Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File:                     0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier:          qZEZ3WbZDZiAvbsuAFGo94I0Z9qDlBiqFZmEGnNLp9Y=
Subject key identifier:   B2:FD:41:F9:D3:02:E1:A9:99:41:C9:8D:40:8F:55:92:76:C5:91:0E
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer:       /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial:       01962DF3A41E01688F5C480F8E891B487D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number:          0272
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: L48xFOcwxnmmyzwGQ8VSIqpIPbDZo7wFCjcL7kGnpx8=)
                          2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:1e:01:68:8f:5c:48:0f:8e:89:1b:48:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=b2fd41f9d302e1a99941c98d408f559276c5910e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:39:10:c7:38:ce:f5:0b:57:24:50:d8:e3:
                    23:3c:7d:9b:3e:3e:5d:b0:b5:e1:48:48:dd:89:3b:
                    6d:f1:2b:29:d1:be:07:79:ff:08:7b:79:0a:5b:4c:
                    16:fa:2d:ca:5c:6b:54:5a:56:02:48:15:75:01:b0:
                    54:f1:7e:77:8d:bf:79:d2:b8:96:2e:2a:b0:16:aa:
                    e2:94:c0:c9:6a:78:d5:49:09:46:49:f0:92:18:4c:
                    a4:08:de:be:66:ba:55:fd:eb:fa:ec:b1:ed:5e:de:
                    5c:9e:0a:90:37:c4:4b:06:0b:db:04:25:fb:36:dd:
                    ce:22:17:b0:f5:41:7e:3d:a2:99:5d:1e:b9:26:09:
                    7e:a4:2f:30:29:f8:80:8d:8d:6f:9b:72:64:9e:02:
                    c4:b7:88:15:91:20:1a:ae:34:14:6f:17:3a:d9:08:
                    ac:93:9e:87:a8:40:54:dd:e5:9f:06:60:60:13:2e:
                    03:4c:b7:a2:6b:2f:6e:bc:29:c6:d2:75:de:48:c2:
                    07:12:71:5e:91:6b:97:8e:b0:a0:a4:3e:c7:1c:c2:
                    96:5e:4e:b8:81:64:df:a4:80:d2:82:6e:8b:62:98:
                    47:3b:84:7a:02:c7:d8:67:24:58:60:07:cd:76:d0:
                    16:40:53:55:e3:00:d1:2a:77:4d:0f:ae:79:42:ec:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:41:F9:D3:02:E1:A9:99:41:C9:8D:40:8F:55:92:76:C5:91:0E
            X509v3 Authority Key Identifier:
                keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:76:7f:d9:c0:ca:fb:57:55:65:ba:db:ff:a6:96:77:1d:
         23:60:e9:48:46:36:cf:4f:30:eb:29:c8:33:dd:59:79:97:4b:
         09:b8:c4:82:39:be:c5:85:78:09:56:d1:03:77:2c:6e:82:a0:
         f8:fd:3d:26:5a:d2:51:3a:ec:11:65:38:bb:d9:e6:5b:e5:47:
         ba:3c:d5:0f:38:94:90:41:f1:9f:80:9d:d7:df:ae:f8:0a:e1:
         51:e5:c5:b2:f5:e4:67:21:36:fc:4e:65:40:7a:f8:ce:71:e6:
         12:f7:d6:50:71:95:e8:df:74:f7:57:a7:b1:44:fe:7b:55:31:
         1f:b8:c8:97:59:eb:a9:33:92:1d:93:bb:62:09:f0:04:88:ae:
         3e:d3:76:42:44:79:fa:de:ec:8d:78:21:43:6c:02:70:31:0b:
         1e:f2:b2:c9:67:e2:85:e2:90:db:c7:e7:7f:fe:2a:63:c6:2d:
         c6:bd:1a:68:b5:48:23:d0:39:b8:5c:30:54:e0:ed:36:dc:3c:
         cb:6b:48:eb:d4:2a:f3:ad:b6:79:32:40:ca:50:26:45:4f:ab:
         40:cc:23:03:5c:ff:0b:a1:d6:a7:b7:79:54:ae:d2:04:bf:f3:
         53:e9:a0:95:0c:fb:f2:46:80:f8:1b:1d:21:c0:49:a6:e3:a2:
         a6:f5:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----