Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
File:                     iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft (raw, json)
Hash identifier:          ruJJRZD8CNQ4mYHfYJIqBhOPNEFbi0gR6/wbK/fbJf0=
Subject key identifier:   AA:8C:9C:ED:8C:2A:0B:88:61:C9:D2:26:11:B9:95:93:87:E7:61:48
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Certificate issuer:       /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial:       01962E98EE3AD5DA3E95C2B39B02CFBA3F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
Manifest number:          04E3
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: Y4sICU63ha9zJlhS7qW2J4u6uws.roa (hash: 8r93NKrnyk82rf3aCFqULEgo5C+BAoN2QmF3G7aUJlU=)
                          2: iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl (hash: ydqaSgXw3Lk+uTE1NFsYNWMEXCNbRM1fyQAVp5v5U7I=)
                          3: wIm0A8W2Phgt1OO5oeTqTztju0g.roa (hash: NlYQ1T7mFBGddxYYpTaeqb8uAIXp1pec66MhW6UVFnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ee:3a:d5:da:3e:95:c2:b3:9b:02:cf:ba:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=aa8c9ced8c2a0b8861c9d22611b9959387e76148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:61:f6:27:c9:74:0b:de:37:46:2c:4b:c1:
                    83:1a:a1:6f:80:da:ac:c0:1a:5a:3c:f8:54:75:f1:
                    ed:9c:a8:12:9f:43:e4:0e:62:0f:3c:c6:c6:0d:bc:
                    1e:5f:4c:41:d9:88:bc:b4:a3:7f:44:8b:b7:e8:1b:
                    aa:8b:82:a6:4e:5a:2f:76:e0:6a:61:2f:79:14:c2:
                    4e:bf:a3:cb:11:22:72:d5:11:81:06:c1:e3:60:59:
                    62:51:a5:09:43:26:ba:c1:31:78:88:7f:2b:0b:23:
                    76:b7:1d:20:2b:7a:02:24:69:a7:02:ef:ee:31:13:
                    2f:e6:5d:da:a4:12:92:62:c7:dc:2d:88:d5:f7:42:
                    ce:cf:3e:e0:ad:29:0d:e3:07:a4:99:92:fd:23:a6:
                    a3:e1:34:74:2b:73:4b:b3:b3:bd:9a:63:32:ff:c7:
                    ed:02:8b:69:20:60:47:18:17:7b:fd:d2:7b:de:0e:
                    cc:c7:29:12:57:98:fe:79:70:ae:ab:1a:65:7a:e5:
                    2e:00:29:7c:8d:e2:94:b6:fd:97:3e:8b:ec:a0:b7:
                    70:60:67:9a:d4:ba:7b:b6:37:a5:03:6b:27:d1:e8:
                    fe:82:e0:a0:8a:71:5b:be:e0:e2:17:62:74:50:fa:
                    12:8c:58:77:6c:ef:6b:a4:fb:51:f6:c4:24:3a:b8:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:9C:ED:8C:2A:0B:88:61:C9:D2:26:11:B9:95:93:87:E7:61:48
            X509v3 Authority Key Identifier:
                keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:a4:2a:21:03:e5:66:d4:a2:2a:eb:eb:4b:37:6e:d5:64:
         7a:62:55:15:40:23:34:8b:74:1f:6a:5e:10:e0:34:c3:12:01:
         ad:22:4d:5a:3f:4a:f0:94:07:ea:72:48:07:54:7f:65:0d:dd:
         e9:5e:1e:3e:ce:d9:47:e6:29:0c:c0:00:23:6e:4e:c8:84:54:
         0b:3c:0c:3e:51:53:ec:c8:18:09:54:ec:38:e6:ad:70:91:69:
         e8:2b:86:5b:16:70:ce:e4:a0:99:48:06:2a:df:70:b1:04:e5:
         73:71:25:70:6b:aa:81:9e:41:15:02:3f:01:a6:31:b4:c3:11:
         22:86:43:cf:54:e2:a3:bf:d5:75:0d:6b:81:6c:68:29:bd:a1:
         25:b7:73:24:9c:f7:1b:ac:d4:a2:ba:ee:7d:cf:12:94:1e:90:
         93:54:45:fd:27:9b:41:a1:22:27:ae:2d:87:7f:67:7c:82:13:
         11:93:63:2a:bd:00:03:99:78:d9:9d:22:3b:37:4e:13:21:dd:
         f3:66:c4:c7:ac:d8:60:9a:18:04:9b:f2:2a:1b:a2:c3:6f:64:
         25:7e:38:ce:89:e0:4f:8d:1e:8e:bc:70:80:b8:07:6b:34:af:
         f5:4b:9c:bf:9f:b6:80:2b:a4:69:a8:54:f0:00:82:65:36:a0:
         7e:b3:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----