Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File:                     IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier:          k+S/4opBSTVBWmykQ3swgmKSjJQ4O+q12ZbxSfssxug=
Subject key identifier:   E2:B6:23:58:70:2E:D5:AA:19:50:7C:64:14:7D:54:D0:0A:4A:2C:17
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer:       /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial:       01983502D396B961FA8346906B4FA2E7F109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number:          133C
Signing time:             Wed 23 Jul 2025 02:00:34 +0000
Manifest this update:     Wed 23 Jul 2025 02:00:34 +0000
Manifest next update:     Thu 24 Jul 2025 02:00:34 +0000
Files and hashes:         1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: jnEpKGAndK/rhWSoloBX7NxYg+18/s+WEHeeDqc7gVA=)
                          2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
                          3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:02:d3:96:b9:61:fa:83:46:90:6b:4f:a2:e7:f1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
        Validity
            Not Before: Jul 23 02:00:34 2025 GMT
            Not After : Jul 24 02:00:34 2025 GMT
        Subject: CN=e2b62358702ed5aa19507c64147d54d00a4a2c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:35:75:39:7a:42:0a:23:d8:08:04:b7:59:
                    cd:e3:05:7e:45:b4:63:c2:3d:b3:78:04:5c:d1:6b:
                    b2:77:16:ff:a2:d2:e6:05:35:40:0e:89:36:d0:ca:
                    28:59:3c:34:32:4e:d8:b1:64:5c:e8:c9:e7:6d:60:
                    7a:03:d0:40:0f:09:46:7b:93:85:e7:e6:0f:91:9e:
                    a2:1c:69:1f:35:dc:fa:76:76:8c:e6:62:82:60:19:
                    a1:ea:a7:5d:d8:b2:d5:d8:4d:24:11:52:7f:73:52:
                    a7:92:86:00:18:71:76:cb:9c:b9:e1:93:53:9a:78:
                    b7:60:04:9e:f1:21:94:e4:b9:67:36:5c:17:3b:bc:
                    e7:23:f4:0e:97:fd:fa:79:4c:b7:7a:37:b6:4f:52:
                    c9:f6:4c:2c:63:7d:da:c9:3d:2f:21:f5:73:f6:36:
                    0b:ef:f2:17:d7:be:06:98:c3:cc:35:d7:8c:88:9c:
                    72:89:7d:97:8f:f6:0b:f7:ac:8a:9b:65:d0:0d:16:
                    1c:d9:42:a9:74:99:42:b3:b2:c7:ef:70:34:fa:2d:
                    6f:33:a9:26:40:14:0e:af:ad:ae:08:59:53:77:8c:
                    7c:4d:b4:e5:01:4b:f4:e0:b8:a6:0e:7e:b8:20:01:
                    85:55:11:1e:83:0c:be:29:51:32:57:8d:7a:0d:a7:
                    27:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:23:58:70:2E:D5:AA:19:50:7C:64:14:7D:54:D0:0A:4A:2C:17
            X509v3 Authority Key Identifier:
                keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:8a:80:bd:2a:10:dc:6c:a2:f9:a0:13:08:e1:2a:25:fc:
         ad:c5:45:71:f2:74:a7:94:0b:a2:f9:76:c4:99:f2:f4:c9:3e:
         81:d5:dd:4e:f1:c5:e1:34:03:4a:cd:6b:4b:ba:93:83:a5:a1:
         9f:85:53:66:3b:e9:20:7b:a2:ef:b7:83:48:5a:49:1b:63:31:
         cf:96:6c:49:0c:f8:69:f3:92:4c:53:bb:4a:00:60:29:92:26:
         c3:53:35:64:c1:2c:93:7f:4f:3b:72:f2:a5:ef:c8:09:6d:06:
         c9:bb:4d:5a:8e:db:09:6c:7a:b1:fa:9c:13:54:ed:58:39:32:
         fa:ed:05:f1:5a:1c:c2:b7:b2:8a:18:a3:a6:5f:0d:00:60:6f:
         4b:0c:17:1b:20:35:ce:86:83:89:20:ec:64:1d:66:d7:76:c7:
         b5:62:2a:74:bd:ac:1e:f3:c4:77:1e:7e:96:e3:a8:f9:89:61:
         11:ef:12:5a:57:39:f8:77:33:fd:0b:32:58:d7:3d:e6:da:fe:
         e1:f8:5b:ea:6c:94:8c:09:33:18:d6:e6:49:64:28:2b:1b:25:
         10:1e:bf:64:5a:80:87:40:60:f2:35:f3:94:96:9e:29:7b:b7:
         2d:a8:41:34:74:41:5c:f9:ce:a4:1a:09:9f:61:3b:ce:44:0b:
         62:f7:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----