Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File:                     1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier:          bHs2770Y1Wxs/Jh+xtU0FLyXBidpurZz4i8ftlccT0Q=
Subject key identifier:   8E:A8:96:DD:C2:7D:2B:ED:2F:AD:F8:93:0F:D4:64:C1:EC:60:CC:36
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer:       /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial:       01962E619F096B64611AD26C5B8F50AE16AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number:          082C
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: OaSEuJ42QrozUEqqC2hRlARQwvBGBvl9GdLkeUB8cAw=)
                          2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9f:09:6b:64:61:1a:d2:6c:5b:8f:50:ae:16:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=8ea896ddc27d2bed2fadf8930fd464c1ec60cc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:44:c8:4c:52:1c:5e:f6:29:39:50:e0:5e:
                    a8:2b:b5:0a:2f:52:f1:06:3a:f1:b2:0d:31:87:7c:
                    3f:ec:d9:7c:27:d5:d9:aa:5d:ea:1e:23:98:11:76:
                    f3:2a:ef:e7:f8:d7:b1:89:3a:24:fa:bb:5f:65:ed:
                    b0:a7:03:d1:36:ed:ca:1e:d8:68:13:c2:e7:b1:07:
                    e7:fb:da:77:81:0a:1e:83:eb:d4:f0:d8:7b:19:6b:
                    a4:60:f2:3f:71:eb:d1:b3:20:b1:0b:30:91:b4:1f:
                    ec:f2:5b:32:c3:62:39:66:29:d9:3d:aa:78:f0:72:
                    cb:6e:fb:b7:bf:3d:36:a5:5b:9c:ce:70:35:66:58:
                    89:e9:1a:38:55:77:8a:fa:ba:3c:ab:79:b1:af:47:
                    ed:26:db:9e:89:a2:a3:0b:7f:62:d7:c0:e2:68:67:
                    9e:ec:f9:bd:16:ba:07:5b:fe:1b:d9:d3:d8:79:5a:
                    df:98:68:2f:e9:5b:b7:4c:f7:4c:dc:d3:c2:c6:30:
                    70:f9:83:da:d6:58:ed:c9:82:fb:08:30:e4:e9:4e:
                    46:a5:c8:a9:9e:7c:33:51:2d:5c:da:61:94:55:b8:
                    5e:55:d4:39:dc:27:11:2a:5a:32:cc:d4:de:87:4f:
                    cb:0b:0a:92:63:f3:07:a0:26:98:5f:d3:b5:6a:69:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:96:DD:C2:7D:2B:ED:2F:AD:F8:93:0F:D4:64:C1:EC:60:CC:36
            X509v3 Authority Key Identifier:
                keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8d:d0:75:a6:60:9a:7f:1b:23:fa:ec:db:0d:ad:ff:64:f8:
         87:79:49:11:7c:da:01:a2:40:52:5a:a5:ec:3e:8d:91:8e:8a:
         94:c5:db:9a:3e:fb:51:da:3a:ae:05:75:55:9d:0e:c6:d9:14:
         19:60:2a:da:59:e9:db:25:e3:6a:1c:c6:43:6e:36:d2:14:c4:
         3b:cd:3c:57:7d:25:2b:1e:1f:ed:0e:77:c3:20:24:a8:e1:f3:
         f6:9a:1c:ba:2e:75:ed:9a:4e:59:80:08:43:c3:85:5e:9d:4d:
         9f:7d:3e:d8:b3:04:ee:24:5c:47:31:cd:28:58:d7:32:b4:81:
         0d:3a:0f:17:b8:32:68:b4:cd:c8:0b:7b:7e:51:fd:fc:7c:bc:
         a9:ce:8b:cb:c6:78:2d:af:06:b5:a0:21:bb:a6:cd:44:7a:65:
         79:78:82:0a:52:97:b4:81:e4:da:72:c0:79:04:4b:08:6e:17:
         dc:8c:8e:96:3b:54:56:71:21:63:19:6d:10:64:3e:53:2b:10:
         a4:89:e4:9d:ed:d3:b6:d2:eb:92:de:97:83:b5:b2:81:0b:bf:
         5e:68:9a:ce:76:6c:f3:ce:22:f5:cb:03:9a:28:89:8b:be:dc:
         4b:e7:8c:a9:30:70:94:f6:87:da:d7:21:1e:a0:22:5e:32:f4:
         68:b6:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----