Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File:                     iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier:          9rHX2C1EnVQPtjxta8fnNTnBYmJQRGPTmS9w3Q+1Evk=
Subject key identifier:   1F:98:42:39:E0:59:90:97:F6:D9:95:4F:F7:67:72:94:D8:3B:63:F9
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer:       /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial:       01962F069FA115E0CF406F2E54D60BBD6DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number:          099F
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: /q53Dtt892esboSrzY/ICJc03EvjLqWqiOGlv/cpXO8=)
                          2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:a1:15:e0:cf:40:6f:2e:54:d6:0b:bd:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=1f984239e0599097f6d9954ff7677294d83b63f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:64:ce:7d:c2:5d:0c:da:7b:66:5d:8b:fa:
                    d0:8d:9d:01:c7:bf:1f:85:53:7c:59:64:01:b3:ae:
                    cb:0c:51:87:11:fb:0a:d1:35:ee:d3:97:f3:90:fb:
                    b2:17:f8:b4:45:d5:f6:6f:05:1f:76:d0:c8:0b:8f:
                    af:da:d6:8c:a8:a1:43:7d:e1:b6:ca:87:f2:2b:54:
                    27:8b:ab:58:ae:cb:2d:e7:2e:df:aa:08:df:7b:aa:
                    b5:11:a1:b0:44:28:f1:19:2f:23:ff:76:a5:bf:3f:
                    80:85:23:a4:88:fb:9c:ab:47:b7:24:4b:2a:0a:8b:
                    26:39:27:f4:66:de:0b:b2:22:16:ad:c6:49:a2:08:
                    be:7a:cf:04:9f:bf:87:ea:90:4e:b2:39:2b:20:8e:
                    51:e0:dc:ec:2d:7f:8d:1c:70:ab:69:bb:e9:fc:6f:
                    ae:0a:fa:e8:20:1d:0c:d3:12:7a:29:7a:b6:4c:f6:
                    67:99:6d:c2:7a:8d:24:45:c6:98:fc:88:07:ab:20:
                    c4:d0:11:f8:57:77:74:67:a8:b9:4b:c1:5f:b3:3a:
                    91:e9:20:8c:bb:63:2c:88:88:7d:4e:39:0f:a7:a8:
                    fb:a2:5f:f0:52:2e:8d:e5:ad:20:10:b8:ae:17:1b:
                    dd:8a:6c:d8:cb:86:a6:2e:55:f7:97:16:9a:b6:d8:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:98:42:39:E0:59:90:97:F6:D9:95:4F:F7:67:72:94:D8:3B:63:F9
            X509v3 Authority Key Identifier:
                keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:0d:d0:b9:10:7a:ec:42:3c:76:be:7b:60:53:51:46:e8:
         d4:01:ba:36:58:f1:5e:dd:1b:e1:34:00:f0:4b:67:89:ef:38:
         cb:09:54:22:73:19:69:bf:39:32:db:15:89:ca:e9:8c:eb:4e:
         02:0c:b7:83:79:bb:21:2c:61:b0:db:d5:c7:9b:1a:06:10:2a:
         aa:1c:d4:01:1d:27:c2:c0:dc:b3:0f:e6:b8:84:b1:80:26:5c:
         b5:0d:3b:fd:fb:ac:68:c4:07:71:64:aa:d5:45:91:d6:8f:0f:
         26:b7:d3:1a:9b:ef:da:75:c6:95:4e:83:0a:d0:93:b1:09:9b:
         10:68:1a:5d:72:4c:b8:40:a2:50:3f:05:ad:82:c6:1b:c5:fc:
         f2:eb:ff:80:22:33:df:8e:56:3b:e6:c0:37:48:c8:fb:42:ec:
         34:bf:8e:8c:aa:9a:9d:a2:1c:38:03:3e:25:31:da:a7:43:72:
         3c:4f:b4:d2:13:59:2b:51:f5:6b:e2:39:ea:64:67:9d:38:bf:
         e6:21:ac:07:6b:01:8c:66:ff:89:63:47:c7:02:5b:e2:3e:66:
         e1:35:aa:62:a0:85:bc:cb:a7:91:2d:82:13:a1:15:8e:dc:c7:
         04:d1:ba:b8:f0:4b:e3:d0:31:50:88:ec:a7:44:27:e1:e5:28:
         d4:b7:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----