Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File:                     io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier:          GPkTAAzW2Hd5emULdmdDpZqUzn3u35Kzdd9yYuAoEU0=
Subject key identifier:   8C:2E:61:4A:FD:3D:61:30:16:D5:B8:86:65:D4:F4:9A:12:6B:32:39
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer:       /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial:       01962DF3D3297014195EF4A353844CB9C619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number:          063F
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
                          2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: 4IQy8LHHc9farHWMpGB9lxmq45fPhcFDZQCn9+5PPFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:29:70:14:19:5e:f4:a3:53:84:4c:b9:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=8c2e614afd3d613016d5b88665d4f49a126b3239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:a5:74:64:80:3f:b6:e4:f5:9e:93:3d:28:
                    3e:c4:af:c4:b8:06:59:a0:49:67:4b:ea:4b:9d:dd:
                    ba:f3:84:2b:33:eb:a5:2c:de:13:26:d4:01:05:b5:
                    4a:ed:19:25:da:b3:31:24:88:0d:a3:92:01:8a:ca:
                    63:1c:42:91:e0:6c:a2:14:2c:72:21:9c:46:d2:65:
                    c6:37:a4:2c:f6:81:59:5e:dc:84:26:99:dd:30:c0:
                    35:c3:ce:55:a6:fb:a9:8b:23:20:06:6e:38:8e:b5:
                    a5:86:8f:d6:0f:99:9b:95:76:32:e8:f4:e7:3c:af:
                    7f:cf:04:94:dd:e2:ef:33:04:a7:46:eb:2a:bf:d6:
                    12:d7:8e:20:83:9f:17:09:b2:2a:65:4d:de:9d:89:
                    24:b3:33:13:87:bd:c5:5a:e5:ea:e9:58:fc:d8:67:
                    76:d4:b9:06:ba:a7:76:51:6e:ff:0e:7f:48:2e:00:
                    1b:2b:1c:11:5d:42:cd:a5:b8:9d:00:ac:48:c6:ff:
                    28:4d:e6:c8:75:99:26:a4:c2:03:81:35:c2:b9:50:
                    bc:c1:f0:83:c0:3d:e6:b2:a2:ae:13:70:ad:90:75:
                    61:1c:37:cd:6c:65:71:ef:cb:b8:a7:f6:06:8a:08:
                    6c:bf:63:de:fb:b8:2e:e5:c1:93:f5:65:ca:66:d3:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:61:4A:FD:3D:61:30:16:D5:B8:86:65:D4:F4:9A:12:6B:32:39
            X509v3 Authority Key Identifier:
                keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:25:38:0f:92:2c:f0:59:99:d3:f0:11:d6:b2:de:0c:0d:64:
         11:a9:92:fd:64:c1:f9:fb:38:62:b9:46:c7:79:74:5f:84:62:
         52:32:3a:7a:0c:1e:7f:e4:af:43:bb:7f:f6:6b:4b:a7:af:1a:
         90:23:36:b4:b0:ce:d7:00:73:c0:c7:48:4f:db:9c:19:8b:fb:
         4c:36:c4:d2:58:70:82:16:dc:48:0c:91:b3:72:d3:ee:76:8d:
         4f:45:fa:b1:d9:cb:c1:4e:50:09:4c:c5:ba:92:ac:9a:bf:f9:
         45:86:e9:2b:40:8f:08:3e:fb:56:05:7d:b6:41:22:d5:06:06:
         92:db:5a:7d:34:5b:f1:db:ef:36:1a:ca:1b:f1:84:22:6b:0a:
         b8:8e:ac:54:9a:47:5a:83:9c:07:b0:5f:fc:3b:61:93:94:76:
         5b:cc:32:5f:ef:47:cb:7f:ed:1e:d5:3e:f9:d2:71:6e:9f:81:
         50:6f:b2:69:f6:c3:1e:8b:d1:99:9f:1f:24:bf:1b:7d:e7:50:
         60:53:2b:d9:15:3d:f7:41:9d:3d:18:be:d4:13:92:d3:30:7d:
         f5:92:aa:05:ad:9c:6d:b3:98:86:35:bb:82:0a:a1:39:53:39:
         16:3a:47:b3:a4:c4:37:9b:88:89:c4:0b:3a:1d:f8:fa:2a:bf:
         2e:ce:67:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89MpcBQZXvSjU4RMucYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl
NTQ0ODYwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg4YzJlNjE0YWZkM2Q2MTMwMTZkNWI4ODY2NWQ0ZjQ5YTEyNmIzMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5GldGSAP7bk9Z6TPSg+xK/EuAZZ
oElnS+pLnd2684QrM+ulLN4TJtQBBbVK7Rkl2rMxJIgNo5IBispjHEKR4GyiFCxy
IZxG0mXGN6Qs9oFZXtyEJpndMMA1w85VpvupiyMgBm44jrWlho/WD5mblXYy6PTn
PK9/zwSU3eLvMwSnRusqv9YS144gg58XCbIqZU3enYkkszMTh73FWuXq6Vj82Gd2
1LkGuqd2UW7/Dn9ILgAbKxwRXULNpbidAKxIxv8oTebIdZkmpMIDgTXCuVC8wfCD
wD3msqKuE3CtkHVhHDfNbGVx78u4p/YGighsv2Pe+7gu5cGT9WXKZtPXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwuYUr9PWEwFtW4hmXU9JoSazI5MB8GA1UdIwQY
MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt
OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4
LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiU4D5Is
8FmZ0/AR1rLeDA1kEamS/WTB+fs4YrlGx3l0X4RiUjI6egwef+SvQ7t/9mtLp68a
kCM2tLDO1wBzwMdIT9ucGYv7TDbE0lhwghbcSAyRs3LT7naNT0X6sdnLwU5QCUzF
upKsmr/5RYbpK0CPCD77VgV9tkEi1QYGkttafTRb8dvvNhrKG/GEImsKuI6sVJpH
WoOcB7Bf/Dthk5R2W8wyX+9Hy3/tHtU++dJxbp+BUG+yafbDHovRmZ8fJL8bfedQ
YFMr2RU990GdPRi+1BOS0zB99ZKqBa2cbbOYhjW7ggqhOVM5FjpHs6TEN5uIicQL
Oh34+iq/Ls5nMQ==
-----END CERTIFICATE-----