Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File:                     IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier:          UMTxsFYG+GtHt56kSi0vhY6tiLv88CyucYEZ9ff0X1s=
Subject key identifier:   D9:7A:1F:DD:77:8D:19:10:EF:AE:33:2F:63:91:80:FD:26:73:BC:C4
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer:       /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial:       01962E985ED45036524791EA854DB0A88978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
                          2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: CkBNuknPX/ozY5VB9fqlnGugOLWnpWsSvVddwiyFxOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5e:d4:50:36:52:47:91:ea:85:4d:b0:a8:89:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=d97a1fdd778d1910efae332f639180fd2673bcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:27:18:36:3b:86:be:d9:c2:91:da:54:e2:
                    b5:0d:b8:c1:b5:ac:05:b4:a8:6c:1c:c2:30:da:10:
                    f5:2e:55:e2:bc:10:11:be:b2:89:75:e7:1c:7f:df:
                    a8:ad:fc:62:8b:6a:91:3b:7b:fa:97:08:e5:5f:b7:
                    32:56:ba:32:5b:75:96:cb:c6:b4:56:23:f1:71:63:
                    94:1a:b4:62:97:93:db:f6:61:0b:ea:35:52:d7:86:
                    d2:53:ab:97:58:c3:cd:1c:a6:97:05:64:e5:95:49:
                    15:90:fb:77:77:79:58:07:62:8e:de:da:e0:76:fd:
                    5c:5d:a4:ac:0a:97:c6:15:dd:d7:b7:a7:d7:69:e2:
                    bd:fe:3c:90:53:33:0a:94:5f:35:8e:1c:d5:2a:66:
                    19:67:db:00:b3:4f:33:90:d8:e7:6c:46:03:00:87:
                    0e:17:59:05:c0:6f:e4:0d:1e:e2:5a:6e:3b:8e:8a:
                    44:73:29:55:01:39:5b:99:a9:21:98:4a:c1:36:e0:
                    04:91:9b:76:1f:17:1d:25:89:4e:bf:57:fd:92:40:
                    16:dc:36:13:4e:87:d9:8b:69:03:f4:d5:fa:fd:bc:
                    ed:54:19:a9:99:4b:de:4a:37:26:1d:f4:ba:69:c7:
                    86:3c:23:b4:65:96:48:85:9f:ff:25:c1:1a:9d:fb:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7A:1F:DD:77:8D:19:10:EF:AE:33:2F:63:91:80:FD:26:73:BC:C4
            X509v3 Authority Key Identifier:
                keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:52:da:dd:d0:23:11:c7:f1:8a:54:40:07:16:f1:fc:c9:13:
         e0:71:02:56:ee:d7:80:41:62:07:8c:8a:7c:41:00:12:bf:40:
         a1:d8:c7:22:5e:4e:4a:45:22:37:9d:5b:7d:87:c5:e3:53:26:
         d7:00:b0:c4:36:4b:cd:2f:c5:e5:85:24:f0:bd:1a:9d:89:94:
         8c:62:19:8e:36:4c:49:78:a7:1c:37:47:a0:34:89:6f:39:b8:
         06:ea:22:f8:f6:62:e3:12:b8:45:7a:54:ac:ac:08:2d:2f:00:
         b9:7d:34:e5:a4:f7:0c:34:78:93:84:04:71:2f:3f:8b:64:b7:
         0d:21:91:b7:1c:9e:b9:c1:90:4e:a0:46:2f:25:ba:4f:3f:c6:
         6b:67:7e:9a:2a:36:66:51:83:b8:c5:16:40:84:97:e8:56:a6:
         16:c4:5f:56:54:26:b9:31:e6:a6:7b:05:47:54:ce:ac:d9:21:
         47:13:64:41:7e:34:8d:f8:d7:c0:6c:e3:45:57:02:70:99:d4:
         60:5a:08:8d:b3:25:85:28:e1:56:ed:2d:4a:77:6d:1a:89:60:
         8f:38:a3:34:d8:e5:a6:d2:fb:9e:3e:b4:11:ec:6a:d6:ed:a9:
         b5:04:39:65:28:47:42:df:3b:21:ee:a7:cb:20:cf:1f:b7:77:
         ee:51:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----