Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File:                     iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier:          Lr3GBoWbPKs7+HbZm3P+c416eeD3GVqR6jX7TUPbOTk=
Subject key identifier:   B1:B7:1B:BA:4C:E0:ED:AF:92:1B:D7:68:DE:87:17:9C:07:0F:63:D1
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer:       /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial:       01962F0666003C4C754DC2A22D121BA61417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number:          010F
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: /btrqp+pE8wifB4tw+QzQeWpbQkh7uSUsB5AaYpJY30=)
                          2: tUCrU1IYyKTeHFgwWPnOhupAFLs.roa (hash: iXh/inx+REdww29ghj8Pv8YnJ7SgvDrT4boXFVW4VlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:00:3c:4c:75:4d:c2:a2:2d:12:1b:a6:14:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=b1b71bba4ce0edaf921bd768de87179c070f63d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:07:1a:9c:0e:2d:95:56:a9:01:93:57:ac:
                    40:22:c4:25:58:14:4a:b1:fa:17:6e:40:38:b8:87:
                    da:52:a2:24:ab:8f:cb:2c:fa:76:0b:3a:14:bd:2a:
                    58:9c:c0:c4:29:bc:d6:31:c4:4e:d8:f0:e9:91:79:
                    67:ad:64:e7:64:d4:19:ee:ef:a2:a3:28:2a:d6:ca:
                    25:ed:b2:cb:84:6d:5d:70:18:e8:3e:ef:ad:ac:c7:
                    31:08:1b:43:ac:9a:2a:01:b1:f2:e5:7d:d4:12:75:
                    fd:64:98:6b:85:c3:ca:ae:24:ba:41:c0:26:f7:0b:
                    6a:99:3d:75:94:6f:77:13:4c:58:6d:cf:a2:ae:35:
                    c9:f2:a3:93:ae:b2:86:e6:c2:94:ef:62:c5:72:66:
                    fc:5e:4e:a7:6b:a7:02:fd:ea:94:55:72:99:c0:59:
                    8c:31:07:21:ce:50:bb:19:b0:fe:69:f9:f6:de:56:
                    80:88:31:7a:42:d2:6b:99:85:17:08:ed:a8:5c:10:
                    7d:69:75:1a:59:df:6a:49:bb:b9:3c:c2:4a:06:49:
                    e2:c3:8c:bf:28:b4:f0:bd:98:6a:09:19:49:d7:e8:
                    00:47:1c:00:0e:3a:3e:6e:ab:ad:8a:cb:57:d6:d1:
                    7c:d1:81:4f:c6:21:03:5e:7d:61:1d:fe:be:5f:e1:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B7:1B:BA:4C:E0:ED:AF:92:1B:D7:68:DE:87:17:9C:07:0F:63:D1
            X509v3 Authority Key Identifier:
                keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e0:00:7d:46:d2:e5:8b:41:59:4c:7e:1d:67:1f:01:a1:18:
         02:5b:05:4e:1b:7f:06:d0:ed:a8:9f:97:1a:c8:cf:24:3b:6b:
         68:b3:5c:7f:88:f9:0b:eb:1c:58:c6:c4:cd:7e:d6:61:77:54:
         2b:51:c5:19:90:13:f5:94:fe:3c:c6:4d:ff:8b:64:85:75:87:
         b6:4a:44:28:16:b2:49:40:1e:81:42:3a:d3:75:8b:3c:1e:bf:
         d1:14:e8:cb:6c:92:0e:3c:04:46:c3:76:7a:42:a0:c5:b3:c6:
         ab:b5:ab:d1:61:01:91:17:51:2f:9f:d5:4a:29:f0:32:94:77:
         ff:f8:14:34:fc:f9:73:71:82:f3:29:59:af:83:c5:b6:9a:a4:
         df:71:7c:fe:5d:68:ff:e3:ee:b8:dc:08:73:0d:4c:44:31:b5:
         53:de:50:fe:e5:c8:93:a1:ec:24:de:35:90:f4:4d:88:bc:76:
         cf:bb:31:d3:19:a9:4b:59:36:fa:e2:67:cd:a4:1a:3d:e2:56:
         99:02:0d:21:13:6d:66:77:b3:a8:18:4d:c8:3b:c6:1b:ce:d7:
         b5:29:7c:be:f3:b3:14:0e:86:2b:e7:4a:14:84:73:3d:8c:06:
         0b:69:75:2c:26:5d:fd:3e:47:58:c1:dc:ae:f3:d6:49:97:f6:
         9c:15:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----