Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
File:                     icMXcNtymJXGw_2TN15c1WE-82o.mft (raw, json)
Hash identifier:          0Nk9w8DB6hZOf6nxAamqisen3as2xt2hOLc8ZnEhph4=
Subject key identifier:   25:5F:BC:BA:47:B2:94:C4:49:36:49:06:12:3C:C7:CE:0C:27:E3:8D
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Certificate issuer:       /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial:       01962E98C4CAE3993A3EFAA868599874773A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: LWCyiFNJr5Yrzo2LU618Vzqq_Sc.roa (hash: 7V26VUxl5fmzKeu8Z1l4PyuWNrOPpAbh2ctgbcmvfp8=)
                          2: icMXcNtymJXGw_2TN15c1WE-82o.crl (hash: 4GFa1oeBrzVRoW8uRdua+8uFK9eghwA/R+0Wk2L75M4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:ca:e3:99:3a:3e:fa:a8:68:59:98:74:77:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=255fbcba47b294c449364906123cc7ce0c27e38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:5d:13:25:41:8f:c6:a1:83:78:0e:a0:5f:
                    1e:64:5a:28:a7:d3:9b:6b:d5:41:61:22:7a:2f:0c:
                    53:f9:40:1e:00:f3:71:1f:37:93:5a:f4:bc:45:af:
                    b5:6a:45:af:e5:0d:96:0f:fe:9a:48:2a:3e:bc:bc:
                    2f:e8:08:c2:ae:ac:77:c5:33:a2:50:67:3c:d0:96:
                    bd:a7:e0:c6:4c:2b:17:d7:f3:c6:1f:7c:f0:b0:a8:
                    0e:c6:95:ca:3f:fa:08:4b:f5:95:90:df:d9:69:10:
                    0d:26:df:eb:15:f2:0f:42:4a:bc:7e:0a:6e:93:ed:
                    2a:01:7b:e6:6b:60:6b:eb:32:97:4c:ba:06:a7:84:
                    16:64:90:72:d5:d3:3e:44:ad:96:89:b6:53:8c:dd:
                    7d:7a:9b:e4:e4:24:2d:87:bf:98:0b:d7:f0:f4:da:
                    00:ae:71:f2:88:11:e1:17:3f:dc:59:d9:71:2b:fd:
                    83:0c:46:bd:8f:4e:14:7d:fd:01:bc:b8:20:91:50:
                    dc:9c:00:85:ef:ef:98:25:36:a5:ea:b2:ec:fd:78:
                    73:94:69:a2:cd:9e:c1:cd:b5:0a:87:24:63:52:20:
                    fd:8b:13:ae:5c:56:0d:d4:cd:4e:aa:d0:1d:f2:42:
                    ba:dd:c4:d1:b9:a2:ce:0a:c0:ee:2c:6c:88:17:34:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:BC:BA:47:B2:94:C4:49:36:49:06:12:3C:C7:CE:0C:27:E3:8D
            X509v3 Authority Key Identifier:
                keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:6d:ed:73:eb:a3:67:ec:c9:ec:ed:1d:93:73:20:0f:87:70:
         b7:5f:cb:2a:bd:b3:18:49:e1:f7:8e:fd:07:24:42:3a:b1:12:
         41:16:13:c9:bb:7f:83:1f:d5:29:69:16:ff:91:ea:80:73:c3:
         9c:cf:6e:c2:90:c5:73:71:9a:16:25:cd:62:d8:85:20:76:08:
         51:d9:34:c9:78:27:fe:aa:41:18:0b:47:83:92:e4:74:d1:31:
         79:09:02:95:57:94:86:74:2a:eb:6b:e7:a0:b6:48:b5:7e:e7:
         ed:5f:6b:64:59:8c:51:6f:c9:dc:b2:db:87:36:3e:a8:8d:a5:
         bf:6f:0a:06:54:59:8f:a1:dd:03:b3:2c:9b:d2:44:aa:3e:6a:
         4c:4e:97:1a:42:ca:48:b1:c6:41:2e:69:0a:05:ba:cd:24:da:
         8d:7d:a5:25:78:23:c0:3f:13:99:0a:07:92:8a:ef:90:13:68:
         04:b1:14:c9:1b:4b:46:6e:cd:e5:16:42:b5:d8:76:e1:2d:cc:
         09:63:03:e0:fe:7c:f5:47:05:49:08:24:84:24:f5:3e:0f:37:
         39:3f:ef:05:28:14:88:70:3e:28:45:09:15:78:ce:3c:dc:8c:
         e9:4a:3e:b0:c2:bd:3b:08:24:dc:3c:b6:f6:7d:97:a8:77:1c:
         42:5d:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----