Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File:                     IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier:          W/pn1rz4GlC5eC2oBh9yGcoa514Vl09Om1WQKzSU3LI=
Subject key identifier:   16:37:90:0A:C7:CC:DA:D6:F0:F9:A0:2E:D5:1A:6E:34:5F:29:1C:C8
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer:       /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial:       01962DF40A1D0FBF31458D01F42CC29C2453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number:          1308
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
                          2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: mQ2hOFj+hIvr7a5AWhexnQVjqbInqdjT9yhZTbJ20vM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0a:1d:0f:bf:31:45:8d:01:f4:2c:c2:9c:24:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=1637900ac7ccdad6f0f9a02ed51a6e345f291cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:f5:34:87:e4:30:17:80:51:0e:95:61:8a:
                    ff:0f:44:70:60:22:34:13:ca:c7:98:d8:fe:52:9e:
                    30:60:55:ff:df:fe:a0:a5:00:33:9e:b4:58:6d:6d:
                    ec:e8:7b:ab:33:c7:82:70:83:56:18:07:b9:7d:57:
                    5e:ef:23:88:07:7a:09:05:a6:35:20:d8:e3:66:a5:
                    43:7b:50:78:c1:ed:09:8e:85:cf:f7:fe:d3:07:59:
                    cb:02:bc:84:d1:fe:42:83:62:53:dc:15:f6:48:11:
                    47:fd:2c:02:50:59:e0:d5:46:a3:3d:96:d2:be:7a:
                    7d:92:cc:be:87:bb:b2:23:23:f1:8f:ed:b1:56:39:
                    5b:67:7e:8a:21:9c:27:09:81:71:c7:62:9c:00:c3:
                    b5:03:e8:b5:50:90:7d:1a:ba:03:79:1d:ce:c1:60:
                    94:e4:43:91:26:93:35:8e:75:28:fd:08:0e:cb:04:
                    49:82:f8:bc:9e:d0:8d:1b:19:57:dc:1a:bf:69:09:
                    d0:15:0e:3e:b7:a5:78:9d:3c:b3:4d:82:2e:b4:b2:
                    10:01:16:28:c1:ff:43:95:62:a2:e7:2a:b9:6f:eb:
                    ea:5f:93:c0:a0:28:23:ac:a8:e3:63:9e:97:1a:ea:
                    bf:7a:88:b2:30:23:9a:10:c3:cf:12:4f:d7:d2:f9:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:90:0A:C7:CC:DA:D6:F0:F9:A0:2E:D5:1A:6E:34:5F:29:1C:C8
            X509v3 Authority Key Identifier:
                keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:32:8e:f3:66:72:46:56:e4:54:16:de:7c:f7:e2:2e:f4:71:
         43:2f:98:9b:e8:00:8f:66:81:ab:5f:24:65:70:cd:2c:77:19:
         4f:65:ff:f1:cd:20:dd:b9:e0:d1:6a:ae:0d:11:37:ca:3b:50:
         71:4f:d5:fd:8a:4c:4e:ef:26:a8:e3:2f:a9:05:21:e2:17:bf:
         13:83:f4:3f:73:d4:b8:7f:f1:7f:84:fc:b4:8b:7d:c6:84:28:
         bf:02:f4:92:df:0f:b6:8d:60:20:f3:5b:f1:dc:e1:75:4d:fc:
         b0:7a:96:01:8d:90:95:aa:0c:80:f3:3f:49:a7:5d:1a:20:3b:
         3c:6b:3f:ca:1d:c3:b3:79:1a:b1:3c:76:44:cd:d8:31:60:ef:
         ef:5f:64:75:b9:5c:65:54:06:cc:43:56:52:3c:7e:cb:36:0b:
         87:e5:0b:3b:af:a0:96:e0:39:cb:6a:b8:98:c6:cf:4e:4c:17:
         6a:bb:71:17:4e:4e:94:0a:b2:42:e9:fc:8a:1e:f6:ed:b9:4a:
         1c:85:0d:50:c2:a3:f7:ef:35:f3:bc:79:a8:72:b0:15:bf:94:
         1d:65:56:74:66:ee:f0:77:ef:b6:7c:c2:3b:c3:ec:7f:46:61:
         94:a0:58:52:72:8a:ab:40:81:40:43:0e:a1:c0:14:c9:e9:11:
         08:85:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----