Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File:                     iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier:          SnvjrdLERIhrEyNGdGd1qG+W4i+gGFuvYdCZ7nU66R4=
Subject key identifier:   7A:19:C3:65:E1:10:9C:9A:20:A4:BE:BE:F2:82:2E:6F:23:E0:08:97
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer:       /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial:       01962E2AEAA7D926303E3FECAE99CA50842B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
                          2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: /FMhVbPgWLhqo9Drwa6oStteMSgXl3mN3fanWJDtH3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ea:a7:d9:26:30:3e:3f:ec:ae:99:ca:50:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=7a19c365e1109c9a20a4bebef2822e6f23e00897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:2e:8c:0b:98:b5:5a:8c:f2:59:d2:9c:26:
                    4c:71:6c:32:f2:3a:32:d4:01:b2:1f:42:84:10:86:
                    3f:dc:dd:b4:34:dc:bf:c8:4b:32:3a:e6:71:0d:43:
                    7f:1f:59:e3:02:60:82:b7:d5:f9:84:73:0b:b3:b6:
                    0e:a0:de:19:9b:e9:da:02:d8:1f:df:68:49:e7:95:
                    d3:c0:f3:5b:6c:8d:f2:e6:bb:d5:8f:cc:04:b4:6d:
                    8e:8a:6c:9d:f1:d4:d2:a9:f2:3a:6a:21:7e:78:a8:
                    63:53:33:eb:82:ed:50:ab:76:56:dd:be:07:dd:a9:
                    cb:c2:68:1d:83:4c:43:3d:0c:6b:38:12:62:59:87:
                    d2:85:e9:80:87:48:66:f0:f1:07:f9:13:e0:1b:41:
                    04:e4:7c:5e:14:54:83:62:cc:91:55:e5:b6:36:4a:
                    65:97:e5:5e:a8:58:f4:49:18:e8:99:75:aa:35:e6:
                    9e:a6:68:84:70:43:90:8f:26:71:6e:aa:63:6b:3a:
                    7e:0c:fd:97:9d:a0:f9:90:be:70:6f:d7:ff:11:f7:
                    16:68:05:26:45:2a:74:69:68:e0:2d:00:2a:c4:b6:
                    e6:ea:b0:cc:87:ae:a9:ce:07:a3:5f:24:f8:60:06:
                    f4:ac:3d:f4:38:3d:51:19:3d:e5:4a:9c:cb:cf:70:
                    5a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:C3:65:E1:10:9C:9A:20:A4:BE:BE:F2:82:2E:6F:23:E0:08:97
            X509v3 Authority Key Identifier:
                keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:45:cc:b4:cd:31:24:94:a7:6f:c0:cb:61:c2:dc:ca:6c:08:
         c0:a7:8d:b1:fd:c0:cf:e5:56:46:35:4a:97:06:81:64:c7:e1:
         53:52:84:95:a1:0f:f1:ef:49:94:d7:18:df:4d:a8:c5:77:54:
         7f:07:ca:e3:1c:f7:47:af:36:58:85:e9:f2:e1:78:99:67:37:
         16:8b:a7:ae:bb:a9:bd:aa:1c:74:aa:3b:78:e8:0f:de:37:f0:
         a1:fc:11:b8:99:88:57:e4:08:e8:fa:6a:60:f3:b9:5c:e1:f9:
         55:a9:38:21:3c:76:88:ad:62:fd:62:9b:58:c0:ef:4d:b7:aa:
         1b:8f:53:84:52:88:47:39:a7:af:31:98:b1:d0:9b:ff:7c:f9:
         9d:19:0c:43:5e:50:26:d0:e2:6c:ea:55:8b:2c:d9:f7:1e:d3:
         fc:74:3d:a6:d4:fc:a3:13:07:d0:ff:57:be:1e:68:21:e8:ec:
         0f:41:d4:7c:85:8f:e5:94:cb:99:19:7c:b4:d7:73:be:7f:8c:
         77:f4:8e:2e:04:0f:5e:ff:2a:fc:bb:4c:65:60:43:0f:7c:ce:
         e7:80:88:e2:c1:c6:ea:8b:d0:52:fb:98:b2:1d:85:57:24:2b:
         ce:55:b2:ba:96:3b:7e:01:d2:17:cb:89:6f:02:7b:c1:e3:c9:
         a4:18:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----