Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File:                     iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier:          HBcfBG4gfeK5JFXv0EJ0SrWoQ+wbsG7S8QkznFtVAWg=
Subject key identifier:   7B:2A:EF:8C:B4:46:9F:88:99:E1:BA:35:DC:06:C6:6E:E1:F3:4A:F9
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer:       /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial:       01962F3D87E01E48C0BDF0BE74840072A720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number:          0CCB
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: hi3FrnF-3jLI3lIxcnrMYtC-4ow.roa (hash: Hon+3addqQMzwZi2hE3IgLssZw3bA0MMDqOLsP3ZK0E=)
                          2: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: v3KRfr/kVSp0jlEI21papl7qu+Vls1FSyxGngOMEEqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:e0:1e:48:c0:bd:f0:be:74:84:00:72:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=7b2aef8cb4469f8899e1ba35dc06c66ee1f34af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:45:de:e0:8d:8f:9d:8d:19:71:6a:7b:98:
                    1b:fd:2d:c1:a0:8e:6f:c9:c9:c8:2a:a7:42:0e:ed:
                    e3:97:7d:fc:c5:a9:bd:a4:c5:34:ad:2a:29:ba:a8:
                    85:ba:d3:cf:d7:79:b3:d5:89:5a:7d:4b:75:15:de:
                    08:2e:0f:a6:74:ab:c2:9b:1e:0c:78:35:4e:fe:7e:
                    d0:de:33:0b:51:f1:e9:82:49:93:f0:07:a1:f3:41:
                    25:47:ef:b9:a7:03:dd:46:8b:40:21:48:ea:47:5d:
                    06:1f:45:26:27:9b:2c:0a:6a:08:de:61:66:5d:fd:
                    6b:ca:97:c8:b3:05:d5:fa:95:a6:e5:35:e3:a2:ea:
                    ce:6f:5b:0b:f5:19:2a:89:09:2a:21:eb:01:b9:13:
                    13:d7:d9:2d:3a:18:e8:2f:b0:5c:a1:51:36:88:c5:
                    74:72:7f:d7:dc:31:21:49:18:42:66:13:17:db:72:
                    be:5d:ce:7b:15:e7:32:e1:b5:c9:6f:eb:9b:a9:64:
                    d2:f6:9c:32:a8:a1:47:b4:07:ab:11:9d:63:e4:09:
                    4b:41:03:a7:ba:4a:ad:8d:ba:4a:39:6e:54:00:e2:
                    ea:8f:c3:48:c8:a6:5a:5b:95:63:de:b8:c6:bc:c3:
                    04:9d:ec:33:a4:1a:41:1d:67:25:6f:43:c6:fc:91:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:EF:8C:B4:46:9F:88:99:E1:BA:35:DC:06:C6:6E:E1:F3:4A:F9
            X509v3 Authority Key Identifier:
                keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:01:8d:fb:9b:61:e6:35:e8:94:ad:db:f2:6f:ee:be:4b:
         51:be:02:5f:c0:83:e3:12:d9:1f:8e:6f:04:a5:c4:e2:c0:f9:
         7f:72:ca:c5:a9:75:0a:32:e7:75:92:29:51:8a:cb:be:e1:8c:
         2e:9f:f6:b9:e7:6d:28:42:aa:90:b8:18:40:85:51:63:62:24:
         27:31:ba:eb:7a:76:ad:89:86:e2:95:47:21:cd:60:e3:80:d2:
         b8:c3:ee:fc:ae:d8:fd:23:66:36:01:fb:76:15:a0:82:b0:5f:
         c8:4e:2f:9a:3d:60:e0:6b:60:fd:ed:96:be:5b:ac:57:74:7a:
         4b:94:79:bd:ec:44:bc:21:ae:17:9c:49:e9:d2:77:f0:a0:d6:
         16:8c:dd:a3:73:74:44:cf:61:c4:a9:07:ad:0d:5c:7d:c6:fe:
         f0:05:4c:65:14:12:09:ee:de:f1:8c:c9:a3:40:52:8b:f0:11:
         a1:c0:fb:0a:50:39:69:44:34:29:af:03:27:d1:89:7b:d1:9c:
         89:af:8a:dd:96:4c:37:90:bd:6b:01:d9:4b:66:7c:e3:b9:a9:
         82:ea:7a:ab:63:b8:df:1f:62:5a:c9:99:36:c9:3e:ea:d1:05:
         b8:4e:31:f1:ec:02:12:65:e8:f0:35:b1:e8:dc:d5:e6:63:fd:
         a3:74:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----