Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File:                     iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier:          HTxkjbfIsLyqs7QbvlCeriG4BioYPwOYdRkPaRbg8sM=
Subject key identifier:   C6:68:C2:0D:27:A8:AB:D7:07:24:26:A7:35:50:4D:EC:FF:33:1D:6A
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer:       /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial:       01962E991BEC4E1F2E3531D075B35993693F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number:          0DB0
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
                          2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: BkzMF1Z99A7pKn11HYTSDTcZzt4/GQ06XX5bQgRgH3w=)
                          3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
                          4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1b:ec:4e:1f:2e:35:31:d0:75:b3:59:93:69:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=c668c20d27a8abd7072426a735504decff331d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:c9:f4:cf:22:f5:e9:86:17:3b:42:e9:ac:
                    c1:6e:03:b4:b8:ca:86:2b:04:f1:2d:ab:99:f6:22:
                    2e:b6:38:c0:b3:a9:69:9f:9a:ea:2b:02:2d:e1:13:
                    0d:2b:17:a8:1f:f0:3f:5a:fa:06:e9:63:9d:58:ca:
                    04:cd:8f:78:d6:e0:31:5f:2b:f6:9c:eb:72:b7:b7:
                    df:bb:8e:13:13:43:54:8d:41:74:8b:bd:0a:d0:46:
                    07:6b:ab:fe:9c:eb:d7:1e:17:3b:ad:6a:da:72:7a:
                    a5:e6:f9:3b:ed:de:09:39:67:62:b2:34:dc:7d:68:
                    0f:6e:27:9b:b3:4c:be:dd:2a:8b:10:da:20:61:25:
                    ab:ba:da:05:22:33:ce:15:45:91:07:dc:af:f9:14:
                    46:b3:f3:af:1e:2c:a8:81:b5:aa:e0:8a:1a:9f:97:
                    86:1d:fd:9d:5f:20:41:37:cd:a6:ed:b7:b8:b3:fb:
                    cf:6d:d6:4f:f4:4b:d3:c1:6e:fe:66:2f:af:b2:de:
                    b9:b8:9e:c3:89:ab:ce:31:95:d0:51:24:e1:dd:8e:
                    d0:ef:a9:f0:0e:08:be:0b:66:20:8f:18:07:4d:12:
                    72:01:56:14:f2:9e:1d:2d:93:b3:25:53:df:45:06:
                    64:f8:8a:6b:16:82:20:84:38:bb:8e:89:2e:69:01:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:68:C2:0D:27:A8:AB:D7:07:24:26:A7:35:50:4D:EC:FF:33:1D:6A
            X509v3 Authority Key Identifier:
                keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:6a:13:d5:1a:1e:60:99:7b:ee:8d:70:17:25:70:e1:7b:
         bc:0d:9d:6d:e6:fe:46:b2:38:c8:39:47:28:45:ab:cf:d4:37:
         37:5b:e9:62:bc:44:c7:b7:b8:d1:10:4e:d8:11:fe:6b:51:73:
         c9:dc:1c:db:f0:61:c7:8c:35:93:92:36:45:87:14:82:2d:57:
         c7:4a:1d:8b:00:fa:0b:ab:51:17:bf:6b:9d:f4:4d:73:1d:28:
         1d:e3:1d:d8:1a:01:a1:ef:48:1b:5e:65:29:df:54:cb:17:2e:
         47:5c:ea:03:00:5e:fd:ab:24:f8:7d:4b:29:d8:16:90:17:3f:
         01:0f:97:cb:7e:30:05:76:65:91:47:61:52:f6:5b:98:f4:1c:
         ee:9a:2d:66:c7:7d:eb:98:aa:b3:dc:3c:4f:a7:f9:67:75:90:
         cf:40:70:1e:8b:d0:f1:ac:8e:1c:5e:e0:7f:d9:83:13:fc:4a:
         fe:5e:31:5a:7d:fa:7d:22:06:62:20:c6:56:c3:79:b6:5d:1e:
         7a:76:16:a7:17:83:65:98:f4:92:9a:ca:f4:ac:c1:1d:79:8c:
         7c:08:c6:08:45:6c:5a:d1:a6:09:ce:06:4d:7c:1f:a4:ec:2e:
         c0:23:3c:21:9c:1f:00:0c:61:79:0a:f8:80:d2:99:c2:9f:a2:
         a3:96:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----