Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          LPYOn55foTCa7hzsW9VqWdFK6euVFdkHju70l5B0yAo=
Subject key identifier:   80:24:19:C6:9B:84:7A:BC:7B:00:93:37:23:10:1D:77:1A:04:ED:53
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       01962E986DB86AF1A2258E58E8FEED67AF8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:03 +0000
Files and hashes:         1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: RFYVhYfZ/OJvVpTtSwqcBoHiMD99mnikFHFe6ME31IM=)
                          2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6d:b8:6a:f1:a2:25:8e:58:e8:fe:ed:67:af:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: Apr 13 10:01:03 2025 GMT
            Not After : Apr 14 10:01:03 2025 GMT
        Subject: CN=802419c69b847abc7b00933723101d771a04ed53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:a6:aa:e2:ca:ad:0a:03:0e:cc:4e:25:04:
                    fa:62:3c:b5:76:a5:7a:27:f0:5e:ff:06:69:c2:2f:
                    c9:cf:f1:f1:46:ab:6d:fa:4d:20:36:e4:31:ca:f9:
                    0a:49:48:45:2f:8d:de:3d:20:34:b2:d2:b8:1c:43:
                    af:07:c8:1e:31:1a:4c:a2:f0:f5:e1:f6:6a:99:35:
                    ac:3c:25:8e:ad:53:fb:bc:4c:be:12:6a:26:c5:fa:
                    6f:11:22:e8:7e:78:b2:ab:12:f1:1c:9e:72:d0:8b:
                    6f:9c:0f:21:d9:4c:b2:22:f6:29:e2:65:46:41:dd:
                    5a:37:bc:9f:2a:6a:36:56:a7:0b:fa:4d:44:12:5a:
                    b2:22:e8:57:8a:33:e1:98:cc:35:72:fc:db:bd:34:
                    bb:87:07:6b:ce:b7:7f:ae:df:54:e3:bc:aa:17:7f:
                    db:4d:8b:74:53:98:95:d4:d5:49:51:65:8c:d1:71:
                    6a:97:2d:31:d3:32:b6:79:f0:c3:58:0d:4b:4e:c7:
                    15:e2:91:f0:a1:29:1b:48:50:27:c7:c6:56:ed:90:
                    7e:1c:a3:4f:09:fa:8f:98:ec:0a:fa:a7:5f:9d:b8:
                    e8:77:f8:0c:7f:a0:13:1c:10:0a:c5:96:e7:67:8b:
                    96:96:56:d5:c9:23:f6:df:d8:16:29:7e:27:44:1a:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:19:C6:9B:84:7A:BC:7B:00:93:37:23:10:1D:77:1A:04:ED:53
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:9e:6a:fd:e6:6d:21:ed:4d:7e:45:1b:58:c0:ea:98:f6:
         6f:3e:df:6d:83:3e:37:65:08:0b:58:31:5b:fd:f0:27:01:b4:
         8a:d6:e6:8a:97:a6:c3:11:6c:e3:78:a3:cb:b2:75:17:82:73:
         a9:eb:e9:d7:03:3d:31:2d:f8:dc:02:26:9d:04:14:b9:42:12:
         96:d1:46:42:b7:0e:b8:3c:d2:5f:3f:42:6b:e8:ff:01:1a:35:
         05:e9:ec:7d:78:87:8b:3a:9c:4d:e7:5e:87:54:6c:ad:ee:24:
         8e:82:ea:9b:eb:16:be:76:a8:cd:cd:0f:84:ab:d3:cf:58:6c:
         0a:7c:db:a3:65:22:b3:e7:a0:59:bd:ce:7c:1f:ec:f5:10:c2:
         c9:59:f4:04:97:5c:16:74:88:80:57:50:67:a1:a7:30:75:36:
         fa:fb:20:e6:da:14:e7:d5:0a:70:24:83:e7:f6:1b:55:ba:36:
         45:79:44:5a:13:0e:b8:bf:98:18:41:29:25:88:23:c4:27:f6:
         3f:b1:bf:e1:19:e3:ec:ab:23:04:99:03:29:78:e7:c5:4c:17:
         20:0a:22:29:e5:a1:29:5e:35:a7:16:24:aa:7c:7b:92:41:9c:
         a8:c8:43:b4:17:fb:66:10:c1:75:53:2f:68:c7:82:40:7b:c8:
         eb:2d:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----