Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File:                     ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier:          LFe8h6cZ17ay7Mtm0ePS0V/Nkxb3AVF4jujzi2y6lv8=
Subject key identifier:   39:76:74:A8:AA:9D:B8:1D:6E:73:EF:71:9E:4F:B0:89:FD:2A:17:59
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer:       /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial:       01962E61F711C968241B85304FAA4C03C547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
                          2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
                          3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: WEATbCS3og7p2EpyISfjVngPTbCljXnGFyS7k8K5u7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:11:c9:68:24:1b:85:30:4f:aa:4c:03:c5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=397674a8aa9db81d6e73ef719e4fb089fd2a1759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:9a:a7:d3:83:c4:3b:e6:03:1c:93:6d:bc:
                    2a:e4:e7:b2:4c:02:d5:97:98:3d:d5:6d:0e:85:28:
                    4f:cd:04:4f:ec:e3:84:4e:8e:53:67:82:57:d0:2c:
                    8f:2f:67:f2:55:33:2f:bd:76:45:46:9c:f6:3b:a6:
                    06:26:9a:a7:57:23:8a:bb:0f:2e:21:18:c9:f1:24:
                    df:7a:61:23:7a:58:17:1d:14:9f:16:7e:3e:3e:53:
                    be:f7:25:f2:17:a9:4a:2a:51:a2:61:e2:27:c6:dd:
                    4d:be:25:c5:e7:06:5b:f1:3e:0d:27:63:90:0f:01:
                    84:aa:bf:88:7b:cc:ef:d9:86:cb:6a:83:23:2a:5c:
                    4e:d4:79:6a:5d:1c:ae:6e:ff:1b:fa:d1:90:a9:91:
                    a1:e5:ca:a8:22:d6:32:d2:d7:4d:47:0d:07:38:de:
                    35:d6:87:a7:94:a9:a0:81:f7:e2:7c:99:07:99:4d:
                    df:95:3f:45:6f:fd:d5:f3:6c:81:26:e7:cd:94:9c:
                    69:ec:85:0e:f5:2c:3f:6c:11:46:7f:32:54:df:b5:
                    72:6e:b0:08:b6:1f:52:d4:cf:56:dd:81:09:b3:b1:
                    38:da:bc:87:d7:b6:f1:42:f5:83:9c:fb:8f:52:c6:
                    ec:20:74:22:be:0f:42:8d:36:76:dc:17:94:f6:8d:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:74:A8:AA:9D:B8:1D:6E:73:EF:71:9E:4F:B0:89:FD:2A:17:59
            X509v3 Authority Key Identifier:
                keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:a0:96:ae:1d:92:c0:1a:e8:5b:56:81:24:73:fb:ab:71:
         37:60:5e:ec:58:b7:a8:0c:e4:d4:12:ce:9a:18:0f:ed:ee:37:
         73:8c:b2:51:84:8c:a0:4a:cf:88:70:0b:94:2d:26:79:75:d7:
         c4:c5:50:69:20:58:8f:7a:69:59:ad:58:fc:ed:f0:c0:de:9e:
         90:79:49:a0:7f:ee:90:22:be:24:e8:8d:32:9c:1b:21:7d:b0:
         87:2d:5d:52:41:fd:f0:64:da:80:56:9d:52:71:32:15:e6:cd:
         ff:8f:9d:22:cd:b0:e0:3e:b1:5b:d1:92:51:85:2b:28:5f:28:
         bc:e0:40:97:fe:4f:6f:d6:d9:f7:f1:14:4a:b2:7f:b5:7c:02:
         0f:83:e4:e4:1d:cc:50:d6:65:3f:66:4e:c2:dc:a6:f8:38:35:
         0f:08:74:5b:0c:f3:6e:fb:65:76:c3:b4:da:ee:f5:48:2c:8c:
         f1:20:57:fe:df:e4:77:5d:ac:f3:b1:1e:a4:2e:6b:b8:f9:08:
         dd:55:6e:e6:9b:63:72:2b:4a:20:29:64:55:a1:9e:87:bf:52:
         a1:93:1c:24:0c:1a:14:9c:b2:c6:da:a3:c6:9a:64:65:13:86:
         39:21:a1:e0:36:06:55:50:22:d3:4d:af:9c:11:18:a7:9d:ee:
         c3:0b:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----