Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File:                     iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier:          Is1XWVZJMUUKqpvBpvAmttL/9gd3GhumbZgpR0z5/XY=
Subject key identifier:   B1:EB:44:59:96:1C:AD:24:FC:FB:62:58:19:C8:55:52:DC:1D:BC:A9
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer:       /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial:       01962E61C12D03BD003652DA0694EABA8AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number:          1266
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
                          2: McPECbWiOZZptuHIWFrOcEgtdOI.roa (hash: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=)
                          3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: pCfA3zOM7IuVCXtr+WtTMFYX+8AOADIrtKyfBdlEArw=)
                          4: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (hash: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:2d:03:bd:00:36:52:da:06:94:ea:ba:8a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=b1eb4459961cad24fcfb625819c85552dc1dbca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:92:3c:dd:04:70:40:78:cd:78:fb:c8:00:
                    3a:61:2b:51:e4:5a:73:ba:4f:fd:e8:74:11:65:ff:
                    66:3b:e0:4c:d3:0b:ee:c1:04:20:b3:0d:65:0e:15:
                    b8:20:8b:14:54:b5:d5:62:05:70:32:b3:9d:ef:b7:
                    dc:ad:cb:34:d8:99:a6:75:73:23:75:02:07:7d:d5:
                    ae:b5:c7:04:34:67:9c:64:5a:46:46:53:06:f1:77:
                    1e:21:bd:ca:69:ea:f4:92:a0:fc:bd:b3:84:16:64:
                    25:1f:0b:78:f9:9c:7c:a4:55:42:c7:af:d4:24:47:
                    a2:82:7c:8e:9d:60:f2:65:4f:cb:54:2c:48:36:59:
                    d7:a5:fa:fd:41:4f:11:8b:ef:40:bc:28:a6:3c:1b:
                    60:bb:73:c7:dc:15:28:cd:b0:d1:b3:12:d6:e1:d6:
                    ad:99:b8:e4:0c:c5:87:ee:2e:71:15:c2:6f:c3:08:
                    4c:2c:0b:20:36:10:82:1c:a3:be:60:1d:ea:f9:00:
                    d0:11:6f:98:ab:2d:c2:e1:64:76:86:43:27:d0:21:
                    46:9d:48:e2:4e:ee:78:47:63:bc:94:23:55:9d:ea:
                    70:4a:5a:9a:be:d1:9e:b4:48:9e:31:e1:d0:4a:f6:
                    38:9a:59:ba:79:6c:2a:77:3f:cc:70:b3:c2:15:50:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:44:59:96:1C:AD:24:FC:FB:62:58:19:C8:55:52:DC:1D:BC:A9
            X509v3 Authority Key Identifier:
                keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f8:e0:09:cc:0d:fd:13:5c:6e:a9:d7:b5:a1:fa:bc:9f:17:
         ce:e3:79:27:17:b3:1f:ad:08:80:5b:63:f1:b3:40:68:6e:b9:
         76:a9:a6:ea:07:63:cc:b0:19:4a:7b:99:ee:c0:04:ed:c4:c8:
         ed:a2:90:3b:90:d9:ba:e2:80:79:8b:d3:16:b4:53:32:5a:30:
         31:83:e9:93:85:92:a7:14:d4:d5:08:d2:96:50:06:53:73:60:
         55:b7:cf:42:34:e7:b8:15:c4:93:4d:50:d5:ba:05:56:9f:47:
         e8:01:ae:10:cc:1e:04:d8:b2:ff:32:24:18:08:d7:a8:cc:7d:
         37:3c:c4:de:50:a5:4c:cb:1e:01:cc:8c:51:b6:ee:eb:b2:3a:
         9c:f5:24:80:fe:59:48:ce:74:11:00:80:22:38:55:24:70:3f:
         6a:96:d4:9a:3b:64:34:92:22:28:71:80:f5:db:01:44:a3:89:
         70:fb:43:03:65:8d:02:85:ca:d2:c1:bc:88:21:bd:33:16:c4:
         f5:43:cf:8a:92:a8:94:3e:2d:60:b5:68:0f:ed:fc:13:ff:9e:
         27:1e:1b:d5:aa:df:45:2d:dd:3d:d2:60:c2:29:94:1b:d4:0a:
         d3:81:75:68:ea:90:79:8f:cf:9f:a2:50:1e:82:f4:fc:89:c6:
         62:87:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----