Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File:                     iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier:          Iq8eElxl7ggIYh9AfaZgfJRKc3D3tBiMEBss+R6hSO0=
Subject key identifier:   34:33:40:37:A3:2C:37:A1:AB:DC:A9:6E:1E:A9:2E:0F:6C:1C:93:E3
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer:       /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial:       01962DF41B0E0F2066D14C26DEED610F4255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number:          0181
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
                          2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: AFZ1jae6lgAXykLW0g/Uubjc29b+6jyQ6z/9xPiCeBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:0e:0f:20:66:d1:4c:26:de:ed:61:0f:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=34334037a32c37a1abdca96e1ea92e0f6c1c93e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:6d:18:0a:22:0b:6a:11:62:9c:de:c2:23:
                    61:fc:89:9c:ef:e7:c8:44:b0:be:6f:0e:d3:15:2a:
                    1f:5d:a3:3d:66:cb:48:36:93:b0:b3:df:f7:f1:11:
                    52:9e:f8:7c:fb:6a:fd:25:fd:9a:f9:24:02:27:7f:
                    c8:a8:cb:eb:20:43:b1:83:d9:b6:3a:04:d4:9e:19:
                    84:4e:7f:8a:04:43:17:13:54:78:bb:d6:fe:12:53:
                    a7:4a:32:a7:e8:f9:84:d0:ac:b7:b9:22:7d:dc:f8:
                    ea:1a:be:a0:6b:b0:91:2c:60:49:0a:a4:79:22:b1:
                    13:fc:8e:f4:5f:03:1a:5d:25:7c:07:97:fa:d2:f0:
                    95:d7:c8:b7:ae:f3:56:99:41:ae:8c:b1:2d:de:fd:
                    bd:92:35:9f:e6:2d:f8:10:78:66:f2:81:29:a9:69:
                    78:cb:d8:a4:0c:9a:57:e4:62:46:1c:8a:aa:37:83:
                    aa:54:f3:69:62:d2:91:cd:31:5e:2c:b0:aa:17:00:
                    45:d5:3b:9d:8c:c5:24:b2:49:7c:24:44:f4:81:0a:
                    fb:37:55:0f:7c:76:50:de:77:50:64:b3:e6:2b:0a:
                    90:b6:ec:0f:44:1d:8d:38:30:f7:59:b7:65:21:0f:
                    98:cb:e2:0b:99:17:0b:99:51:b9:2f:9e:34:2b:81:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:40:37:A3:2C:37:A1:AB:DC:A9:6E:1E:A9:2E:0F:6C:1C:93:E3
            X509v3 Authority Key Identifier:
                keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:0e:f1:d6:18:df:dc:3a:5c:9e:46:d2:97:d9:0c:d4:a3:
         eb:25:a5:62:de:68:28:7d:86:bb:c3:6f:ae:49:3f:ce:8b:48:
         a6:35:f4:b3:f5:35:76:2b:cb:91:53:b4:45:30:3e:b6:2b:5a:
         ea:6c:50:9e:d2:8e:14:c0:ca:72:ea:fb:a8:3e:a4:bf:0c:fd:
         69:d0:06:9c:c3:ea:68:0b:b4:fe:b5:86:1d:89:bc:09:20:d7:
         f9:11:3f:f2:f4:bd:0c:29:b1:06:64:86:a0:0f:f3:e8:b8:43:
         6d:19:ec:14:42:35:bf:d2:a6:c4:05:19:53:5e:80:66:f1:a5:
         c7:fc:fa:49:87:af:20:5f:86:41:30:34:d0:e6:4a:04:78:e3:
         e3:e2:a9:2e:77:80:e9:3d:66:b6:b8:fd:31:e1:be:3d:53:99:
         9d:da:10:ed:1a:ed:3b:81:74:a2:b1:26:f1:7a:93:f3:1d:3e:
         4a:a6:5d:4a:12:2f:d2:31:67:c2:03:d6:80:80:95:47:00:b8:
         86:ee:fb:d2:41:41:e8:3b:4e:6c:b0:3c:2d:14:0e:a7:59:1a:
         ff:c8:03:0d:d7:5d:e2:d2:a7:44:f0:8e:fa:e7:e5:88:07:f9:
         61:58:39:02:6d:af:fb:37:d3:6b:d4:ea:f6:93:a3:99:2e:a0:
         c9:83:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----