Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
File:                     Igqw164Bx7p9pp1xqRRys5DNcJE.mft (raw, json)
Hash identifier:          CjOVjeSIgJnBp1yj3BRZVWi25QSOL3oX2erE3eQfsDw=
Subject key identifier:   1B:DC:69:B5:5A:16:01:5D:32:6E:D5:2C:D7:20:61:5B:F6:01:FF:1B
Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91
Certificate issuer:       /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
Certificate serial:       01962ECFD132BD3CDA89BAD0C9F68B3031FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft
Manifest number:          01BE
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: Igqw164Bx7p9pp1xqRRys5DNcJE.crl (hash: lKLNwClg6i2wXL5+JaTyp5TAe4cJCrWwi4TdshzuZ8A=)
                          2: W8kldn3kdGYqCFVL9Vj-_yMc_YQ.roa (hash: GEboFATMOMt3GSxR34v0QsuLahbz9VbOcfy1sr+D47k=)
                          3: avLYAmYO9wvbuIB-t2UHkT4WNBk.roa (hash: eNorqBfzjIBrKphnA3Hxbm94Qe9pNP73PjpzIgRcQ3E=)
                          4: uZq55f5XuQqQ7rrf5WAbTtH3Eg0.roa (hash: mqFOL5ArU7MflWJib0dCvCKgrFOQckiZASgofur+1AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d1:32:bd:3c:da:89:ba:d0:c9:f6:8b:30:31:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=1bdc69b55a16015d326ed52cd720615bf601ff1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:05:ec:5f:44:8c:51:57:6d:ac:ce:86:c0:a6:
                    77:b0:54:dc:c4:03:9a:c8:0f:ce:a6:ab:70:f9:45:
                    97:1f:51:1c:13:7e:60:af:ac:81:75:55:d9:32:65:
                    58:c0:65:e7:f1:fc:e8:75:a8:be:05:db:84:fb:ab:
                    11:f3:68:fa:93:9f:4d:08:5d:08:0e:a3:83:97:10:
                    31:6c:05:fb:81:fe:6c:3f:73:1e:0d:1b:82:aa:00:
                    fe:d5:53:21:90:ca:6d:04:4a:0f:19:4a:4a:d0:63:
                    4c:29:25:56:5a:c4:1a:45:e9:7c:2b:12:08:5c:4e:
                    78:17:89:68:14:9f:7d:3c:a9:fb:1d:33:82:00:00:
                    76:fd:b9:83:4a:38:59:fc:92:11:29:d4:fa:c0:7c:
                    22:7a:18:e6:f2:98:69:33:f2:07:06:02:31:f8:d2:
                    da:ea:83:af:0d:9e:6e:96:13:86:3f:98:a3:6b:2a:
                    55:ca:0c:2f:28:8e:e8:8c:24:c1:5c:32:8f:37:65:
                    70:58:45:97:5b:78:02:2d:bd:2f:f7:41:62:fb:62:
                    60:f1:92:ca:96:8a:a7:a3:b8:80:84:dc:02:82:a3:
                    d8:ad:cf:b8:98:60:a2:31:e9:70:18:81:61:ea:ae:
                    05:47:33:1f:f7:9e:47:37:99:77:9b:c1:49:50:69:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:69:B5:5A:16:01:5D:32:6E:D5:2C:D7:20:61:5B:F6:01:FF:1B
            X509v3 Authority Key Identifier:
                keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:98:d1:c2:ab:8e:dc:b7:57:77:d9:6e:80:5b:2a:32:e9:0b:
         07:ab:01:35:7a:65:2e:85:c9:5e:71:2f:96:f4:4b:b6:2c:6f:
         2e:88:88:64:53:01:80:60:b7:c1:a0:6a:d4:1d:32:74:6d:72:
         ff:c1:1b:b4:a6:75:ee:9b:8d:31:14:b2:9e:ca:c8:84:40:0c:
         63:be:63:02:3d:22:3e:d6:41:e1:db:11:f2:2b:6c:20:18:f5:
         29:bc:67:23:7f:eb:e7:b1:0d:d9:72:25:19:d1:b0:98:34:ab:
         7f:77:d2:54:bc:a6:95:58:b8:75:c8:ac:a8:31:c3:da:c6:e7:
         ce:42:df:90:d7:1b:e6:79:de:6c:1e:9e:a5:bf:47:54:1a:f0:
         5c:52:ff:3c:31:e8:e8:3c:9c:82:6f:32:56:1f:48:ff:dc:a1:
         e6:19:0f:e4:8d:55:f8:df:14:d7:37:ae:31:35:a0:67:df:31:
         f8:28:ed:b7:bf:5d:d9:36:7f:a4:a2:70:6b:96:df:12:d5:82:
         95:96:c1:31:d3:8c:5a:c0:4a:ba:f7:de:99:19:dd:94:bc:ec:
         76:24:a8:fb:f8:00:b5:5a:cf:45:21:ce:f4:52:a9:a1:e2:4b:
         89:73:b3:48:88:f7:bb:ab:2e:1a:b2:65:cf:b9:5f:ef:09:29:
         b9:78:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----