Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File:                     iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier:          BSePv/KoXey4mx0YCaCxEZNE3SPiPBqKFDbdikT9WVI=
Subject key identifier:   E8:8F:A1:DC:D1:38:E8:03:FC:E7:F8:48:EB:74:78:1F:B1:79:69:26
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer:       /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial:       01962F06A6E9166063E695F9DFF53C7423EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number:          0228
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (hash: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=)
                          2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
                          3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
                          4: gdHjw5BAYBUGiQIKDf_rANYjbqo.roa (hash: rBCOEGXMkDk7MH6Epcgax70EgSCg7o0cp931QH6ZEmk=)
                          5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: JQl9kz1u6bIctIiLMHorL+9tINRkj05j+gonLlQ93rE=)
                          6: y7BcwDEAXqOJr6z4aNGCsX7xfw0.roa (hash: NHC7ZwJSkEI3d9bNJO6OCWV6hxqIR1IsXwJaROvY2+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:e9:16:60:63:e6:95:f9:df:f5:3c:74:23:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=e88fa1dcd138e803fce7f848eb74781fb1796926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:c5:3d:40:ea:9a:d2:af:e9:56:23:ac:66:
                    d0:ba:93:49:3f:e2:12:41:a4:7a:f3:fe:a9:39:84:
                    a6:80:9a:a1:f3:a0:65:a8:62:38:11:32:9c:d2:c2:
                    b2:9c:87:09:bf:19:52:64:93:12:bc:2e:ba:9e:05:
                    e9:97:05:2f:e3:20:ac:a7:cd:20:3e:21:d8:aa:a1:
                    b8:49:3f:51:d1:d3:19:71:cd:00:9e:4d:4e:9e:e2:
                    5c:91:4f:18:fb:79:df:e1:d5:ab:67:29:19:d3:66:
                    13:6a:fd:5b:fa:69:fc:cd:d3:9b:2b:9e:19:8c:ea:
                    a5:09:e5:98:3a:6b:28:44:af:46:5e:4c:2f:db:4c:
                    12:97:cb:6e:70:11:86:f1:c9:a2:e0:20:68:e0:9a:
                    d1:18:04:31:72:1c:b1:14:81:dc:98:11:7c:1e:1c:
                    bb:14:c6:d2:af:db:f3:eb:12:4e:02:f9:fb:79:f6:
                    9c:86:b7:02:45:31:3a:4a:7f:db:43:f9:cd:16:cb:
                    25:83:51:05:52:f4:ce:4d:e4:ad:01:d8:a2:9c:9d:
                    42:07:63:8d:1e:8a:d2:bd:36:4b:39:83:fa:59:8a:
                    d9:74:a0:29:0f:6a:df:06:e6:de:93:19:b1:8e:82:
                    ed:cb:a8:b0:44:a8:d9:01:7a:49:e3:2f:d6:53:07:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:A1:DC:D1:38:E8:03:FC:E7:F8:48:EB:74:78:1F:B1:79:69:26
            X509v3 Authority Key Identifier:
                keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:31:59:83:76:69:a5:01:21:ab:cb:0d:7e:7c:72:90:3f:44:
         29:4e:f1:4a:8d:bd:ad:ac:75:ae:ba:d6:6d:a0:8b:44:11:08:
         b5:43:64:f6:33:16:b0:6d:dc:e0:20:68:b0:69:f2:06:4a:d8:
         83:57:66:51:0a:da:91:44:1c:61:74:8a:73:b6:fc:64:15:41:
         bf:2f:a8:18:53:a9:59:45:5e:9c:e3:92:f3:75:d4:b6:b3:5d:
         47:02:72:23:0d:45:34:d9:60:22:76:c7:45:61:0f:73:b8:39:
         f1:31:11:d5:f2:4a:b1:f4:2d:73:65:02:a6:2c:77:d2:05:47:
         99:dd:98:e6:4d:2b:d5:a0:d9:86:9c:f6:e2:ca:60:20:3d:7c:
         70:e2:a7:d6:49:3e:01:7c:5b:42:84:fd:e4:1c:81:eb:30:41:
         a7:d0:35:36:6a:b8:64:f5:79:44:6e:9e:49:0e:00:f2:89:ae:
         85:8a:97:66:30:91:ea:47:71:7f:6c:df:af:c7:b9:0e:8f:48:
         bd:9f:00:12:6a:42:b2:f4:e0:ff:21:68:4f:ae:53:fc:d2:94:
         c4:8b:0d:14:49:a9:23:76:50:53:33:3f:56:b7:fc:e3:e5:6e:
         2a:ec:20:37:75:98:ba:ba:48:3a:01:a8:4f:6f:32:d5:85:53:
         be:95:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----