Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft
File:                     InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft (raw, json)
Hash identifier:          KxX+P/CrISr3swdIh1bhJ2kefqGrZzIVUfKWn35LyTE=
Subject key identifier:   FA:F9:B2:1E:12:BE:32:CC:25:4F:F3:0A:BA:19:E9:36:49:AE:83:BF
Authority key identifier: 22:71:A2:F8:0A:DD:7A:25:83:53:51:1A:E6:71:85:A8:47:58:0B:9A
Certificate issuer:       /CN=2271a2f80add7a258353511ae67185a847580b9a
Certificate serial:       01962E98764ED11909141D62E9BCA5083466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/InGi-ArdeiWDU1Ea5nGFqEdYC5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: InGi-ArdeiWDU1Ea5nGFqEdYC5o.crl (hash: VnJe1ycP7Kb7LlhAtcV9xxfBu/34nu2IXSomkQcB9Os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:4e:d1:19:09:14:1d:62:e9:bc:a5:08:34:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2271a2f80add7a258353511ae67185a847580b9a
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=faf9b21e12be32cc254ff30aba19e93649ae83bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:8b:20:75:41:55:13:f0:85:88:57:ac:c3:
                    ee:c1:29:7c:44:15:bc:94:8a:df:82:1d:2a:c1:a6:
                    74:75:93:7d:bf:3a:1e:c0:20:0d:00:da:36:84:66:
                    0e:32:5e:3a:e5:fa:ca:ac:f1:1c:f0:13:52:65:81:
                    d5:60:af:2f:80:c1:ff:b2:6f:3b:7b:21:bd:16:22:
                    8c:32:07:a5:a6:db:80:89:c0:6c:9f:4e:ce:d1:de:
                    27:fc:b7:de:73:b4:99:de:42:96:ac:5c:a8:89:92:
                    f4:d9:a1:28:5e:af:e1:16:70:54:db:60:92:7a:bc:
                    0c:30:ad:8b:23:51:d2:8e:e9:a5:4d:30:68:9f:ea:
                    22:98:b4:f9:83:0b:24:93:cc:bd:6c:55:b3:5b:1a:
                    7e:dc:dd:d5:a7:ee:f2:24:7c:09:e8:58:7a:be:67:
                    18:8f:2d:c0:44:a8:89:4e:23:ba:16:05:94:38:44:
                    31:87:b9:82:d0:2d:c9:b7:be:fd:9b:23:76:13:0b:
                    53:8f:99:a0:a5:03:01:ed:9a:d9:16:c3:5e:26:7a:
                    18:8d:80:f8:56:47:2f:7b:c0:1d:6d:11:19:c4:0c:
                    13:ad:bd:a3:4c:ec:4e:e7:45:fa:a2:77:73:7a:f0:
                    12:cc:1b:06:99:d7:ff:a7:07:fd:4d:bf:f9:7d:db:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F9:B2:1E:12:BE:32:CC:25:4F:F3:0A:BA:19:E9:36:49:AE:83:BF
            X509v3 Authority Key Identifier:
                keyid:22:71:A2:F8:0A:DD:7A:25:83:53:51:1A:E6:71:85:A8:47:58:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InGi-ArdeiWDU1Ea5nGFqEdYC5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/925710-f94f-43af-92a0-96603f3eedb5/1/InGi-ArdeiWDU1Ea5nGFqEdYC5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:82:8d:0c:4f:0d:27:31:f2:f3:8a:82:e7:76:a4:15:ba:
         2b:ac:d2:f0:48:25:f8:17:0a:36:36:6b:94:6a:1b:e0:b5:79:
         cd:ec:b4:e1:11:6a:5e:ef:d5:3b:07:e2:1b:64:c4:ac:67:92:
         26:f7:bd:0e:66:da:67:b1:02:6e:6c:79:20:bd:3c:71:78:54:
         a9:b1:19:1d:1d:41:5f:e0:e2:0d:3d:82:d2:10:83:57:5b:31:
         69:a9:ae:44:29:30:40:28:51:d4:78:c4:2c:f5:81:dd:53:7b:
         8e:02:9c:43:53:c9:ab:cd:d7:90:fe:a9:f0:dd:42:de:a2:74:
         ec:1f:2c:23:d5:43:a2:bb:e0:77:3c:be:aa:a0:ce:d6:07:4e:
         19:7f:31:63:77:e8:ef:05:ab:b6:88:be:19:3f:15:94:98:63:
         97:06:f7:cf:72:29:88:71:9a:fc:30:ea:45:23:63:ed:55:c0:
         0c:93:2a:9b:d0:8f:aa:40:35:3c:9b:fc:6e:6c:f2:18:71:fa:
         ab:0a:44:9b:68:4a:51:37:72:44:72:f4:e1:f6:40:66:9e:d3:
         3c:86:ea:74:86:7f:6b:8c:0b:7b:a5:d8:66:3f:b7:14:50:75:
         a7:8b:e7:fc:e4:58:49:98:97:04:51:44:6f:5c:ac:4e:49:6e:
         14:0d:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----