Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
File:                     iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json)
Hash identifier:          wVpRpUHPO5AHBv1qdvzD4WXxz/OtFNTgFxd8MXrKMR4=
Subject key identifier:   9A:57:02:31:2A:A2:C5:52:3B:07:85:25:A6:86:00:D6:DF:8E:E1:1F
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       01962E2AD665DEC8233DF9EF819B7BEEBE12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
Manifest number:          14C8
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 5rIeuHWtH8yu4biA9JtwWPp6MuE.roa (hash: siMvcky3cvMun2YkaQXVSYL1TTM6RnbrDQWn8L9dEp0=)
                          2: I25027nvCvvxspQIMA-_-29u_c8.roa (hash: c8OueX1EGFj7ydd80sYSa+JEqyDmMH4B/vwcOtonhuw=)
                          3: I8gT2ozGfRGoAfq3xoWWz2hkzPc.roa (hash: JuwWXXoUzp/KXgYqvxW04jiRY2U2W4HODovHm1apUSM=)
                          4: JuflCKY-Mb7BlQudMjqutisHkO0.roa (hash: 8TAVjWPKryefk6C3xQCj3q5ZBmjPOTBTdzadDKXxGwM=)
                          5: PSTA7aBO3VYB2zMpMImeOQX4TxE.roa (hash: KhNu39d0hMZQeHsSSDypoBQ2uQz6//kc0yiRwmUN5AM=)
                          6: S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa (hash: eZK9HJiCpN6lVubG/bQi7DGgdx+1nKeyi2v0Mer4MLk=)
                          7: bCDR_VakZN9P1SLjLv5dASNlQHQ.roa (hash: 8P6SAAct3v3ggzTHoy70AVMzJ0yoV1oRHXzBMv0Uajk=)
                          8: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=)
                          9: eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa (hash: eKfLdAfKn4XzQd6Pr6XXZ6luO/xNC4ppwlNyAMVAidE=)
                          10: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: AJrnTrX7DvrTNSpGuSkGWJaKUikxJMrIIqOC0Arm0pQ=)
                          11: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=)
                          12: n0aetbv1kdrTGLwx_MOdeRwsltg.roa (hash: 83SMmnuOZ/9x2wOey39f5QXGhDuZJTHXwPmcJrqnbp4=)
                          13: qNmo9ErwvGzB7-gtURMQyOE2DUI.roa (hash: uBNPGZq3r2haanNNNROjCkxdwQgouK/Y3JytQpmCLT0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:65:de:c8:23:3d:f9:ef:81:9b:7b:ee:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=9a5702312aa2c5523b078525a68600d6df8ee11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:22:27:71:9c:90:6f:ee:67:47:3a:9b:49:
                    7d:e7:93:58:b1:f4:a4:24:d3:3d:ff:5f:46:27:72:
                    bf:47:59:3a:57:77:41:8c:fe:26:5c:66:51:80:f3:
                    6e:24:c4:18:37:91:17:05:7f:6f:7b:0c:2b:ca:a7:
                    63:40:82:ba:d6:61:3b:e4:be:cc:79:74:55:cd:b8:
                    52:c1:cb:86:d3:f0:fc:17:4e:ba:ef:3d:fe:64:1b:
                    50:24:7d:4c:9b:bb:90:28:0c:b8:7c:84:a1:a0:f5:
                    5f:e8:9e:84:54:ba:45:0c:28:c9:4c:ec:7a:d1:d9:
                    d1:6b:8b:99:ee:93:d2:b8:e1:62:31:1e:cf:8d:4b:
                    2e:52:e1:6a:9c:c4:08:8d:99:38:ec:c6:2b:ce:0b:
                    34:55:37:49:ce:84:2f:63:4b:55:48:b3:2d:da:27:
                    e4:bd:9b:fe:28:74:a0:d7:69:78:08:14:a1:1c:f2:
                    58:31:91:9f:75:2c:be:30:7e:4e:4c:0e:8a:94:8e:
                    c0:e2:cd:0a:3f:a8:2b:91:1b:3c:81:a3:e3:f6:df:
                    bc:27:13:ea:a4:7b:0e:ae:dc:14:3a:9c:4d:8b:99:
                    03:04:f5:28:93:06:a7:d7:a5:dc:8f:b9:1f:4e:47:
                    70:c4:48:a7:5e:9e:72:6e:3b:46:fb:32:03:e1:32:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:02:31:2A:A2:C5:52:3B:07:85:25:A6:86:00:D6:DF:8E:E1:1F
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:11:86:56:78:e2:25:46:6c:d0:2a:89:21:21:e4:f9:0a:
         f3:8e:21:d2:86:ff:c5:e5:9c:d1:7d:fe:32:5d:63:d3:2d:3b:
         0a:70:b8:b4:e2:ec:c7:56:83:56:97:35:42:d2:50:49:9e:82:
         e9:4f:c8:39:32:d1:eb:35:d6:70:7d:ab:47:52:1d:11:69:9a:
         ee:b2:5d:ec:48:4a:d7:3c:00:98:88:cd:50:36:d0:a2:52:62:
         c9:d8:9b:d5:22:c3:f3:16:20:6a:4c:df:8f:93:a2:b8:37:3f:
         12:a7:01:7c:0e:f7:24:90:d6:87:5a:a0:91:45:e4:bc:88:8b:
         9b:22:e6:b7:46:26:85:22:d9:c0:a3:47:fc:de:3c:39:ea:12:
         99:84:dd:2c:41:28:eb:de:c7:fa:bc:86:e3:bd:4a:33:05:b0:
         57:d5:36:4f:5c:60:a5:4c:9d:0d:10:18:b6:cc:a1:7d:94:fd:
         5b:fb:22:3b:99:08:a1:f1:d7:6d:ed:3c:43:13:ad:a2:4a:18:
         5b:e6:29:97:29:79:9c:5d:4a:49:47:fa:8d:4f:42:0a:28:d1:
         79:e8:70:12:f4:32:19:75:ed:98:66:f1:c3:8e:a7:ec:77:65:
         40:8e:a4:11:4f:69:48:3d:53:e2:77:04:d0:5e:bb:64:23:f8:
         f2:7a:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----