Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File:                     iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier:          HxJE5/dmQAgB01Qau4wqNLfO8Vmmsh0cKKfxhsX/X+Y=
Subject key identifier:   FA:6B:83:4E:7D:16:A2:42:EE:14:92:5F:6D:90:5D:73:3C:1C:3F:AF
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer:       /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial:       01962DF41D8E8FF21CF3B23476C66B06EDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number:          1092
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
                          2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
                          3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: egkqD65zQougS9Ign/zrwNREg1seIwj+4yxbJZ/LAVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:8e:8f:f2:1c:f3:b2:34:76:c6:6b:06:ed:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=fa6b834e7d16a242ee14925f6d905d733c1c3faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:13:ea:7d:16:7f:ff:92:19:e3:80:65:f5:
                    6e:cf:4c:18:9e:c0:87:48:76:13:d6:ed:22:51:1b:
                    ed:c6:85:61:74:5a:7e:20:85:75:6e:9c:d4:ef:7e:
                    58:a9:2c:f9:3e:8c:1d:bd:fe:c9:f3:4f:b2:da:42:
                    7e:ec:7b:c6:5a:a5:e6:b8:35:0e:61:e2:66:80:56:
                    58:9a:b8:b6:d3:50:37:62:af:ec:d3:ef:0a:4b:f5:
                    66:c5:b9:5f:ff:c9:d5:5d:44:00:47:f0:54:1d:a1:
                    fa:82:53:38:d2:c2:15:74:ad:7d:e5:2b:7e:d6:4b:
                    65:4e:51:bf:40:98:6e:b1:65:9c:68:6d:72:54:d3:
                    56:38:5c:c2:63:16:ae:5a:8d:23:ab:85:a5:4f:34:
                    12:8f:df:c5:ec:e0:9a:63:ed:c4:b4:e5:bc:12:75:
                    86:d6:8e:28:64:65:19:e2:f8:30:46:6e:49:5e:d0:
                    a8:e4:4c:5d:d7:d7:09:b2:82:b2:ce:e5:35:b6:dc:
                    85:5b:22:55:90:15:a5:3b:96:d6:3f:41:25:0a:ef:
                    b3:92:cd:90:2b:0b:91:d6:ea:bf:34:6d:78:e0:41:
                    8c:44:d2:7a:a3:99:c8:2c:83:27:13:11:3b:7b:b5:
                    32:35:9b:3e:ee:c3:2e:48:a4:86:fb:c9:38:3e:88:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:83:4E:7D:16:A2:42:EE:14:92:5F:6D:90:5D:73:3C:1C:3F:AF
            X509v3 Authority Key Identifier:
                keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:56:e6:51:5a:a7:ef:a6:b4:d3:b1:6b:1c:0f:95:ec:5f:
         82:2b:d9:1f:2e:8b:d4:fa:e4:d0:24:a8:f6:2f:74:f6:38:13:
         a8:5c:4d:ab:7f:a5:e5:e2:ed:78:5d:d4:7c:01:bd:5a:be:1c:
         7d:da:04:00:10:2a:98:06:b7:29:53:54:8b:60:7d:cf:c7:61:
         f4:f4:45:bc:82:ef:55:3e:54:75:a7:78:e4:26:3e:0f:ad:07:
         6d:d0:22:3f:cd:ad:42:6e:55:5a:3c:a7:8b:35:43:01:02:ef:
         35:92:e3:20:df:4c:f0:c6:26:10:72:fc:d7:b0:a2:32:c8:c8:
         01:a9:16:aa:26:b3:65:b1:76:fc:40:b4:f5:7f:06:50:08:34:
         12:6b:58:41:17:ff:32:93:be:74:bf:11:e3:69:9b:19:48:45:
         c0:8e:a9:03:83:db:a1:92:89:75:71:e2:ae:a4:e3:4f:1b:f3:
         21:3c:c5:e8:e8:4e:fa:28:7f:e9:31:c2:ed:ff:63:ec:1e:9b:
         2a:80:c0:fc:56:8e:4f:78:80:39:fd:72:aa:7b:f7:1e:d3:f2:
         52:ed:e4:e5:b9:30:f3:fd:b4:e5:da:60:c6:f0:28:ba:4b:dd:
         3d:ad:01:8e:20:36:01:3c:a9:00:1b:b1:68:b6:04:67:73:9b:
         66:37:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----