Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File:                     IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier:          yY6JXCtakOwWDmvtUqNJKzos0Pkk1bBJUerl+3mb4Nc=
Subject key identifier:   31:08:A5:92:87:5C:A6:8F:34:F0:AE:B2:3B:04:25:5C:E5:B9:81:13
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer:       /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial:       01962E2B38DD598A1CBD8CCD891B3F8DED93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number:          125B
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: nSu4pr18kAOjx9UpPWeUK12vkUa4nWCnNT2+65NcK/Y=)
                          2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
                          3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:dd:59:8a:1c:bd:8c:cd:89:1b:3f:8d:ed:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=3108a592875ca68f34f0aeb23b04255ce5b98113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:7d:02:17:12:6a:66:35:e7:47:1f:02:b8:
                    3b:2a:72:c1:58:26:bd:e3:9f:7d:4a:77:47:44:3b:
                    1c:4e:49:3b:0c:64:85:cf:f3:0a:1d:04:4d:40:01:
                    6c:6a:eb:a7:15:26:2b:97:a6:e9:ff:a6:58:6f:a7:
                    bd:4e:93:ee:49:a5:43:50:a4:86:06:87:3a:83:04:
                    ef:eb:20:5d:38:30:bd:86:1a:6f:03:f1:32:b2:22:
                    9a:18:a8:f2:3a:4a:1f:ff:12:d8:94:ab:3b:75:e7:
                    c9:c7:d6:be:6e:c0:38:76:ac:59:97:a6:b9:af:55:
                    04:6d:93:79:c3:bd:3b:ce:ea:c9:56:55:62:33:9e:
                    52:f0:64:f0:a9:3c:cc:88:d7:61:39:a0:71:cb:ea:
                    4e:4c:e1:bf:fc:22:e0:49:39:aa:3f:db:5d:58:af:
                    30:44:36:3b:96:43:d7:42:84:51:00:64:19:e5:c1:
                    39:79:3f:0e:94:6a:3d:7c:ea:e9:62:a2:ef:d9:e2:
                    02:a0:58:d7:42:22:1f:ae:d8:3c:8a:b4:25:90:b5:
                    c4:cb:65:58:12:e9:07:eb:38:b9:fb:de:f4:b5:8e:
                    5b:93:66:3b:1d:df:53:3e:de:04:ce:30:01:4c:75:
                    cb:64:c3:04:dc:b1:a8:da:49:af:de:27:63:fb:6a:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:08:A5:92:87:5C:A6:8F:34:F0:AE:B2:3B:04:25:5C:E5:B9:81:13
            X509v3 Authority Key Identifier:
                keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:11:c2:62:75:14:cb:ae:e7:7e:44:de:af:c3:44:6c:70:1d:
         7a:d7:c0:5d:e9:f6:e6:ba:0e:86:28:43:2f:6b:47:59:bc:c4:
         66:2f:93:45:4e:e5:53:c9:64:be:51:34:66:a2:2b:81:91:e7:
         35:ee:b8:a3:0a:61:04:e9:19:ce:83:50:12:53:6b:6a:78:63:
         10:44:b6:41:20:79:93:99:83:3e:24:d8:de:47:46:06:19:16:
         d0:d1:ec:66:12:12:58:d1:60:0e:7a:71:be:56:67:b5:4e:53:
         a5:17:41:0f:cc:76:d1:4e:27:87:74:ef:7c:68:82:bc:41:fd:
         5c:f2:0a:5f:90:53:ed:3c:c2:bf:46:3d:cd:2e:20:84:ae:7a:
         60:71:b8:e1:69:d1:eb:01:dc:7c:65:12:9e:46:b8:f4:0b:c0:
         bd:57:01:65:35:84:e3:4a:49:6f:00:63:01:d8:31:7e:f6:62:
         44:ee:65:7b:fd:fe:7d:ce:bd:01:92:ac:2f:0b:23:73:a4:67:
         b8:ef:64:e3:b4:52:84:92:2d:8d:f0:ff:97:cf:16:e6:59:4e:
         fc:82:87:60:2c:77:10:c0:42:68:46:aa:f9:ba:39:49:f4:08:
         8b:bc:0c:e5:84:69:31:21:5b:02:e3:a8:ad:63:15:5a:2c:47:
         e1:58:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----