Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File:                     ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier:          WwoTuEYbe1rwe1m7Fn4oYvdpgVVFRH9ohg0UyzlHSDs=
Subject key identifier:   52:4A:72:9A:3C:2F:24:44:37:7B:DC:8D:A9:0E:DB:7A:A2:41:9B:3E
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer:       /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial:       01962ECFC81FAE4E5C5A2E5E5D7A8F8D6BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
                          2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: rmE1TS2kcIWi61vIeuHBF+lOiStZ8tAlQJIGOPD9mU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:1f:ae:4e:5c:5a:2e:5e:5d:7a:8f:8d:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=524a729a3c2f2444377bdc8da90edb7aa2419b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:6e:62:c5:85:68:6b:21:da:cc:57:a8:45:
                    02:1e:1f:a8:83:77:2a:ba:c2:86:e2:72:38:5f:41:
                    ff:12:8e:cd:a5:a5:03:53:41:b2:fb:82:24:fd:95:
                    9d:0b:2e:83:e5:93:f5:15:16:81:12:68:4e:34:1b:
                    49:5e:b8:2a:ac:60:66:7e:06:59:9b:e8:04:56:d5:
                    52:05:7f:3e:ae:67:63:6d:e0:43:41:31:34:a1:53:
                    b0:e8:b7:3b:cb:6b:f9:ff:11:c6:38:c8:51:c8:d5:
                    46:0d:e7:3a:5a:77:5f:aa:16:b0:65:12:06:8e:ae:
                    d5:09:5f:88:f3:37:2e:77:cd:b2:4d:9f:a0:05:d4:
                    e7:8a:17:14:87:c5:a6:a5:9b:ff:6e:d6:35:a9:d9:
                    d2:25:c5:51:7e:96:2f:d4:91:3d:c5:cd:a1:40:bd:
                    6d:c4:fe:93:33:f1:62:6d:0c:79:17:23:34:27:12:
                    58:b2:a0:ac:ef:f7:e6:3a:2e:46:3b:f8:07:e2:c8:
                    27:b1:90:50:a8:6e:45:78:d3:22:85:d1:26:a9:2c:
                    6c:ba:ae:9e:9b:97:65:b2:b0:91:15:4b:58:c7:9e:
                    67:01:93:76:b3:cd:fe:2e:81:f5:4a:f6:7a:a1:8f:
                    f2:db:cb:70:10:8c:b3:12:f4:38:71:80:28:eb:14:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:72:9A:3C:2F:24:44:37:7B:DC:8D:A9:0E:DB:7A:A2:41:9B:3E
            X509v3 Authority Key Identifier:
                keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:73:cf:de:f0:38:1f:76:5b:34:7a:07:c8:8f:7c:87:21:6e:
         2f:fc:4d:60:9e:3e:20:cd:8c:d9:93:44:8e:76:b2:86:61:59:
         8b:8a:49:70:8f:42:ef:ea:a2:97:16:6e:d9:a3:b2:38:8b:6c:
         2a:18:1d:ea:88:16:98:81:35:d8:d0:d1:b8:66:43:0e:b2:16:
         b3:1d:71:ca:e0:29:16:1f:51:7e:da:c4:3b:79:66:27:f5:c7:
         5b:d8:dc:44:6c:93:bd:fc:c9:7c:ae:d7:7a:57:92:00:02:cc:
         a0:30:c1:74:e7:f8:17:e0:f7:67:2d:27:11:94:90:88:a2:c0:
         4b:87:fe:1f:34:9f:d0:69:e6:4b:3a:e4:68:3e:9d:70:a1:bd:
         6a:05:01:18:2d:b5:2b:26:c3:ba:e6:0f:02:18:ea:e1:1e:b9:
         20:03:4c:09:2e:0b:ac:f6:5d:87:4e:04:73:63:20:cf:3f:2f:
         68:24:6e:85:6a:f7:b2:34:97:61:8c:e7:09:75:a3:66:10:9a:
         df:71:a0:f9:f7:6f:e2:b0:69:c7:f8:3a:1e:d0:69:01:6f:84:
         21:c0:65:33:62:18:6b:bc:bd:97:ee:2d:50:a9:d6:6e:b0:6d:
         06:95:f2:5e:ca:47:a9:2a:be:fe:1f:e7:61:fd:93:02:ec:fc:
         2e:97:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----