Manifest

$ rpki-client -vvf rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft
File:                     C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft (raw, json)
Hash identifier:          dbHdo4+Oa/1SJIxaiOYLxw5n7zArxmXp/eGFvy5svmI=
Subject key identifier:   E5:69:48:14:11:A3:E8:FD:64:7B:AE:F2:30:18:76:97:A3:90:06:48
Authority key identifier: C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27
Certificate issuer:       /CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
Certificate serial:       718D2F79FBA66DF35C88BD3A07811384FF9A8B71
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer
Subject info access:      rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft
Manifest number:          7C
Signing time:             Sat 13 Apr 2024 11:09:35 +0000
Manifest this update:     Sat 13 Apr 2024 11:04:35 +0000
Manifest next update:     Sun 14 Apr 2024 13:15:35 +0000
Files and hashes:         1: 326131333a646638373a623530303a3a2f34302d3438203d3e20313939303532.roa (hash: f2Dpgn+cOfDJOZkuhxyBTGsVhdQ+2UCAbGPONcBc5uY=)
                          2: C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl (hash: p26PrroFgSFEsVDsMObgu1FXCil7LbVnzmIA63Xeuq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8d:2f:79:fb:a6:6d:f3:5c:88:bd:3a:07:81:13:84:ff:9a:8b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97E7DD81B07D53E3C076F9D1810810F6E2DC227
        Validity
            Not Before: Apr 13 11:04:35 2024 GMT
            Not After : Apr 14 13:15:35 2024 GMT
        Subject: CN=E569481411A3E8FD647BAEF230187697A3900648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:9d:5f:e0:22:95:6a:ff:14:4a:42:43:f0:
                    50:e4:e3:3a:e7:61:71:69:9e:4b:7b:ec:82:54:9b:
                    5e:7a:90:41:2d:ab:6b:c4:8c:d6:35:d0:2c:38:84:
                    10:3e:5c:60:52:96:2e:af:24:4d:62:a6:97:4f:84:
                    c4:aa:6b:e2:17:ea:ed:4d:81:d3:39:b7:11:55:9a:
                    80:26:e5:df:c0:65:de:df:5f:5a:4c:03:14:7d:7f:
                    6c:3c:b8:09:be:b2:f0:91:e2:05:66:10:2a:f1:57:
                    24:8e:1e:b7:d7:44:c6:4b:5c:82:da:24:cc:12:63:
                    31:2c:dd:8a:85:6c:1a:85:af:69:bc:d0:07:89:bb:
                    bc:ae:18:e7:2b:de:c1:d2:4e:3e:dc:0e:b6:f4:5c:
                    81:2c:3f:c1:13:33:85:b7:be:56:10:32:5a:f9:a2:
                    6a:e4:a1:36:05:d3:8a:80:92:8d:48:f3:a0:48:9d:
                    f5:0b:e3:a8:5b:a1:da:0b:41:09:22:9f:d1:1b:98:
                    b9:56:3b:06:84:a3:33:0a:51:4d:8e:5d:70:4e:08:
                    be:e2:c7:9d:14:9d:79:6f:bd:b6:22:da:a4:ca:d9:
                    d5:18:6a:9f:89:1b:ca:67:2f:02:28:b8:21:92:1d:
                    eb:e4:f4:af:c3:af:14:07:1a:22:7c:96:16:fe:3b:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:69:48:14:11:A3:E8:FD:64:7B:AE:F2:30:18:76:97:A3:90:06:48
            X509v3 Authority Key Identifier:
                keyid:C9:7E:7D:D8:1B:07:D5:3E:3C:07:6F:9D:18:10:81:0F:6E:2D:C2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/AquaHost/0/C97E7DD81B07D53E3C076F9D1810810F6E2DC227.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:28:98:da:4b:28:66:77:51:5d:f7:ff:3c:79:1b:c3:5c:d7:
         2a:98:79:2f:04:1b:db:13:35:cd:78:67:d0:a0:fb:b8:23:b2:
         ce:50:02:ee:6f:89:ad:0e:66:e2:dd:83:91:a7:f8:67:94:be:
         d6:b5:2c:d4:fd:a3:95:a7:95:34:79:3c:51:df:4f:00:fa:71:
         24:34:8e:74:aa:92:3e:44:e0:c3:d1:9c:38:69:71:5f:d6:e1:
         ab:5b:14:cd:76:cf:fe:10:e5:06:e1:0d:48:3c:31:67:0b:36:
         f3:1a:10:76:60:22:c5:3a:52:0b:1b:d0:3a:7c:d4:d9:70:18:
         34:ef:a3:34:e8:13:1d:87:a7:88:46:7a:fc:86:c4:bf:d9:01:
         e8:76:ba:35:3e:92:a7:30:18:39:76:64:3f:ca:0e:54:84:3f:
         50:74:cc:ee:54:ec:fe:7b:26:3c:7f:bf:ae:96:5d:b1:42:7d:
         55:62:6a:29:bb:13:bc:f9:ea:04:3e:bd:c4:c8:b6:cb:d0:53:
         11:9a:e0:b6:7e:af:5e:0c:7d:9d:46:ee:f6:8e:31:0e:dd:ef:
         9c:3f:31:cf:59:58:ea:6b:f7:5e:d6:13:d6:09:0f:e5:f7:18:
         fd:ad:ec:0a:f4:f4:1a:fe:16:7c:c3:fa:b4:84:b2:d5:cd:87:
         15:45:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----