Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File:                     IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier:          IGpI7RcBhszicu9JX7CrlQwxVoZksJjHcwtwAa3XyHM=
Subject key identifier:   F4:1A:69:F3:B9:DA:F4:9E:13:AC:94:B6:42:B3:8B:E9:ED:12:37:7C
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer:       /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial:       01962E9924FB0F6E94D85CB4955EF6CD2384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: ZJIIR2mTYRn4c4W6uzkpZ7oZiPkZoJEj+L/xFOEAvbM=)
                          2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:24:fb:0f:6e:94:d8:5c:b4:95:5e:f6:cd:23:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=f41a69f3b9daf49e13ac94b642b38be9ed12377c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:0a:c7:f6:c8:a1:af:74:e5:7f:cc:ce:20:
                    19:90:ed:4a:a6:7f:d3:fa:f2:ef:b7:35:e7:18:fa:
                    64:05:bf:0b:3a:c7:1c:76:80:c1:96:b5:b1:9f:31:
                    b4:b5:b1:22:b7:96:b1:db:bd:6c:3f:6a:d4:17:d0:
                    a2:8e:48:7e:17:bb:e0:53:7f:35:5e:76:a2:fa:0a:
                    dc:41:f7:1e:16:7d:13:2e:a7:ec:72:94:bc:60:37:
                    79:3d:2c:3b:20:e2:38:be:7f:65:3a:b1:75:fb:81:
                    8e:7e:ca:d6:e6:e6:a3:8f:b4:46:0b:db:4e:f8:fb:
                    72:a3:ac:d7:7e:60:03:87:4a:13:0c:16:62:06:50:
                    69:aa:d9:d0:64:54:38:71:c9:7e:f1:2e:5f:1a:9f:
                    a3:b1:e5:cb:c4:3b:f8:b9:8a:f0:36:eb:59:6b:9e:
                    94:0c:cb:6e:4c:5c:74:f6:9e:83:86:ff:7f:bf:29:
                    93:29:9f:ea:9b:d6:8d:50:fe:a9:d2:87:fd:2e:99:
                    ed:26:6b:56:bb:10:40:b5:6d:51:f5:17:b8:e7:87:
                    9a:5b:2a:9f:43:02:ba:fa:55:14:bd:55:a9:a1:10:
                    4c:ed:bf:bf:58:2e:05:a5:80:d9:d1:4a:e3:96:c5:
                    00:d0:e4:24:7a:b3:74:36:b2:5a:1f:c6:30:1b:6b:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1A:69:F3:B9:DA:F4:9E:13:AC:94:B6:42:B3:8B:E9:ED:12:37:7C
            X509v3 Authority Key Identifier:
                keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:23:bb:d0:e2:3a:96:9d:9d:76:86:b7:e2:e9:f7:1b:b3:
         a5:22:3e:2e:31:1c:43:de:36:5f:31:f0:14:de:39:d1:5b:1e:
         65:39:cc:aa:df:8f:b4:57:e8:1f:b1:8c:fe:93:90:61:52:1c:
         be:40:a6:85:00:cc:ed:95:02:f3:93:6b:a3:5a:f1:85:20:06:
         44:6f:10:26:22:f8:d4:68:c6:40:85:70:b6:eb:95:f0:ba:f2:
         b0:47:38:f8:bd:f7:3f:42:48:a0:2e:32:d9:da:15:9f:02:fd:
         7a:e5:2a:83:fe:c4:5d:f0:da:26:53:77:67:f7:3e:21:9d:67:
         5c:1f:49:2f:f5:51:e1:2c:69:8c:3e:3d:d3:17:0a:89:98:7f:
         c8:e0:ed:a1:c4:1b:4f:7f:10:41:c0:59:72:a3:8b:83:37:e2:
         d4:48:62:89:fc:0a:35:1a:15:9c:8f:36:bd:49:cc:6a:69:55:
         09:91:4f:58:38:07:40:94:31:50:29:80:ec:d2:6d:98:b2:47:
         b2:28:92:50:b1:5c:0b:bf:16:ca:3d:34:66:61:d2:37:75:92:
         9d:85:2c:f3:de:b4:74:d3:71:48:9c:70:5f:01:ac:21:90:98:
         a4:72:a9:7d:91:a2:e5:84:71:3b:96:f6:86:f1:93:1f:5c:61:
         77:b9:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----