Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
File:                     ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json)
Hash identifier:          npPhJMLkq4S5/M7Vtdr9i2+bx6JclizvN9JWp0RShBQ=
Subject key identifier:   7D:98:9D:AB:9E:4B:9A:6B:1B:A6:2A:B4:35:09:9B:65:87:F3:04:A4
Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Certificate issuer:       /CN=89af8769339703da3b0cb5e831023d3bf63f022e
Certificate serial:       01962F74A3C336EE3B7836E2E38B2A95AFA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
Manifest number:          0D94
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: JBBfWvBvIPbMFEPW3wW2A3eZfMw.roa (hash: HPVfysoAPIIkBoYBVqV/VP2S0bfAf3Hk6zV6kpgHup8=)
                          2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: N4cuVC1zXa5BavzfMVxLXlzZD3hHFpr2xnmVv2Xrer8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a3:c3:36:ee:3b:78:36:e2:e3:8b:2a:95:af:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=7d989dab9e4b9a6b1ba62ab435099b6587f304a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:7a:6e:fb:22:11:2e:05:37:04:b2:44:22:
                    1d:ac:af:6c:b1:0c:e9:ff:99:ff:37:28:a4:5b:5c:
                    b5:73:f6:2a:0f:44:f1:81:e3:81:ec:86:d7:38:2a:
                    9a:6b:e3:f1:5a:6e:e6:73:bd:db:d4:b5:4a:6c:74:
                    23:6b:8a:9c:44:dd:63:26:26:b9:31:65:83:68:c9:
                    4b:23:90:4c:41:46:e8:f5:ad:f9:5d:e1:cb:a8:b8:
                    ce:e2:20:5b:f8:02:0c:36:2e:e3:32:c2:3b:3f:80:
                    41:4f:cf:d5:2e:e5:ad:c6:b7:3e:ac:52:52:1f:a8:
                    27:23:18:b9:d0:b1:84:57:9c:52:7b:4e:40:3a:3b:
                    db:07:81:45:7f:0b:cd:81:7e:6c:20:ea:17:8a:14:
                    90:e4:4f:b6:e3:ee:c0:f8:66:0e:70:be:aa:41:0d:
                    74:54:bc:bd:c9:73:0a:cb:70:39:fb:e3:fb:02:49:
                    21:3d:9a:3e:01:6a:2b:a6:12:21:c0:f0:20:85:d0:
                    e6:06:fd:41:13:7a:61:13:74:7c:2f:ec:24:88:09:
                    59:76:1d:fb:bc:43:81:c0:4a:48:cb:f7:ac:41:44:
                    70:0c:30:9a:1d:09:e3:64:ea:91:0a:8b:a7:5d:47:
                    35:e5:95:ae:04:f6:6d:13:e8:b1:ea:e0:5c:c8:6f:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:9D:AB:9E:4B:9A:6B:1B:A6:2A:B4:35:09:9B:65:87:F3:04:A4
            X509v3 Authority Key Identifier:
                keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:44:34:18:09:f2:9d:ac:9d:6c:cf:24:41:79:3a:76:23:b7:
         ab:cd:4e:bd:8d:87:ff:20:3c:a3:7e:a6:fa:4a:55:84:a2:e5:
         7c:3b:8f:05:c1:13:72:bc:b0:8e:3c:be:9b:b6:79:0a:42:43:
         b9:63:a2:9a:53:df:29:f5:87:59:eb:35:23:5c:7c:44:60:57:
         a1:f6:49:c2:fb:ba:47:eb:76:72:77:39:6f:42:f7:14:2e:4a:
         e7:1f:a0:22:ba:e5:61:1d:9d:ae:f0:59:8d:f5:60:40:07:a2:
         5f:d7:e5:2e:e2:3b:f1:0b:a8:ef:9a:46:ac:31:37:97:ac:a5:
         cd:4e:9f:82:e3:bf:3d:cd:17:ae:29:fc:29:72:45:1f:f6:8c:
         fa:82:62:9d:d5:7f:6b:3a:b5:26:f7:cd:97:d9:34:34:41:b7:
         d5:f7:31:9b:e3:0b:a0:9d:22:3c:ec:c3:9c:72:9a:01:e4:59:
         0e:79:13:b3:86:d2:1c:ca:d6:65:68:fc:48:0a:d4:fa:96:6f:
         76:12:ee:b4:b0:ef:be:64:a7:f3:f8:f0:3e:a1:bf:2f:9f:99:
         f3:45:2d:1c:46:fc:00:3e:74:7b:c3:7a:5c:22:a6:40:a1:ca:
         f9:7d:20:44:95:5c:61:19:f8:a2:37:b0:4f:e0:bb:e5:e4:4c:
         e3:53:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----