Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File:                     izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier:          ERCTNVIq2mLjfuV+ednp3/3C7UoRKeGNrN3o2DGDuq0=
Subject key identifier:   45:FE:A1:FD:95:24:29:14:7F:AE:E5:B5:89:20:1C:8C:E5:5F:CB:BB
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer:       /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial:       01962F3DCB9175B558FDC194C98C7D5F21C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number:          11E6
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: XgK3rd6ofkQ3IAGQbsCpmVy6teqxklBbLc4Y9MVCphk=)
                          2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:91:75:b5:58:fd:c1:94:c9:8c:7d:5f:21:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=45fea1fd952429147faee5b589201c8ce55fcbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9c:f9:23:57:61:23:4c:bf:0d:06:71:0c:51:
                    fd:94:02:3d:ea:9d:bf:ec:a3:a1:fa:f5:33:ed:79:
                    a5:ee:0d:1f:04:b2:86:e0:7a:d9:28:b4:46:e0:f8:
                    bc:8d:56:ee:51:34:30:57:e1:a7:0a:44:ba:38:eb:
                    94:33:81:96:28:37:b5:fb:04:be:d7:7c:07:bf:34:
                    59:8d:fb:14:6f:64:18:36:09:a4:d1:f5:01:fb:c4:
                    b8:0b:1d:34:9c:76:74:30:20:c3:54:05:1e:de:00:
                    77:09:9a:90:63:e3:67:76:ca:0b:fc:2c:21:a6:d4:
                    85:14:86:c5:a5:07:bd:25:a4:0e:1a:9a:2a:c1:85:
                    d6:b3:b8:a8:90:aa:a1:40:21:39:95:56:16:a6:90:
                    7c:87:c7:4c:47:7a:5e:49:91:ac:68:86:42:66:2b:
                    de:ec:94:34:a1:bf:98:fb:ef:af:25:1b:92:40:e8:
                    d4:4b:f9:42:fc:9d:a6:de:87:1f:0d:10:f0:11:09:
                    bc:4c:63:5b:57:88:71:46:13:d6:72:51:01:a2:e2:
                    61:40:1d:51:66:97:c3:bf:86:0a:67:7c:85:00:12:
                    4f:04:39:d3:4d:02:53:b0:2b:ff:94:80:17:76:bf:
                    26:60:d0:cb:f7:ae:5e:61:24:d2:f2:ed:2d:cd:19:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:A1:FD:95:24:29:14:7F:AE:E5:B5:89:20:1C:8C:E5:5F:CB:BB
            X509v3 Authority Key Identifier:
                keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:35:6a:e0:b0:0f:bf:c5:e9:bf:26:52:3c:c0:db:02:14:
         15:63:40:af:d9:24:b8:3e:a8:da:e9:e9:93:dd:96:6a:50:83:
         34:70:9c:ba:ae:b8:3d:4c:0e:36:03:f8:39:61:75:dc:07:6b:
         b3:cb:23:ca:5c:fc:bf:79:92:c8:92:fa:f8:c5:1c:7c:1e:a4:
         9f:d2:1c:da:97:19:f9:c7:6f:2f:c0:01:c2:8d:0b:58:f1:a7:
         72:c1:1e:e0:1f:c0:36:1b:b7:32:34:f0:06:e2:47:00:60:ea:
         a3:5c:7b:3f:d3:c6:b9:be:78:81:23:44:24:1e:20:b7:f2:27:
         24:98:55:b3:ad:c0:39:53:91:5a:d7:8a:ef:e9:d9:f8:26:65:
         dc:18:eb:3b:4f:03:9e:e7:b6:c1:fe:59:29:68:e3:80:8e:1d:
         9f:37:44:ad:2a:b3:df:e1:20:24:db:8c:a6:e8:45:76:dc:0e:
         a6:30:29:87:2e:b4:7c:8e:57:ea:31:da:0d:5f:59:a3:99:13:
         59:0f:cc:ff:8d:92:91:8f:27:59:14:53:5c:bc:33:67:c1:4d:
         36:96:c3:28:c4:25:1b:16:da:7c:2f:5b:2e:30:17:3d:7b:8d:
         28:c2:d7:06:6f:00:71:24:64:cd:20:df:cd:60:12:25:83:ab:
         86:14:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----