Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File:                     iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier:          hsXWW9+6Z+WfRD6fuknHZg02o7Q5REBMZrU2reVD8II=
Subject key identifier:   5B:67:FF:5F:EB:9F:78:E2:0A:82:C0:5E:75:7F:44:7F:FD:3F:34:B9
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer:       /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial:       01962E9956B82378FDD217D89BB4842BB085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: KbHSaDitknf_vw2Y0vNPZiG2-WU.roa (hash: vniSFXySv0YzFNsEhCVOvtXFilzUNKpEfWkX3Qio2Lg=)
                          2: WU24XorRtjD4J7y5MHzTmh_a7sU.roa (hash: IX430pDMzb+z+kWkDQJg9gwBTJRqIpyiieKSVe0HAtQ=)
                          3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: XuXQ1J44LudST3J7XJ3bL0Dcn8quoan9mPG0wd2IpVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:56:b8:23:78:fd:d2:17:d8:9b:b4:84:2b:b0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=5b67ff5feb9f78e20a82c05e757f447ffd3f34b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:ab:ac:f9:00:71:7c:61:92:36:32:65:f7:
                    a9:c3:1c:b4:59:fb:f0:d5:e1:07:9d:4f:61:b4:4a:
                    c1:3f:9a:36:ce:6d:20:0b:ed:86:54:ff:e2:92:f5:
                    47:72:26:ae:f5:22:df:bc:8f:80:13:c8:8f:ea:e3:
                    01:54:9c:58:f8:d8:40:41:0a:bb:5e:d0:09:70:45:
                    35:9a:d6:67:06:ba:70:f0:6c:8f:df:97:72:34:4a:
                    2e:ff:d3:65:c6:f8:ce:45:c0:b7:3e:53:d3:4f:3e:
                    04:70:b0:33:80:02:38:32:ca:14:50:40:ea:b5:ae:
                    57:b8:17:a0:d1:fc:bf:c7:72:03:fe:08:fa:37:eb:
                    13:dd:c8:e2:52:57:2b:c7:58:d1:31:c1:11:36:67:
                    13:66:db:26:23:02:27:da:b9:b4:20:96:7d:27:d3:
                    13:9c:5e:85:c5:e3:ca:be:da:67:9e:63:a2:81:fc:
                    3c:c0:1c:86:a8:89:4c:18:55:67:4b:ae:b1:7a:7d:
                    5f:67:21:68:33:36:53:48:a2:0d:b7:b2:e5:6f:eb:
                    23:eb:a9:9d:6f:5b:9a:f2:99:64:bc:05:f2:34:6f:
                    fd:16:a3:80:35:d3:a0:29:0f:38:48:c9:84:5b:01:
                    dc:82:1c:50:3b:5e:07:ab:0b:54:b1:9b:f3:23:dd:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:FF:5F:EB:9F:78:E2:0A:82:C0:5E:75:7F:44:7F:FD:3F:34:B9
            X509v3 Authority Key Identifier:
                keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:39:80:b9:25:f7:0e:2b:0f:48:b3:10:53:98:5a:28:d6:cb:
         cf:67:23:1c:fa:f7:c5:07:a5:8d:f9:1b:d7:d9:54:8c:e5:99:
         67:cb:7e:e5:21:ae:1e:02:2b:0c:30:7f:71:b6:9a:37:41:7b:
         ed:b4:ba:4a:24:88:21:bf:33:7f:72:b6:dc:62:f9:9e:51:fa:
         71:59:7e:be:c3:7f:a6:a2:a8:56:1e:f3:e4:e0:88:c3:bb:9e:
         4d:00:4a:88:5e:b2:b1:32:22:38:d2:d7:aa:91:e4:85:4b:e1:
         24:bd:86:28:04:ef:8b:0f:db:bd:ac:6d:39:d6:9b:75:fc:2f:
         21:9c:f5:f1:0f:30:5b:85:14:2a:e0:fd:b0:75:fe:9a:0b:8e:
         fe:ca:ba:a2:b1:3a:84:fe:a4:27:4d:68:a8:62:ad:50:70:9f:
         28:3c:90:1a:26:2e:77:24:f1:50:96:76:67:0a:3b:1a:96:af:
         30:11:63:b5:18:28:69:43:69:14:14:57:fc:57:54:fe:fd:d2:
         21:32:f5:9b:2f:38:b8:69:5f:67:ec:82:78:31:8b:e4:82:dc:
         b8:38:87:5f:ea:5c:3e:4f:87:5d:ca:7c:45:e9:6e:61:43:4f:
         ea:7a:bb:a9:08:70:ce:db:b1:4c:07:72:8c:81:e6:d0:57:e7:
         b7:70:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----