Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File:                     1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier:          zR9UIX1cdOh3JdP0j+5+QBl6QTxCLuETFK6k6yUhQ6Y=
Subject key identifier:   3E:20:09:5B:D5:E4:47:63:B2:38:E4:5B:41:57:1D:2A:40:E8:2E:82
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer:       /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial:       01962ECFDA006C623400FEF9628E67EE6FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: SZUatRSSaE+gG7GLUnWxdsoyUR8gLuCdX6QPhDPyg+I=)
                          2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:00:6c:62:34:00:fe:f9:62:8e:67:ee:6f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=3e20095bd5e44763b238e45b41571d2a40e82e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:b2:15:c8:c9:07:4a:f6:38:a3:a3:ea:ea:
                    82:04:da:c0:f5:8a:b9:d0:de:b4:4d:2f:e7:74:25:
                    6b:d4:75:ae:7c:9f:4d:bb:b0:b2:53:43:cb:fa:b5:
                    3b:a8:84:41:ff:0a:58:1c:e4:73:00:04:1b:ea:0c:
                    61:15:dd:78:c6:65:a2:ae:75:1b:93:0f:a6:74:d6:
                    30:69:48:ea:27:ba:2d:98:da:66:fb:08:7b:ea:ff:
                    99:95:bb:62:63:46:28:01:ab:4c:97:40:1c:c7:7d:
                    5b:74:c2:13:41:77:9b:3d:36:73:74:f7:38:cc:0f:
                    d0:f7:c0:36:4f:6d:43:82:b4:1f:54:6e:57:cb:c4:
                    64:4d:f8:e0:2a:55:60:ae:28:08:8e:78:6b:8c:ff:
                    71:8e:f3:0e:27:cd:61:e2:ce:93:da:0e:19:ba:ae:
                    84:b4:ab:a6:bc:44:6b:e1:b1:22:1d:45:dd:c9:a3:
                    3d:51:75:4f:86:9e:79:b5:bd:b4:2a:04:ae:1b:be:
                    d7:a8:f1:b4:1b:6d:ff:41:56:79:ca:dc:6d:67:27:
                    48:41:48:0d:84:e4:7d:cc:31:32:dd:0a:79:d9:82:
                    2e:a8:63:ff:d4:e1:bb:73:27:37:56:23:82:6d:26:
                    c4:46:c7:ac:9f:84:a1:4b:12:7d:2b:ab:27:f6:45:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:20:09:5B:D5:E4:47:63:B2:38:E4:5B:41:57:1D:2A:40:E8:2E:82
            X509v3 Authority Key Identifier:
                keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:56:fb:40:e5:3f:b4:d3:e6:1a:13:24:0e:d2:2b:93:8a:04:
         96:07:fc:75:fa:26:f8:68:4b:8d:80:16:b3:0c:72:a5:af:36:
         92:16:8d:09:3f:0c:47:b9:b5:21:50:b1:c0:ea:0c:90:11:d7:
         55:4f:23:65:54:a0:4f:9c:6a:cd:15:e1:cf:55:a9:71:e3:f9:
         72:dd:9a:4d:6a:c5:8f:20:72:03:d4:fa:85:5d:7d:77:79:11:
         31:6f:aa:bf:5b:62:2b:9b:92:7d:1d:50:8f:c2:94:63:8b:89:
         20:5a:9e:2a:c9:90:5a:98:38:3f:d3:e9:27:39:d5:b2:50:5c:
         7d:14:bc:1f:a8:4b:23:8d:0b:2b:c0:1e:4d:a8:fd:3c:56:b7:
         ee:ad:a1:11:9a:7a:c3:a5:5b:a5:05:ba:e5:cc:36:23:8a:45:
         90:42:98:58:90:46:c5:63:0c:05:53:29:66:4a:22:f4:25:0b:
         fd:91:ef:29:76:58:7b:81:44:3f:82:c9:2c:08:fa:16:a9:ad:
         ab:ee:8c:51:70:6e:1f:08:36:ca:5b:50:88:c6:94:42:58:a4:
         de:95:32:c6:7d:a2:b4:3d:da:a5:7d:4c:c5:2b:3d:5d:81:88:
         b6:ed:ab:23:53:95:5e:0c:ec:0c:e0:b5:1c:bd:f2:38:b8:e5:
         05:1f:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----