Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File:                     iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier:          7h6sMlHPS4JLqE6bIL5p5NIkyB3mlnToYtvxqhHZJBc=
Subject key identifier:   E8:D6:B2:28:B8:52:BF:EF:BA:94:BA:A1:71:2C:79:5C:D7:CB:FE:B6
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer:       /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial:       01962E61B3412B5F7626AE157B69F834E614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number:          0979
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: etKj8JxSADxAtwhWdtAcvp8APJo.roa (hash: hbDx1XXs3wCIknS0MzRqrwmZihS636bz/OW9FAqx/a8=)
                          2: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: edDWj8kPl30OBC4nQjeDLykXThq4foPf31pgZC1ew/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:41:2b:5f:76:26:ae:15:7b:69:f8:34:e6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=e8d6b228b852bfefba94baa1712c795cd7cbfeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:4c:64:a9:dc:60:9f:d5:0c:7e:a3:98:35:
                    83:74:32:10:35:c2:4b:1d:49:4b:da:7c:25:d9:eb:
                    df:87:49:a8:03:da:22:8a:53:ed:01:68:af:bd:40:
                    cb:11:97:bd:1d:b1:2c:75:7a:f6:2c:88:78:46:89:
                    a0:ec:e2:93:16:dc:3b:cc:e9:8a:4b:7b:c1:cd:6e:
                    1b:d2:e9:95:5c:79:4d:ef:0d:d4:c2:ef:6c:cc:05:
                    9d:b8:ad:36:cb:60:e4:4a:a5:dd:b7:3d:23:ef:1d:
                    ff:00:c9:ad:43:49:4e:b6:ce:7d:9f:0a:37:8f:c0:
                    b4:a1:62:da:18:fb:3c:16:a0:ff:29:d1:91:6a:04:
                    1a:7d:a3:bd:2c:09:65:cb:af:0b:4d:d3:ae:2b:56:
                    47:1e:21:1b:91:1a:96:4f:82:83:c9:d7:4a:49:85:
                    43:90:aa:44:32:e6:7c:9a:ba:5f:6a:84:c9:47:a6:
                    e2:d1:a1:74:07:2d:63:57:55:a8:44:5e:f9:40:24:
                    3e:76:45:58:fc:f6:47:43:f1:55:ec:75:c2:8e:3b:
                    63:65:c9:b7:de:47:7f:46:aa:52:3c:3c:fa:bf:db:
                    1f:3d:4a:68:3e:ef:2c:ec:9e:04:94:f6:dd:03:e0:
                    b9:d4:85:b8:e6:f5:d0:a7:30:b6:0f:4d:7e:b4:33:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:B2:28:B8:52:BF:EF:BA:94:BA:A1:71:2C:79:5C:D7:CB:FE:B6
            X509v3 Authority Key Identifier:
                keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:73:f3:4b:e8:22:e8:21:b2:3d:02:93:9c:9d:40:e0:e2:
         76:27:84:d0:19:21:3e:9b:07:c5:d9:f8:e3:b1:c3:99:a5:e9:
         23:12:d2:3a:b7:04:52:53:01:dc:50:42:8a:89:88:ba:0b:f3:
         fd:84:5e:7d:27:96:14:a8:58:25:af:4a:4f:56:21:e7:cb:f2:
         4a:43:9e:91:d3:35:27:dd:40:79:9f:3d:c8:29:30:0f:da:da:
         ed:72:7f:c8:f0:29:6e:da:6f:ed:47:d3:16:81:de:f7:db:09:
         7b:78:39:87:7c:19:15:9d:45:1b:74:d5:7c:e8:76:4e:5f:88:
         f6:87:56:4a:59:24:fc:55:d8:28:34:5c:43:77:2c:02:af:b4:
         f1:cd:7f:20:84:17:df:db:d1:94:d7:ac:51:da:35:fa:8e:27:
         a6:28:4f:98:06:68:3e:53:1a:a3:af:26:4a:63:bd:41:c2:26:
         17:07:24:82:6e:58:63:84:c8:48:fc:1b:23:8b:47:93:d3:88:
         65:e3:1e:53:f7:9d:62:93:87:74:94:29:92:97:96:18:c8:ac:
         a3:0f:8d:79:d0:f7:0f:41:9d:9d:22:18:aa:14:b3:58:e7:59:
         43:af:e0:40:ce:3f:e6:57:9a:7c:15:cc:93:0f:1d:c4:e4:34:
         f1:8c:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----