Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File:                     lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier:          mARskVXPois/nymurjPvQlYSXNPGc7tFnD1bgngaDyE=
Subject key identifier:   1F:7A:EA:6B:E5:4A:0E:0F:51:5B:4D:42:F9:6E:9A:17:1F:B5:6B:4B
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer:       /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial:       01962DF3A6AF3D377D6903376F8F8B94A649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number:          0D5A
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: rLCAHU/sXSXxMVbtR/lCQzYYvjX7qxb22a+q14wTyRc=)
                          2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a6:af:3d:37:7d:69:03:37:6f:8f:8b:94:a6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=1f7aea6be54a0e0f515b4d42f96e9a171fb56b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:17:76:4d:da:52:17:7f:86:b5:01:a9:cb:
                    51:56:0d:e6:60:70:0e:a7:91:04:49:69:63:69:f9:
                    87:30:3a:3b:ba:db:85:49:a1:97:9e:39:35:c6:cb:
                    07:32:f6:5e:6b:b9:ca:45:28:88:4d:24:84:8b:6c:
                    e8:ac:f2:0c:bb:66:83:71:1e:26:03:57:b6:cb:0f:
                    b7:55:83:8f:4c:78:c1:1e:ba:b4:f2:a5:02:75:ae:
                    46:61:5e:9e:11:ec:2c:1f:79:da:bc:62:92:7f:ff:
                    c1:57:86:26:f9:ea:07:0b:47:8d:ce:fc:e4:02:97:
                    20:d2:86:bc:1c:90:50:95:77:a4:cd:f6:08:67:a1:
                    29:df:46:17:77:dc:fb:4d:6c:b7:27:f6:90:6c:77:
                    b8:48:84:6d:4d:15:f9:be:62:6f:e2:e6:cc:83:7a:
                    a4:b5:a3:e0:ee:46:1a:19:0d:a2:46:9e:cc:54:18:
                    cf:ee:59:9b:94:60:bb:6f:3e:fe:c2:82:e2:4f:bc:
                    70:9a:c0:0c:ab:4e:4b:b2:ab:82:a8:4f:10:65:70:
                    e4:f3:47:20:6e:73:ad:9d:73:45:71:54:2d:27:18:
                    77:13:e2:ca:0c:13:95:3d:24:f2:44:29:0b:39:ee:
                    91:34:f5:d0:a8:42:d4:85:fc:80:16:56:ec:52:ef:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7A:EA:6B:E5:4A:0E:0F:51:5B:4D:42:F9:6E:9A:17:1F:B5:6B:4B
            X509v3 Authority Key Identifier:
                keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ab:9d:b5:1e:28:13:42:b1:fd:c9:b3:cd:e9:c7:88:f5:ca:
         69:b1:30:9d:8f:d7:e3:11:95:52:55:47:18:80:88:4c:e2:db:
         e4:04:d5:f4:41:04:55:a1:ca:2d:99:06:68:53:a8:56:a2:8f:
         f3:8a:f2:a2:89:14:7f:a3:64:48:01:e9:bd:0f:82:4c:50:fc:
         2e:e5:84:63:6c:53:84:5c:b1:da:54:9f:f6:72:2e:cc:d1:ad:
         8a:7c:e4:e7:92:de:93:a0:81:10:75:d7:dc:3b:01:00:6d:5b:
         df:b3:7f:14:10:31:ff:68:8c:94:10:33:d2:9b:35:a9:d9:85:
         7c:46:dd:ed:0c:f3:83:e3:42:70:b3:38:52:41:f7:f0:0c:69:
         9b:de:2c:2e:78:34:c3:aa:b0:ad:ee:e8:08:16:14:98:84:6d:
         be:fd:12:04:9f:67:c3:ce:bd:fc:db:d9:b8:b6:da:b5:d0:21:
         2d:19:d2:8f:33:17:8d:6b:d6:45:2d:e5:f9:6a:cd:25:d0:12:
         78:43:40:17:41:f3:8e:77:af:4a:44:1c:b4:94:5b:f3:6c:84:
         69:58:b7:2a:48:c0:95:5d:77:5f:38:f8:b8:83:d0:1c:e5:15:
         9a:00:7b:67:65:e2:f9:6b:8c:6a:b9:cf:c0:3d:78:be:8e:f9:
         ec:da:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----