Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          3h9vW1SCGnAQTCcY0YNpMOlGRuadTwaAM0Wqzsyb7YQ=
Subject key identifier:   3A:C2:5B:D4:E6:A5:A1:97:26:FA:6E:20:26:A7:ED:90:A8:7F:FD:A2
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       01962E61B08DF91DB3ACE5FB318E016652A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: 2d8C0+A/VfGWDZu59273XbdsQ9FWBjZZ7GDEAEfuN+M=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:8d:f9:1d:b3:ac:e5:fb:31:8e:01:66:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=3ac25bd4e6a5a19726fa6e2026a7ed90a87ffda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:71:80:91:92:96:dd:e9:74:9c:cd:c8:00:
                    43:29:49:53:ed:67:38:7a:b5:78:97:46:71:34:c7:
                    ee:57:0d:e3:28:d9:b1:0c:17:34:cd:11:d0:0a:49:
                    84:b9:2e:fc:11:68:c9:c7:49:9c:59:18:a1:cd:18:
                    01:4e:90:6b:4f:9c:59:ae:15:e9:a3:e2:11:3b:1a:
                    94:5f:68:c1:27:9c:45:45:1a:15:1e:1b:92:bb:cf:
                    fb:d5:b3:dc:5f:15:d4:4f:9e:35:ca:84:a2:a5:3a:
                    50:ce:3d:07:5c:3e:dc:8b:f8:34:94:3a:a9:ad:8c:
                    3d:78:ab:26:ad:0f:7f:4f:7e:c1:e2:bc:f5:ff:1a:
                    61:3b:f4:ce:35:5c:3a:38:db:05:55:c1:0b:b9:20:
                    00:1e:14:7b:86:8e:a9:c8:3b:f4:ff:7a:89:9d:5c:
                    6f:13:ac:8a:98:a9:e0:1d:21:1e:88:d9:5e:da:60:
                    95:07:cd:c6:12:20:c7:5c:e5:8b:88:a4:84:0a:c0:
                    c0:96:60:fe:df:1c:99:d4:82:1d:e3:4a:64:46:03:
                    78:e6:e8:5f:09:28:19:6f:30:3b:b8:e9:32:5c:98:
                    d7:48:7c:5a:c3:84:da:d4:58:c6:c2:86:20:69:6b:
                    28:8d:5e:97:e3:d9:4c:02:53:0a:17:97:c5:32:ec:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C2:5B:D4:E6:A5:A1:97:26:FA:6E:20:26:A7:ED:90:A8:7F:FD:A2
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b0:55:94:24:63:fa:b5:57:15:e4:4e:e2:89:12:c1:c0:0e:
         fd:d2:23:c5:c3:42:fa:d1:8e:d7:a8:2b:8a:10:4d:22:33:ec:
         6f:e0:7f:a0:27:24:a1:79:41:c8:45:41:b0:3c:0d:3a:54:1e:
         c0:c3:be:4a:29:9d:7d:67:66:db:d4:06:83:10:85:60:9b:00:
         37:88:a9:62:77:85:18:41:19:9d:8c:a6:f5:02:35:be:a5:1b:
         d7:03:f4:2e:71:e8:f9:13:33:73:b2:73:97:4e:90:24:c6:98:
         05:67:4c:cb:33:32:e6:27:61:d4:2a:72:09:d3:39:f1:a9:35:
         68:c8:b5:2d:b2:52:78:bb:38:31:7f:bd:4f:c3:35:ab:e4:19:
         b4:78:40:e5:0d:ea:7f:34:cb:14:fb:7c:1a:0f:1d:6f:69:65:
         d3:e6:26:cc:7c:e9:82:1b:36:19:9d:71:54:f9:24:24:e2:30:
         f9:d0:08:79:d0:01:76:e8:ac:fa:e6:42:b1:d8:3f:56:d3:c0:
         64:5a:6f:2f:55:75:18:c2:4f:da:cd:9d:39:c5:46:de:2d:d1:
         6a:5a:18:5a:f0:34:99:2a:87:3a:6e:6e:2b:a1:58:a3:ef:57:
         2d:eb:f7:6a:03:ec:68:71:26:93:6c:6e:b0:75:a5:9b:ea:bd:
         b5:6c:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----