Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File:                     iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier:          z1FX8t0NFHXOXYGrd00hR9HCvKE6Nm6uHFqty/J6w9E=
Subject key identifier:   3D:A2:2E:F3:9F:5F:30:95:18:5D:E1:04:8C:24:7A:DA:0A:64:A2:91
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer:       /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial:       01962DF426FF37BCE393A8B99CAF36EEF22C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number:          0BE5
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
                          2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: rIrUBMgkVmKy8XEZzLJf46up/WlWcrcoqbcRrIWTPIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:ff:37:bc:e3:93:a8:b9:9c:af:36:ee:f2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=3da22ef39f5f3095185de1048c247ada0a64a291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:6e:8c:de:fb:84:06:ed:fb:0d:52:cf:29:
                    ec:83:9d:81:b2:2d:ea:d5:92:d9:65:91:ca:4d:15:
                    0c:89:bb:20:2d:bf:9a:31:c4:02:0e:c8:23:d6:26:
                    8b:e0:89:55:44:f0:52:cd:38:e1:26:b4:8a:3f:0b:
                    86:53:a5:a7:aa:2e:d1:ac:3a:dc:52:f3:86:cc:c2:
                    c7:0a:5d:0e:a3:0b:de:f6:56:61:91:9b:62:fb:86:
                    51:96:7a:63:22:66:0c:d0:d4:ed:34:6b:ab:6f:5a:
                    75:af:15:dc:2a:7b:ad:eb:d1:83:4c:04:ff:9d:eb:
                    d8:76:90:d9:83:12:59:07:f8:7e:1c:86:02:8e:d5:
                    40:91:fb:65:ea:a5:58:72:e4:67:ff:00:e6:15:a3:
                    c2:84:68:bb:53:98:79:44:5f:cd:66:e0:9c:20:f8:
                    b5:81:6c:6d:65:67:e8:d1:4f:dd:6d:06:19:ab:a1:
                    ce:ed:9a:f4:2a:32:19:b6:53:ed:08:7d:2a:45:52:
                    e0:99:33:0d:d4:39:e6:6b:fb:a1:45:e8:b8:81:8b:
                    45:d6:cb:38:e2:f5:61:57:78:7b:40:b4:dc:4a:6f:
                    e8:2e:94:c7:2b:a0:f6:34:ff:9b:3e:82:af:1b:89:
                    0a:e2:62:b0:a2:26:3e:7a:32:5b:8b:f1:7c:ec:0f:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:2E:F3:9F:5F:30:95:18:5D:E1:04:8C:24:7A:DA:0A:64:A2:91
            X509v3 Authority Key Identifier:
                keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:06:75:ee:88:61:72:8d:99:c4:fa:3b:4a:36:6d:29:7d:34:
         1b:73:59:5b:88:00:10:ee:1d:c9:af:84:16:54:71:da:91:60:
         8c:42:32:e1:f5:22:95:13:d0:11:20:5c:4f:37:b5:e4:87:2f:
         0b:ca:c4:87:93:ca:e6:20:e9:dd:af:04:43:ca:1f:b8:c1:0d:
         a3:49:86:45:4b:d4:99:2d:8d:8f:04:b7:ea:03:eb:9e:32:25:
         76:98:dd:24:e2:46:83:92:97:c9:6f:a2:d9:8b:46:a3:a5:d0:
         b5:e5:c4:0d:c0:7b:b9:06:e1:2c:00:2d:e5:9e:d5:83:13:c7:
         91:8f:79:7a:f0:15:10:fa:a0:0d:3e:79:ab:5d:92:6e:8e:f9:
         b4:b9:2f:ea:87:2f:77:ab:65:5b:3b:c7:16:68:d9:bf:45:1e:
         d4:75:fc:ca:94:71:3b:ca:9c:b5:22:d2:28:30:a6:83:6e:eb:
         e6:4c:dd:59:5e:97:a0:78:5e:a6:4b:51:a8:8e:15:f6:f9:89:
         76:a6:45:e4:c6:d2:6c:eb:40:be:22:77:97:d5:cb:08:63:de:
         3e:27:25:56:a1:12:5f:c0:6c:a6:1b:76:10:af:f2:fb:c1:d6:
         ac:c3:f9:f9:a7:e7:45:1f:20:3c:4b:b1:e3:5c:fe:1b:49:50:
         ea:32:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----