Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          6fbqKqjslXhlzReAdJ0Dk8iwNK3mrOsmGYh/imcszKc=
Subject key identifier:   2F:69:DB:97:3B:64:39:1B:1B:57:BE:36:71:C2:D2:E1:7A:1D:10:11
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       01962F06BE37C1429147F0F1F829AA3C323C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          0915
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: tgYiKoOO6CuQ+5E7JjNXZocQxN/TlR6SCipH/nIcRjk=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:be:37:c1:42:91:47:f0:f1:f8:29:aa:3c:32:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=2f69db973b64391b1b57be3671c2d2e17a1d1011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:0a:0b:4d:58:03:1b:67:b3:b1:ab:e7:df:
                    55:f5:b1:e9:e1:e9:3a:90:cc:63:e9:2b:93:04:1f:
                    92:d2:6c:f6:eb:db:3b:5f:e6:e7:29:9f:fe:5b:fa:
                    85:dd:84:c6:1a:ed:0d:5e:fe:90:5c:1e:8f:d0:b6:
                    0b:eb:5f:bc:ab:9e:a7:30:4e:cd:45:d6:70:51:bf:
                    fa:0d:f2:bb:7f:5f:17:f8:79:fa:73:91:b9:fb:71:
                    58:8d:9e:82:10:17:07:5a:8f:fd:13:d4:e7:6d:d5:
                    c0:be:31:19:92:7f:f6:39:9b:d7:1b:9a:2e:b7:07:
                    32:5a:f5:cb:85:40:cd:1a:8c:b6:76:01:dc:32:e2:
                    bd:89:66:9b:65:dd:9c:e1:c1:a0:3c:b3:b8:d7:1d:
                    b2:a7:4e:c7:f3:52:49:24:90:9b:50:74:5b:48:fd:
                    e7:2d:e5:2a:e3:b4:9f:aa:f8:bd:44:bc:1b:be:1b:
                    2e:96:d1:3e:ef:d7:0a:6c:0c:e4:61:93:dc:1a:0a:
                    b4:fa:e3:a8:55:42:3a:18:4b:71:a9:99:9b:3f:3b:
                    59:33:10:7e:d1:db:af:fd:22:c9:3e:9e:db:fc:4f:
                    43:19:7a:a4:de:0e:8d:4c:c5:56:ab:28:a4:56:bc:
                    ae:72:b7:43:b2:2c:8a:77:2f:9b:93:92:d1:9c:ed:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:DB:97:3B:64:39:1B:1B:57:BE:36:71:C2:D2:E1:7A:1D:10:11
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:3f:28:c2:69:5c:68:0b:4b:d7:df:7c:56:e5:1f:e1:b6:
         da:21:7c:e1:8a:21:29:c7:a4:f6:8a:b8:75:55:25:e0:af:0c:
         ce:ff:70:47:22:ce:07:c3:69:60:ba:d5:f1:ce:cc:8b:45:e8:
         16:0e:f4:a3:13:42:73:9c:d9:6f:79:49:6c:d1:1d:9a:e0:72:
         1f:78:e1:97:80:da:a9:10:d8:dc:eb:a4:2f:1e:06:1f:c2:25:
         24:87:e5:b6:73:80:5b:41:97:ea:7a:36:c1:cd:33:41:02:b6:
         3d:19:10:49:2f:e1:eb:b8:f2:55:b1:87:9e:0e:0c:95:12:50:
         ee:1d:c0:08:17:f1:16:5f:28:d9:4c:2f:8f:e4:14:d6:cc:ae:
         c6:5d:ee:b5:16:af:0d:2e:e5:39:29:92:55:a9:6f:15:11:42:
         48:46:ce:91:94:e3:86:6d:d0:e7:37:7d:c4:fa:0c:41:e0:04:
         78:0d:94:6b:f0:19:9e:48:a9:14:cc:dd:fd:ec:d2:f2:e2:bf:
         5a:14:d0:05:88:fc:22:6d:6d:5d:86:cb:16:b2:ff:03:09:67:
         9d:f7:e1:11:73:d3:0d:5a:53:3b:c9:d5:f5:47:5a:b2:46:96:
         ba:63:6f:7c:70:cf:0e:c5:b5:4a:61:15:d5:27:9a:e3:33:b0:
         39:73:4e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----