Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File:                     ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier:          8HV1LgKbufqsX0yRtGv/2SvunEAob4u5t/bTiRrMD28=
Subject key identifier:   D5:8D:85:55:A8:37:6F:FC:36:5E:EF:79:CB:65:3A:DB:20:BE:70:C2
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer:       /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial:       01962F06A255704853A54A842BEC54024606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number:          13DC
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
                          2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
                          3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: gf3zFMi73rStvtKjgFNy0pQ86io7WxSxcHqc5AffVLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:55:70:48:53:a5:4a:84:2b:ec:54:02:46:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=d58d8555a8376ffc365eef79cb653adb20be70c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:15:af:de:43:ff:c6:38:84:85:68:76:0c:
                    26:da:82:8f:aa:0a:3d:62:f7:30:dd:31:fb:4d:c3:
                    13:4d:de:6e:1b:d1:af:3d:8b:cb:76:2b:bd:cd:80:
                    8a:ef:8b:6e:94:bb:4a:f0:d1:86:e7:be:08:99:8c:
                    0e:a4:22:5f:57:a5:d8:ca:7d:e4:f0:6f:6c:f9:1a:
                    d6:98:cf:25:21:9d:b7:54:56:28:35:9f:ad:9c:03:
                    70:25:cf:64:77:33:d4:55:9c:05:cc:1b:4e:a8:79:
                    60:c2:37:e0:90:f9:8e:86:60:55:40:96:96:c7:51:
                    f6:a5:09:ca:72:ea:9b:12:cd:29:0c:af:67:41:64:
                    70:ff:24:3c:3d:dd:3b:25:91:b4:90:c7:be:46:b8:
                    07:6e:19:57:b7:e7:a5:0a:0b:48:01:0e:70:94:33:
                    d6:39:ec:a5:b3:20:e1:f0:5e:ee:31:6b:04:f8:30:
                    e4:9a:48:4f:dd:80:66:ce:0d:7f:fc:c4:e8:ca:4c:
                    b3:3b:a3:64:59:18:ea:40:53:f8:59:99:80:56:e3:
                    ce:0e:a1:be:71:d9:6f:3d:c2:cd:cc:65:88:c6:98:
                    ae:19:cf:fd:e5:1e:30:c8:b7:ba:88:59:15:bc:e8:
                    a0:2d:9b:e9:65:d8:59:1e:96:0a:af:a0:b8:ad:ea:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8D:85:55:A8:37:6F:FC:36:5E:EF:79:CB:65:3A:DB:20:BE:70:C2
            X509v3 Authority Key Identifier:
                keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8d:84:12:28:ac:09:24:94:2d:97:0c:f9:4e:3d:37:10:90:
         f1:e4:fa:f9:a6:c1:21:9a:64:30:f9:3d:eb:06:fd:69:38:0e:
         c9:28:c5:3f:00:56:bc:7c:8b:c9:aa:29:d9:30:a9:ee:c5:d4:
         cc:d6:bf:3e:c3:67:31:bd:52:3a:06:41:a4:3f:a7:a5:8f:f1:
         7b:16:6e:1a:b5:ed:a2:4e:78:41:34:d1:a8:d4:ac:36:b2:fc:
         0d:35:dc:46:fe:ba:4a:1f:00:ee:dc:64:42:d3:21:98:38:fd:
         63:d7:ad:83:60:f0:83:ea:3e:9c:81:25:d4:78:7e:80:96:3f:
         8b:78:d3:fa:92:50:ad:d4:7d:79:c9:62:5d:a6:27:fc:4f:65:
         1a:52:3b:34:56:e3:11:a0:c0:37:eb:ce:2e:6b:78:0c:4f:e4:
         f5:00:ed:4d:86:17:3b:4f:85:d6:39:70:82:f5:d0:c1:24:38:
         42:14:0c:77:f0:89:1d:66:c2:f1:31:22:63:c6:4b:f3:f4:65:
         ea:50:0a:1e:9b:71:4e:85:99:95:b1:f3:34:9c:22:45:8c:79:
         4f:54:01:6c:fc:dc:a8:88:9a:e7:a2:af:be:c4:91:6b:3c:50:
         28:03:d4:ae:c9:fd:9d:70:d2:59:9d:2d:9c:b8:ff:9e:a9:36:
         a1:1d:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----