f3:cf:58:
         56:88:c2:d7:2a:69:45:bb:b4:33:ea:a8:db:5c:37:53:cf:34:
         86:e3:c7:59:2a:2e:54:31:cc:25:89:fc:4e:9b:09:f6:a3:87:
         37:7f:cc:5c:ab:42:06:c9:dc:af:43:d8:f2:f6:3e:ec:10:8e:
         89:40:aa:07:69:ec:de:47:cd:e4:0a:f5:6f:45:8a:98:c8:4f:
         e9:e5:c7:87:48:37:4e:0e:cf:8b:61:8c:da:b9:57:4d:8b:43:
         00:62:48:21:f1:77:59:1a:39:32:81:fe:1d:9d:35:04:e5:ae:
         1e:8d:99:90:29:d9:25:9b:78:ba:08:d4:54:6e:d0:15:81:27:
         33:2e:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----