Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File:                     iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier:          oeu/rou0Za7XWXgJNGZrzbeR6el2uXehaTqpiLzCb6A=
Subject key identifier:   E4:A2:77:45:16:4C:59:3A:EB:60:06:D4:5C:91:D2:4E:5A:66:9E:CD
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer:       /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial:       01962F06F2DD77E3EE54905D38917939DECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (hash: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=)
                          2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: /LvUUKEFyp4HtsNlrBki0ewN4Cyx30AXVD1YFX2o75s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:dd:77:e3:ee:54:90:5d:38:91:79:39:de:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=e4a27745164c593aeb6006d45c91d24e5a669ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:61:df:72:3a:fb:a2:3e:e1:f9:e5:b1:e3:
                    2e:0b:dd:92:b4:51:a8:63:71:88:fc:72:a7:37:30:
                    25:29:88:70:f0:f8:ca:ee:c2:30:c0:c1:05:37:6d:
                    ce:6e:f3:f6:5d:89:32:a6:a5:b7:cb:57:ce:27:45:
                    9b:d4:c3:ed:e5:8b:fd:d4:a7:aa:29:b3:87:29:36:
                    d6:f0:b9:b5:d3:e9:ca:fe:e2:b3:48:6f:c9:cf:4b:
                    63:d9:60:ad:7a:63:e1:5d:d0:ba:c2:2e:df:da:8c:
                    01:50:a7:13:16:3b:61:82:b3:95:1b:d6:7e:05:92:
                    48:68:43:c8:65:3a:43:3c:8f:a4:26:54:41:b2:1d:
                    94:e9:5b:3a:77:8a:44:8f:22:12:c4:08:ea:9d:e5:
                    75:1d:ec:58:cc:3f:b4:e5:a4:8c:f1:04:08:17:10:
                    b7:3b:11:4a:86:87:5a:3e:3e:42:2e:8e:44:f8:79:
                    f8:3d:94:68:91:a6:15:5b:6d:f9:72:f9:ef:57:b0:
                    27:e7:ca:71:65:c9:b1:38:9f:1c:c9:ff:34:4b:8d:
                    ef:62:2c:3c:63:af:ba:e1:f1:79:7d:1e:9d:85:15:
                    00:f6:b1:6c:d2:3d:b9:62:c4:e1:f4:e0:83:59:bf:
                    21:e2:4b:d6:b2:58:75:71:84:d0:d9:f9:0d:9f:e2:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A2:77:45:16:4C:59:3A:EB:60:06:D4:5C:91:D2:4E:5A:66:9E:CD
            X509v3 Authority Key Identifier:
                keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:18:e5:6b:d3:ff:34:6d:4b:d1:69:9f:fd:2d:d7:ea:65:32:
         9d:01:86:20:a6:f5:6f:09:b9:eb:24:61:9f:b2:94:78:1c:43:
         e3:d2:a3:ad:40:b6:e8:d5:e7:bc:a4:45:17:0e:a3:57:b6:5d:
         22:45:04:89:f5:2e:2b:e4:1a:74:9d:09:ee:36:05:e6:b1:29:
         82:41:b9:11:82:e0:9e:f3:1b:fe:f3:91:ad:81:9c:24:98:04:
         57:f1:4b:6f:be:e5:9a:f2:f6:8e:be:97:85:94:1c:fe:f9:8a:
         82:37:75:e5:63:5f:c0:8b:d9:20:44:23:9e:60:dd:b9:55:d1:
         ce:1a:2c:24:4c:2b:42:e4:79:4a:f1:4d:df:76:da:17:ec:7d:
         e0:40:e8:55:ef:80:18:e6:3e:76:dc:c2:fc:a8:75:66:6e:eb:
         95:7f:b1:a5:3e:d4:be:32:e9:8a:7a:7b:40:8d:be:a0:24:5d:
         f6:d6:28:29:94:b0:f0:f7:ed:f0:a1:f8:5e:23:ed:8a:94:2c:
         ee:6e:c3:fa:0c:4a:bf:61:20:9b:3f:7a:2c:72:de:d1:d8:06:
         8c:47:cc:44:01:f1:2e:b2:2f:e2:4d:04:28:17:11:0a:42:5b:
         31:91:79:42:d6:31:db:01:b5:66:bf:5d:bb:27:36:9f:6c:7d:
         2e:b0:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----