Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          1TZEe9tcBDmoLlh2mtDa7Fh0XFGMOcx5FzPDcZrmHOg=
Subject key identifier:   90:D4:99:F9:FB:EE:27:BB:4D:A1:3E:00:31:86:74:1F:5E:FE:2B:DD
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       01962F3DC48670253BE9EB7E8EED41B95BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          0CAA
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=)
                          2: 26hYMSP5I24sSK8G8ARAORN91aI.roa (hash: fE1Nc8BOxk+V3SDxaatTnZ1kS+wI1f9B8qy0zBZMF/Y=)
                          3: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=)
                          4: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=)
                          5: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=)
                          6: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: uQTc5aj4OuIoFBxv13JpVIh6SyK6ST5K9B7xFHVf4tA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c4:86:70:25:3b:e9:eb:7e:8e:ed:41:b9:5b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=90d499f9fbee27bb4da13e003186741f5efe2bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:4e:7b:f2:cf:02:1e:b0:28:93:d5:82:db:
                    37:3d:1c:f6:79:ef:1d:91:dc:07:53:75:4a:60:ff:
                    46:ff:66:39:fc:b9:14:52:a7:79:9a:61:d8:cd:8d:
                    40:48:cb:64:13:b4:26:7d:5a:bc:40:25:20:51:53:
                    ae:e8:4d:0b:20:e0:f7:0a:45:0b:ea:3b:ed:dc:60:
                    8f:19:5b:06:66:67:82:4e:f8:3e:36:6e:07:a0:b7:
                    20:29:e6:81:6e:a5:84:af:85:07:88:80:00:10:19:
                    c9:03:22:d0:41:8a:6e:a9:2b:9f:34:50:0e:66:18:
                    7e:cd:26:d5:6c:ee:4d:48:c0:1c:d4:91:8c:2e:9c:
                    a9:df:50:20:fe:29:4e:07:41:30:cf:89:82:2e:d5:
                    09:d0:fb:01:18:72:4f:0b:ff:45:e2:68:9d:69:cd:
                    32:ca:68:fe:12:de:eb:51:de:90:26:24:29:93:d8:
                    53:ca:0d:e5:b9:bb:d0:22:ca:2d:b6:c2:23:73:18:
                    7f:2e:39:be:d1:3a:9b:45:b0:49:6e:fa:f4:56:cd:
                    98:ff:48:d7:67:1f:47:4c:7d:fc:ca:05:a2:3a:51:
                    b2:0c:76:f6:6c:ec:49:e5:10:c2:47:a7:84:6a:b1:
                    78:c5:7f:df:9f:e5:67:f5:4c:3c:e8:0f:c0:07:2a:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:99:F9:FB:EE:27:BB:4D:A1:3E:00:31:86:74:1F:5E:FE:2B:DD
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:d3:80:d6:b1:b0:34:52:a2:f0:8b:41:e1:6b:1d:ce:0d:
         1f:c4:1d:d7:71:8b:aa:3c:e2:70:06:42:0e:59:fc:5a:46:ec:
         7c:90:b1:c4:8d:9e:68:ca:c2:5b:24:e2:db:eb:c9:c0:5f:27:
         e1:79:73:20:ed:4b:61:83:bb:1e:84:85:13:c0:aa:ec:c8:37:
         87:9d:fa:7d:d5:7b:a6:33:48:e9:ba:32:af:f6:42:55:05:3c:
         54:23:a8:ec:ea:5e:f9:94:96:e3:6d:1c:57:d0:83:48:05:2d:
         0a:f5:ad:c6:c8:f3:30:75:be:b7:47:a7:27:89:ec:a3:67:8c:
         ad:ad:d9:6b:bc:92:6a:74:83:e9:eb:b9:b3:c2:e8:3e:83:86:
         cc:13:4f:fb:20:de:e6:3a:71:59:e2:97:88:b0:91:9d:bb:c2:
         65:ac:7e:75:12:f4:2d:54:be:bd:e0:eb:bc:2b:0d:3e:62:a7:
         73:73:eb:9d:a3:ea:23:d6:aa:fe:ba:9c:f7:50:29:e8:d2:f0:
         b4:17:52:bc:f3:23:aa:4b:b4:ed:7c:47:d9:ee:fc:c5:3f:54:
         e8:7e:ab:13:56:a9:68:de:34:37:aa:a0:e2:a7:98:b5:fe:cc:
         b1:d9:0a:90:19:72:c4:64:f3:fa:0a:70:89:8d:c3:e2:19:d1:
         11:24:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----