Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File:                     iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier:          WU2zrScYpAU8o8PRkzNug+r8vqu3YZmxS8f/lHPPIIQ=
Subject key identifier:   B9:59:AA:47:08:2E:6F:28:14:64:A3:DE:9A:E3:16:77:37:E6:39:2E
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer:       /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial:       01962F74A1A03C49103D25A9876D105C7C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number:          13DB
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: 5xmCmil76jB5/E1dCs74/gUmBzCxX4SsVbLVD9ptrHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:a0:3c:49:10:3d:25:a9:87:6d:10:5c:7c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=b959aa47082e6f281464a3de9ae3167737e6392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4a:b5:1a:65:54:4d:f4:ba:93:09:92:7c:45:
                    4b:c3:b9:25:99:de:c1:37:ea:5e:11:6a:17:fe:79:
                    9f:9b:67:24:bb:5b:da:7e:3f:22:3a:c7:8f:7d:95:
                    9e:ff:dd:03:7a:e4:5e:24:95:fe:3f:d6:93:e5:59:
                    56:83:88:bb:fc:f3:c4:ab:93:1e:dc:6b:b5:35:03:
                    6a:b4:bb:6b:1c:90:bd:d0:01:3e:c9:89:f4:eb:5a:
                    08:41:0a:93:0c:8d:ad:9a:70:d1:f1:40:68:4b:a2:
                    04:50:98:26:05:b8:dd:fa:c6:d0:9c:bb:98:e9:7c:
                    08:dd:98:22:8f:10:7d:76:ab:a2:18:62:72:18:96:
                    21:ff:62:26:16:2e:09:84:bb:5c:a2:a2:1a:04:45:
                    2e:f5:f1:5e:e8:fb:0b:88:b1:5c:2b:14:3d:8e:8a:
                    46:d9:69:89:5f:1a:45:82:cd:e8:20:cc:b5:df:46:
                    6e:9a:3c:1d:8d:92:c0:2a:e2:d7:76:4d:28:1c:7c:
                    ab:17:db:a9:40:a1:c1:06:7c:27:c2:1a:26:02:be:
                    03:f0:e0:c0:be:a4:3f:b8:8b:f0:91:4d:37:cd:f9:
                    3d:ef:67:03:08:d0:0d:e9:fa:9e:cc:8d:9f:a9:a3:
                    97:78:68:00:db:66:b7:27:cf:5b:38:77:93:49:7d:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:59:AA:47:08:2E:6F:28:14:64:A3:DE:9A:E3:16:77:37:E6:39:2E
            X509v3 Authority Key Identifier:
                keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:13:d0:f0:a5:6b:1e:b6:4a:48:4e:a1:1d:f8:43:1c:95:
         8a:cd:62:f6:0a:d8:8b:b3:49:ce:ad:7b:41:c0:89:f0:6e:a2:
         09:e3:26:a7:ab:d3:6e:64:62:63:2d:20:8b:d9:a8:5c:69:78:
         09:f3:d0:fc:1d:ef:58:da:38:fd:b0:86:86:7b:29:2e:06:27:
         fb:ba:49:c1:43:25:83:eb:91:cc:36:2d:5f:db:92:29:b6:e8:
         f5:e7:e9:30:16:c7:b7:dd:89:9f:06:d7:79:f4:ae:74:bf:5a:
         8b:40:a2:03:da:7f:83:36:be:01:77:5b:82:91:c5:0f:bc:29:
         fb:5a:af:cc:14:a2:b6:a0:70:68:cb:4e:34:28:23:32:19:a6:
         10:a8:87:bf:4b:7e:8e:82:92:8b:92:6a:a1:35:7f:aa:f7:65:
         c0:4e:e2:c9:b4:2c:01:25:6b:67:08:79:73:b4:a6:51:04:b9:
         38:3d:4b:74:ca:b2:21:23:fa:6f:5d:65:ea:27:83:d0:90:47:
         18:41:27:3c:82:ed:db:94:ca:3f:5f:9d:fa:8d:0b:26:4c:b9:
         30:19:04:e6:21:6e:bb:c2:7e:3f:71:1a:65:d2:ef:80:e5:01:
         e1:a8:5a:3e:e5:1d:46:9e:ce:91:95:7e:59:a6:ef:a0:a5:b2:
         a1:fa:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----