Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File:                     IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier:          90u4Ng7HSMVRon9nVj+yC9ZupEYdbDe1bUbJltE0IKk=
Subject key identifier:   69:C0:75:B6:43:A4:9D:A0:39:CD:02:F6:EE:D0:8D:E0:58:35:CD:AF
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer:       /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial:       01962ECFAF8B08F8A20CE5CE0387010929A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number:          110D
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: B7qffy/fcF14Bbd0ooJmTQZos0VBtksomGzkkv0BRfw=)
                          2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:8b:08:f8:a2:0c:e5:ce:03:87:01:09:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=69c075b643a49da039cd02f6eed08de05835cdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:7d:80:b9:13:73:89:16:3c:05:62:62:73:
                    48:00:46:70:5c:af:6a:e4:d0:88:91:78:4b:cc:8f:
                    e7:4a:c6:95:c2:bc:2f:65:cb:c9:a2:41:d5:09:c6:
                    d7:cb:ac:f5:51:8a:5c:e3:b8:ff:ff:ae:86:18:a2:
                    15:0a:f2:1f:09:53:d8:e0:22:00:1a:e0:6d:4d:ee:
                    b1:d3:af:a0:34:b7:ca:6f:fc:46:55:7a:67:c4:19:
                    6e:f3:d8:1c:b4:07:c3:94:37:9e:f7:de:1a:ed:9d:
                    7d:6c:26:df:87:db:9c:e7:01:84:41:19:71:3c:11:
                    a5:62:88:41:78:cd:bd:4e:1e:ea:3e:dc:eb:b0:8f:
                    e6:a5:11:c2:d8:40:67:d3:46:f0:18:ec:f7:67:17:
                    20:74:c9:4d:42:4e:90:2c:3c:99:36:8c:f7:a1:03:
                    60:e1:c3:a5:4b:00:86:0d:fc:63:0f:c7:b3:e8:6b:
                    4f:a0:51:15:11:95:b6:10:14:74:d0:cf:bd:d9:fa:
                    c3:b0:c7:f3:48:e1:73:b1:a0:e1:c1:ab:ec:08:04:
                    45:5f:81:e3:15:4f:63:22:c8:09:ec:bc:66:b0:ab:
                    a3:c5:54:1f:ab:97:28:4c:16:c2:5b:cc:b5:e4:c2:
                    4e:d5:76:6b:73:3f:7e:9d:5b:b8:2a:cd:49:d3:f6:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:75:B6:43:A4:9D:A0:39:CD:02:F6:EE:D0:8D:E0:58:35:CD:AF
            X509v3 Authority Key Identifier:
                keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b8:61:19:5c:e3:82:06:96:8d:28:0e:d7:2e:3c:85:09:44:
         20:45:c3:71:a6:fd:3e:09:e9:33:55:07:8f:91:b0:89:39:36:
         62:ea:9f:21:94:cb:2d:44:46:5b:9c:fd:95:1f:f0:49:fb:e6:
         23:f4:99:d5:02:67:06:d4:24:4f:2a:c6:12:3d:ea:67:9a:3c:
         3c:82:58:0c:65:59:3a:fb:14:8e:72:7d:95:5f:ef:fa:df:12:
         7b:bc:a8:d6:04:94:6c:6f:e0:54:05:4e:66:46:fa:f5:79:f8:
         ff:dd:40:79:2e:91:87:f3:6d:4f:1f:da:fa:35:ef:4d:a2:c7:
         d2:48:e0:fa:a5:9f:ee:c9:b1:84:d2:82:14:34:ce:a2:01:d0:
         af:10:b9:fc:b3:de:d7:09:9a:89:9c:11:7b:31:7a:08:99:94:
         0f:e8:d9:ec:4e:02:3a:31:c0:fd:94:62:2b:73:80:bb:10:3c:
         78:5f:a1:ab:60:2d:21:81:ba:76:df:43:34:3b:ee:b3:a0:5c:
         82:c0:7a:ba:da:93:7b:64:b6:be:93:e4:93:7b:e1:7f:42:c9:
         57:6d:eb:3b:a0:10:46:27:f4:2c:3c:71:9f:f7:62:70:dc:5a:
         c7:41:11:05:d2:64:9e:d8:58:da:fa:30:7a:dc:17:0e:db:b8:
         29:f6:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----