Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File:                     izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier:          owLfttPsjODh4m3bYuclcs3wnFKb24OKPwzWhYEqVhA=
Subject key identifier:   F0:FC:7C:E1:A8:B2:56:A6:74:FD:9C:4A:BD:66:D0:2D:D6:C2:9F:61
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer:       /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial:       01962FAB868BCC2F996621D212687B71DE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number:          0957
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
                          2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: 9Zp578/0UPjcvp2CwkwxmkyGr564/DzI1V+VgfCTv90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:8b:cc:2f:99:66:21:d2:12:68:7b:71:de:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=f0fc7ce1a8b256a674fd9c4abd66d02dd6c29f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:7a:e0:16:75:2b:57:32:1b:47:84:ab:85:
                    78:70:96:26:28:ab:d8:43:1f:4e:5e:18:e3:48:b8:
                    6f:c8:4f:27:7d:9e:0f:52:1c:df:51:fb:0d:96:84:
                    91:b2:70:b9:6a:25:e7:7c:e7:b7:01:5f:e9:a1:17:
                    2e:d2:15:fa:ac:ae:99:ba:6e:79:b8:9a:86:8b:d6:
                    78:24:96:68:5c:d6:03:70:3c:a5:f4:98:3a:b5:00:
                    31:7d:dc:ed:aa:7c:50:d3:99:1f:2f:48:6b:7d:36:
                    5c:da:90:1b:e4:f3:e1:bc:96:16:9b:67:6b:32:41:
                    4d:e6:71:0b:7c:d3:01:a8:25:9b:dc:13:68:f3:79:
                    71:6e:30:2f:32:3d:b0:3a:26:33:c4:d8:97:76:0f:
                    1b:40:9f:bc:b2:26:b4:22:aa:79:6e:7a:46:a8:75:
                    9f:e5:2f:be:d6:8d:1f:b4:85:d6:9f:d8:50:6b:9e:
                    34:80:cc:da:0f:01:c7:a9:fc:dd:c0:cc:7d:33:77:
                    c2:2e:ad:00:d1:61:e8:4d:76:4d:d7:29:e2:ea:6e:
                    18:87:7f:7d:8d:3b:42:34:0b:86:50:d0:f4:af:c6:
                    f4:dd:c7:bf:64:f0:fe:e7:0f:93:54:4c:d2:32:92:
                    b6:cb:de:42:0b:52:5e:b7:ca:92:0d:10:89:d3:19:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:7C:E1:A8:B2:56:A6:74:FD:9C:4A:BD:66:D0:2D:D6:C2:9F:61
            X509v3 Authority Key Identifier:
                keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:be:f3:a0:23:bf:50:e5:0b:60:c6:ed:2c:ff:47:b6:2e:d8:
         a8:73:1b:79:e3:f8:c9:3b:78:26:8b:8b:f9:a9:91:96:cf:eb:
         af:d3:ed:44:b7:73:9c:9d:9c:c2:af:b5:e3:8a:af:98:26:66:
         f6:8c:35:e0:8f:08:81:65:ed:01:ba:b1:41:9a:35:52:8b:34:
         42:05:69:cf:4c:89:5f:5e:20:ea:aa:32:de:1c:23:d9:59:fe:
         70:86:93:9d:d7:46:c8:9c:19:e1:4c:e7:fa:89:5a:30:24:94:
         42:8a:a4:cc:02:91:08:1d:c0:22:16:cd:52:78:b9:cc:0a:1d:
         f1:fd:37:8e:c9:d6:09:eb:eb:6b:7f:61:d3:3b:fa:96:1c:73:
         43:53:3a:2b:8a:43:39:1a:03:09:9b:ec:ee:2a:82:23:6c:05:
         6f:1e:f1:e4:4e:61:f8:66:2e:08:63:f1:00:4e:53:94:63:b6:
         ac:9f:20:1f:0c:4a:2a:50:1a:d1:5f:d9:9c:8d:d3:60:64:23:
         3a:28:b6:cc:e9:09:88:0c:a0:b6:57:e5:6c:0f:ce:d5:a9:38:
         99:f5:59:d2:a2:5b:71:b4:8e:48:7e:14:36:f1:88:4a:42:05:
         ce:e6:f0:ff:c7:db:b7:da:da:e7:1e:ce:a0:3a:0f:3d:a6:b6:
         e0:01:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----