Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
File:                     IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft (raw, json)
Hash identifier:          HGOUlfNhI9C98mXNzWAMuq5W3xV+T6uJcBh0F3qqaik=
Subject key identifier:   B9:FE:38:07:EA:A9:12:A6:AB:14:D6:19:93:5B:C0:28:EA:AC:B3:FE
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Certificate issuer:       /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial:       01962ECF6F7E6F98BB23680DAE94F78C0A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft
Manifest number:          0FF6
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl (hash: dFrRNYSQV1PWYgKBaAGGWMmlNX7qySlkUnm/crs4VMw=)
                          2: p1lTEKoE5j8hz4v8NDCkph3vHZg.roa (hash: MpUjtf+IJwp4Op1WMMfO/E6/RTTXrzH8PWzDLygUE3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:7e:6f:98:bb:23:68:0d:ae:94:f7:8c:0a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=b9fe3807eaa912a6ab14d619935bc028eaacb3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d8:f3:31:67:cb:a0:3b:57:83:b7:a4:9e:08:
                    02:d4:8f:6c:b0:e6:c0:f4:27:eb:b7:f8:da:7f:c3:
                    a0:1b:b7:43:66:80:c9:bd:54:33:9a:19:9d:ec:75:
                    28:fe:a1:8a:8c:b2:2b:8d:77:37:3e:a8:b9:96:ac:
                    21:1b:af:95:a7:87:50:a4:ca:a6:b8:5a:7e:a4:9f:
                    da:25:fb:86:a7:a4:76:5e:9e:00:e1:06:eb:7a:37:
                    2d:6e:75:a2:bc:25:de:dd:cc:33:30:ad:b3:4f:2a:
                    67:24:dd:2d:bb:44:80:95:f8:be:a7:b4:fa:41:b2:
                    8a:7b:d4:14:37:fb:87:9a:d3:4b:59:58:01:63:42:
                    02:45:63:8b:46:f0:63:d3:9f:cc:2e:c5:d9:80:c8:
                    da:a0:e4:4f:16:cd:4f:6b:09:95:c4:a9:4c:80:60:
                    01:f4:26:c4:d8:a8:74:fc:3c:9f:c4:99:f1:75:fa:
                    42:f9:d8:06:d7:66:fe:19:86:96:28:17:8e:63:e0:
                    04:7a:56:ea:e7:76:b4:3e:c4:e7:61:64:3c:99:d1:
                    b9:ec:fc:82:24:07:06:55:5d:c2:1b:95:06:b6:bd:
                    b5:dc:b9:4f:f3:a3:05:d8:3a:ba:82:9d:ec:81:22:
                    82:12:d1:17:d2:76:e8:40:85:ce:50:2d:c9:65:3b:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FE:38:07:EA:A9:12:A6:AB:14:D6:19:93:5B:C0:28:EA:AC:B3:FE
            X509v3 Authority Key Identifier:
                keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:08:b6:3a:6b:54:27:3c:81:d3:62:fe:70:ac:12:d0:af:0b:
         c8:39:c4:eb:8e:e6:6a:12:16:c0:7c:68:f4:80:40:03:6b:ea:
         c7:c9:43:b7:b1:1b:dc:04:b0:6f:b1:5e:b0:ea:30:03:53:b1:
         95:d9:32:56:18:b1:35:56:eb:e4:55:0f:6a:c5:68:86:b4:7d:
         26:d7:47:91:a3:c6:d4:cb:d9:7f:e5:d9:e1:78:58:f4:c1:37:
         93:a6:39:53:f5:89:8e:b3:13:40:11:c3:cb:b9:1c:eb:bf:eb:
         d0:00:be:70:2f:28:f1:eb:4e:c1:92:92:7f:ad:c2:f8:df:47:
         74:b7:d0:ac:b2:5d:0c:29:3a:80:bd:99:08:b5:73:03:7b:05:
         90:b4:c1:06:f5:ab:be:a7:52:22:e8:90:cb:77:2f:d1:5d:11:
         b3:a2:c4:70:f2:c2:a3:d6:b8:a0:3d:92:07:42:10:c8:90:65:
         08:39:fc:5a:c1:df:6d:47:c2:2e:9f:26:5f:4d:75:b1:8a:4d:
         31:28:e7:07:ce:c1:5c:35:b5:ae:32:db:dc:a7:de:1f:af:f1:
         ba:d6:b9:10:4e:83:83:5a:cf:f2:d5:d4:57:3b:da:72:ae:dc:
         48:a7:a8:41:30:19:ee:97:60:a4:39:35:cb:96:42:1f:94:03:
         be:19:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----