Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
File:                     0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft (raw, json)
Hash identifier:          WHfOr1kairh+chHgNmpUUnnucEhq6dj1iivrUANg6CQ=
Subject key identifier:   1E:A7:BD:6B:93:6B:2F:7A:09:F2:75:F7:E1:33:59:F8:A4:68:B2:B2
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       01962E9917393656118B5F5D183A81DE55D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
Manifest number:          0F9A
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl (hash: mc4gAX1Tz/wLVzsUJynEvWFIi0MoW8z86PZFd5lJrpo=)
                          2: rfxK95wCJYlz8bBxZevQEHg20gE.roa (hash: 8l01FF6TVdT6B24/91ZO6lRY0qxUT4iiEOhJmZiX1rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:17:39:36:56:11:8b:5f:5d:18:3a:81:de:55:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=1ea7bd6b936b2f7a09f275f7e13359f8a468b2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:df:46:0b:ea:70:d6:d8:a3:35:fb:ee:4f:
                    09:9f:ab:1c:f6:71:0d:94:ec:83:2a:e0:c9:8e:b2:
                    32:20:4f:0f:b8:ef:56:e1:07:c0:99:ff:90:4e:98:
                    b6:0c:f1:70:c1:9e:3c:eb:1b:d9:2d:ad:a4:c6:96:
                    a5:ad:d4:89:02:28:2c:8f:14:a0:f0:98:59:f2:d1:
                    2e:0a:0d:31:16:ab:13:f7:91:14:71:52:7d:01:60:
                    6f:1b:1e:0f:66:da:9e:cc:f3:b2:20:ab:86:57:dc:
                    3e:b1:ab:5d:39:16:e3:32:0c:0c:d2:bb:87:74:74:
                    ed:6f:31:83:25:d8:dc:10:5e:c6:17:98:90:2f:a5:
                    2c:30:11:e7:8d:a4:70:22:e7:54:2c:62:c4:61:5e:
                    83:b8:74:b8:90:33:5c:e9:a9:b1:d8:25:21:4b:28:
                    d9:a0:c4:c6:53:ba:e5:b4:18:00:d5:d6:05:16:f5:
                    5d:d6:cc:f7:69:4e:19:de:f7:99:27:28:05:ce:82:
                    90:b3:2f:2c:86:d2:c9:2e:b7:83:cd:82:e8:66:e9:
                    65:e9:3d:e7:7f:85:4a:96:2a:f9:ca:83:3d:82:3e:
                    6e:0f:26:b5:73:a6:a1:7b:5c:52:f8:14:bf:e5:0c:
                    99:ca:81:fc:7f:5b:4d:18:bd:25:16:62:29:6f:d9:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:BD:6B:93:6B:2F:7A:09:F2:75:F7:E1:33:59:F8:A4:68:B2:B2
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:02:a1:98:64:2c:bf:0f:04:61:45:ea:6d:b5:b3:dd:58:
         0c:5e:ca:3d:99:b5:6a:8f:96:08:53:2f:90:18:63:75:d8:6e:
         b5:99:aa:74:46:e0:d9:a7:db:ee:4b:2a:c5:b7:d1:f3:d5:4c:
         4c:27:7d:2e:bc:b4:32:70:01:85:3c:ae:74:b2:56:64:b9:83:
         14:83:37:08:3e:ab:d9:8d:2c:73:19:e4:66:c9:7c:fe:6c:3d:
         11:f2:6b:63:b9:d8:18:fc:23:cb:0f:08:72:8e:7f:f6:1d:ad:
         cf:36:1c:ea:0c:66:59:17:56:da:fb:6e:e3:a2:b5:d9:ab:a3:
         9f:7a:c0:6a:a9:88:9f:de:5c:7c:10:24:69:f1:48:b4:5b:f0:
         d6:f4:f8:cb:ce:1f:84:86:84:3a:39:04:9a:3f:56:04:99:d5:
         33:f7:9e:d9:3d:37:43:4e:6a:88:2e:b9:8f:bd:36:1c:61:cc:
         01:43:ba:a8:c1:09:12:bf:49:ee:aa:5f:cf:a8:c2:20:a0:05:
         46:b6:98:da:79:a5:81:94:49:34:3c:44:54:7e:a3:64:2d:0d:
         49:bc:2f:08:77:b5:d1:ad:59:ef:c2:e1:95:29:ce:b1:14:5b:
         21:3f:4c:5b:25:96:7d:06:48:9f:3c:dc:d7:b8:50:a0:f7:fb:
         f1:08:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----