Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File:                     iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier:          gUIV1CQVI94K/LMDeu+0y6VtMy7zpwY4mT9BIK34SRA=
Subject key identifier:   92:29:B9:BD:0F:29:F6:94:DB:12:0B:61:F6:18:15:76:C1:29:98:D8
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer:       /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial:       01962F74CBC3D4E87AE0F13A3692DA71FD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number:          0802
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
                          2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: k7yeohV9bZR3wpLu6V6DiukfEMwHwC7CjXaKPv4V/bA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cb:c3:d4:e8:7a:e0:f1:3a:36:92:da:71:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=9229b9bd0f29f694db120b61f6181576c12998d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:ca:c8:cd:d9:4d:e4:b4:d6:50:7a:a0:be:
                    84:87:94:c4:69:a3:03:1f:14:36:1e:22:43:ea:4d:
                    cf:ad:93:ba:41:f9:1a:82:ec:b1:a4:e1:a1:a5:9a:
                    df:11:c9:f8:08:e9:ce:a9:94:96:a0:bb:90:fa:2b:
                    14:04:b7:22:48:1c:91:38:dc:d5:cc:01:e2:c1:a3:
                    31:72:51:c5:1e:2b:91:b0:57:79:f4:31:95:1a:16:
                    b4:aa:db:2e:26:c0:ad:13:ec:25:05:3f:6c:3d:0c:
                    68:18:67:99:05:9f:46:80:78:b3:f5:4a:c7:4c:1b:
                    4f:27:6b:01:d9:51:84:08:46:bd:35:6b:d4:f9:62:
                    1f:2a:5d:a2:70:5e:a8:18:87:d4:c8:3c:8c:db:ea:
                    d6:d0:c3:65:4b:7b:81:e4:bc:45:de:81:4e:e3:84:
                    5b:04:ea:6a:7a:ad:04:08:b1:3b:90:7b:52:c0:a2:
                    59:b1:09:a1:6f:af:6d:ac:3c:ff:49:21:20:20:17:
                    3d:65:76:61:df:bc:8c:02:61:98:f3:2d:04:10:25:
                    bc:d9:26:73:6a:ee:32:ed:5d:c8:76:9e:d6:60:5e:
                    6d:bd:88:97:56:48:2e:88:b0:c4:1f:8e:3d:a7:1c:
                    3c:3a:78:9e:cc:75:2a:7a:48:e3:3b:07:3a:4c:a4:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:B9:BD:0F:29:F6:94:DB:12:0B:61:F6:18:15:76:C1:29:98:D8
            X509v3 Authority Key Identifier:
                keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:b7:68:19:73:f6:3b:c1:91:f1:32:43:7c:67:da:34:d6:
         ef:94:ce:c9:8c:0d:ce:3a:43:0e:d9:01:1e:f0:b4:0d:9a:c9:
         70:a4:d5:dd:f6:67:7d:11:dd:76:d5:1b:ce:f0:2c:b9:0c:d6:
         fc:d2:cf:22:c6:54:64:94:34:ee:95:15:30:09:e3:9a:23:49:
         5e:46:07:c5:31:97:84:17:be:ae:5c:b1:79:5b:eb:03:d4:99:
         bf:2a:a5:a7:f4:28:38:bb:cc:70:27:b0:41:1d:63:c1:3f:7c:
         a2:ed:65:01:3e:fe:f1:61:c5:58:27:4e:b2:e0:de:27:ac:b2:
         05:d5:28:48:48:63:14:ed:da:4a:83:e2:ef:4c:ef:3d:94:de:
         f6:f1:f6:2e:37:f1:e4:29:d1:68:c8:02:ea:72:62:3e:9c:a8:
         72:9c:ad:47:95:00:14:69:89:22:9e:fc:40:13:1e:fb:a2:79:
         ca:ad:ca:2d:c0:ff:57:e6:d7:a0:4c:83:77:b7:a8:09:76:f1:
         f1:34:1e:5a:1c:27:ff:23:e4:88:4a:a5:f9:68:6e:c3:e8:af:
         38:56:f2:b2:4b:6a:a1:68:5f:70:a7:26:c6:f4:41:7e:d2:cd:
         36:29:3d:12:64:e4:59:7e:dc:f3:de:99:36:17:75:11:6d:66:
         1c:a0:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----