Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File:                     iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier:          YZ2xLmsoO4KnxqnWny9Y5i/KnYsHOX99HtXwecdkcJE=
Subject key identifier:   91:6F:9A:9D:FB:43:76:7A:48:DE:9D:8B:C9:13:B6:85:EA:E4:3C:BB
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer:       /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial:       01962E98BC6C312FC722B1EF8E91B85BF10F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number:          0849
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa (hash: mX5PwA+5z3mRrepVsPYas6Uu6jFtb6sejxlwArRN7qw=)
                          2: 9qSGcGsaAT-Orj-BviLbbFBnobc.roa (hash: KGQdMGZUYXqZM3Cup0R+gwjVZv7t7VL1nDYpfpe2mMo=)
                          3: C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa (hash: dVnxKmSOxpULCnBph8ARAXzts2lzvI7njmrNqMweylU=)
                          4: Q3cz4EEEExax1nv4wtLZZPPEgSk.roa (hash: ML1oxtfPutOEqYHFMGiG3+QvRpl8345MdKNoHGmCBSQ=)
                          5: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: pk3gGyhZaBYn1UOcNsnvbhS3c7Z6zdn2UjTW02yJQ9w=)
                          6: raR6qfZ5L-9hzvpYVK9us-1wIug.roa (hash: ARfa5iwtjYV/gUtHJTALBEg3MfK/IBejlaZvsXofCl8=)
                          7: tBuToTypjDQ6u5RK5DBD-fEJHi4.roa (hash: iFrIeR1iIdBgXE0Q5UKDG34iIF6/jJkNwFYF+l/o72M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:6c:31:2f:c7:22:b1:ef:8e:91:b8:5b:f1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=916f9a9dfb43767a48de9d8bc913b685eae43cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:87:36:05:78:06:0f:d8:fd:90:61:7f:fd:
                    95:51:9c:8d:a2:59:93:70:ac:b0:97:0e:ad:5d:ab:
                    9a:a7:d4:91:e9:f4:0e:58:18:06:06:b5:25:a6:96:
                    92:d2:47:d8:74:bd:d6:bd:e3:31:d7:56:0e:5a:32:
                    6c:d9:ac:60:b4:d3:c3:c2:24:19:95:37:3c:cb:51:
                    2b:21:14:00:23:3a:68:e5:6a:a5:72:cd:29:b5:b6:
                    33:7f:29:1f:64:b9:27:33:c0:e5:2c:ac:12:28:6f:
                    c4:76:87:b8:ff:7a:5e:35:51:ba:14:93:2c:b7:28:
                    cc:f9:24:7c:15:b5:60:c5:b8:a3:74:b3:a0:8e:36:
                    b7:3c:d6:b0:d9:cb:72:36:a4:7f:e0:87:95:9a:ec:
                    ca:b6:4e:2c:62:a9:c6:65:be:25:4d:df:ab:34:d2:
                    e0:ea:67:05:0f:0a:f1:b8:e4:10:fc:ac:36:2e:fa:
                    9a:63:d6:b6:9c:b6:a2:63:14:79:7c:d7:b5:41:c0:
                    5f:95:61:aa:4e:cc:fd:76:14:c9:07:24:2a:85:82:
                    f6:15:20:0d:41:f1:ba:39:1f:4c:1b:58:f0:54:dd:
                    59:3a:c7:2c:4c:c8:ce:3f:d8:31:41:5c:59:bc:d6:
                    2e:ed:1d:e7:16:a3:48:ab:05:1d:1a:7d:46:c2:e5:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:9A:9D:FB:43:76:7A:48:DE:9D:8B:C9:13:B6:85:EA:E4:3C:BB
            X509v3 Authority Key Identifier:
                keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:55:5c:61:0f:f7:0a:01:c1:6a:f9:9d:9f:d6:b4:bd:e9:
         55:e2:63:68:87:99:f7:72:04:9f:d7:d9:96:23:e5:a1:ac:4c:
         c4:b0:a4:1c:c8:c9:bb:f6:38:47:78:c8:24:5c:88:f1:9c:9d:
         b9:cb:a8:96:b7:97:58:cc:94:52:4f:dd:67:6b:ea:ed:51:99:
         4f:52:17:13:91:13:51:1d:91:11:72:b1:98:46:40:bf:78:da:
         a9:71:6c:fb:e7:06:21:58:4d:e4:4f:6e:15:cb:d2:04:9e:19:
         97:06:73:3f:bd:f1:a8:f1:83:fc:3c:ad:ee:1d:22:08:9a:3f:
         c1:89:0b:54:cf:ab:19:3c:c7:84:53:0b:cd:5f:79:86:1b:89:
         65:fa:b4:6e:11:57:f7:3b:a6:5c:91:ad:51:9c:3d:7f:52:db:
         9f:07:17:aa:10:cd:e4:e3:c6:d4:99:e2:7f:b0:5f:07:76:21:
         89:07:61:10:bb:dd:63:b3:cf:ab:e3:0e:87:70:9f:75:da:85:
         6b:4d:7f:46:e6:87:00:fd:2a:4e:e6:be:6c:f9:c3:65:0b:2c:
         43:36:75:0a:a0:02:c4:e8:e7:5c:2c:6b:d3:2f:19:26:60:8b:
         6f:7a:e9:31:3e:32:f9:68:58:a6:9d:de:09:42:8f:68:9d:f7:
         db:5c:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----