Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
File:                     iqaY-D40KcieNMjy77WxIBoY_Pc.mft (raw, json)
Hash identifier:          pFhAQwb4JnKiKbIPz4LrS6YOV7U9RFgOl9iPHmsUXm0=
Subject key identifier:   CB:AC:05:8F:E8:BB:26:C4:AA:F1:ED:FA:18:8A:5A:AF:82:D1:20:D9
Authority key identifier: 8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
Certificate issuer:       /CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Certificate serial:       01962DF43A8633336271484457EB1A3BAF7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: Eklv5iMrpdIb57nofb-2LDtZiMo.roa (hash: yKALUmc+NQQTzWDEWN3x1mf1BWmjZYZaxlqX1YAmy08=)
                          2: iqaY-D40KcieNMjy77WxIBoY_Pc.crl (hash: wwzMw6CeUa10Q7uulkTf0FG1Oxa+H2fvvBEqkOF6VbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3a:86:33:33:62:71:48:44:57:eb:1a:3b:af:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=cbac058fe8bb26c4aaf1edfa188a5aaf82d120d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:df:0f:f8:04:86:54:ad:ce:34:75:33:91:
                    cd:ec:89:e4:31:b4:fd:01:cc:cb:57:91:54:05:75:
                    fc:06:75:c8:fd:e4:93:c1:cd:46:4e:53:2c:64:34:
                    63:f3:1e:db:ba:c2:c2:c9:f4:02:0f:48:ad:b7:b5:
                    01:9b:55:9d:cf:02:02:70:aa:40:6a:15:6c:91:2a:
                    81:b2:5c:75:40:c8:ab:59:01:3b:34:3e:74:c8:cf:
                    ca:f1:7f:ac:96:fb:75:33:3c:65:f9:a9:8b:cd:44:
                    9b:1a:af:5e:5d:7b:38:96:0a:ef:93:0c:a9:02:39:
                    54:48:86:4d:d8:3e:57:82:49:36:26:92:a6:b3:6d:
                    9f:38:c9:14:38:8e:c9:52:00:09:66:21:cf:db:17:
                    07:59:db:3e:e4:a2:03:25:b6:cf:8a:38:a8:e2:92:
                    da:d6:4a:21:41:b5:82:5e:fa:b8:53:9c:d1:e5:2e:
                    d8:ef:81:55:03:4a:02:5e:b6:d3:7b:54:a7:f2:ec:
                    17:98:aa:30:7c:fa:ed:7e:e1:87:d1:51:33:3e:8c:
                    f4:ab:dd:c5:9e:a1:a0:25:d5:81:dc:99:8a:b5:51:
                    35:dd:fb:ae:b3:13:5e:9f:6f:4f:d2:e6:cf:09:11:
                    23:cd:1f:f6:d5:e4:cd:8c:df:b0:54:f6:22:df:5a:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AC:05:8F:E8:BB:26:C4:AA:F1:ED:FA:18:8A:5A:AF:82:D1:20:D9
            X509v3 Authority Key Identifier:
                keyid:8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6e:cf:6a:ba:ea:3f:52:39:e3:a1:41:8e:9f:b4:81:6d:b3:
         46:2e:d7:97:bd:40:ac:55:e5:6a:d5:df:04:67:5b:9d:a4:ec:
         ff:c2:e8:b9:59:0e:a1:cb:d6:ae:ef:0f:87:d1:aa:86:c9:ae:
         89:40:7b:38:a9:2f:9d:c2:fc:94:20:dd:28:b1:e2:f0:29:93:
         e6:2e:f4:8c:2d:b1:04:8d:6f:f8:fc:8d:b0:2a:74:9f:5d:70:
         0a:f5:cd:40:92:a0:f7:24:33:a2:18:8d:65:63:57:98:90:6f:
         8c:b9:92:16:a7:5d:e7:79:a6:3f:eb:17:8a:6a:e4:2f:12:e8:
         a5:30:41:b4:df:cd:86:89:2c:4b:46:12:6d:e7:b0:ee:2b:88:
         6f:e6:49:2d:3f:ba:69:55:bc:8a:1a:98:39:fd:e6:2f:43:be:
         91:3c:7f:c6:58:06:04:55:0e:c1:f7:71:f0:3c:91:ce:29:76:
         ec:98:df:cc:94:64:a6:01:58:68:03:ae:83:0a:71:e7:16:ff:
         e8:a6:71:da:50:ea:17:60:af:39:1a:a4:d5:f5:b6:bd:db:9c:
         bc:0c:d7:e1:62:3b:79:a6:af:9d:68:6a:3d:e2:1c:25:28:33:
         39:01:c8:87:45:5a:75:7a:92:25:94:7f:ce:8f:0c:6f:29:bf:
         c0:e0:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----