Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier:          B+sjBmsTefL4eQgKSvuz/tI0gUKmtZblVInEKtbkPOM=
Subject key identifier:   45:1B:80:4C:4F:52:A2:2D:82:B9:CF:B5:F5:C1:DF:64:B3:4A:72:83
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer:       /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial:       01962FAB96FFBFF9EC779DE67D9A6C067DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number:          086E
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
                          2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: BCp+FGqjSPv/P6g51bCfo75nrrW1Dy8cxjLdHYOHyTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:ff:bf:f9:ec:77:9d:e6:7d:9a:6c:06:7d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=451b804c4f52a22d82b9cfb5f5c1df64b34a7283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:99:16:6c:16:65:b1:e6:2d:d5:64:2b:f9:
                    21:15:1f:1c:4c:f4:41:b9:a0:cc:a5:4e:b6:d2:1f:
                    e6:2b:71:ae:b0:1d:1b:76:3d:53:fb:c9:dc:ab:e1:
                    33:4c:4d:58:e9:80:f8:be:65:12:67:4e:b4:22:4c:
                    8c:05:5d:f1:75:c4:c8:66:0f:d7:01:8d:3d:1f:b9:
                    8d:e8:ce:9b:a4:ae:36:41:ea:ab:c9:a7:7d:16:cd:
                    f4:61:5f:5d:bd:50:e7:7c:1d:0c:19:1f:df:f3:e3:
                    86:a1:11:a9:3d:59:30:49:1f:64:5e:bf:02:79:6f:
                    fe:43:90:6b:88:67:83:19:26:83:d0:45:5b:e5:5d:
                    a0:17:ea:c8:9b:19:80:59:2e:a2:75:ca:f3:a3:34:
                    b7:3d:93:05:8c:ec:6f:79:f3:e1:c0:68:b5:82:51:
                    5d:b4:6c:72:15:77:26:ac:27:a6:61:30:bf:4c:d4:
                    d9:a9:b5:8f:f0:56:8e:6d:56:68:51:4d:0c:5f:1b:
                    0e:7b:03:cd:a2:ab:65:d1:97:37:66:fa:91:6c:10:
                    52:a8:01:b1:41:31:34:24:bf:79:e9:77:7d:2b:85:
                    04:fe:56:e6:8e:cf:2e:23:24:75:a7:c6:3c:9c:a7:
                    8e:10:4e:6c:94:e3:33:50:88:25:34:a3:dd:22:13:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:80:4C:4F:52:A2:2D:82:B9:CF:B5:F5:C1:DF:64:B3:4A:72:83
            X509v3 Authority Key Identifier:
                keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:bc:d0:23:9d:49:d6:d6:44:ad:5a:d5:7f:ff:fd:eb:76:
         7f:c3:3e:41:47:14:89:52:93:18:10:22:ee:26:21:18:9e:9e:
         7a:ed:a5:f9:de:82:d1:f6:89:59:8e:a5:20:ff:aa:f8:0a:ee:
         db:f7:58:34:fd:ab:8c:ba:b5:e2:13:92:e0:dc:91:0d:58:c6:
         4a:60:8a:8d:a9:fa:59:10:5c:72:12:a1:08:00:f9:40:1b:39:
         98:a8:8a:33:bc:e5:68:19:28:8e:76:ba:d7:08:39:f8:23:cf:
         20:d5:19:14:a0:b2:bf:c1:b9:61:4f:62:fe:f1:c8:2c:04:83:
         c9:c9:3c:ac:cf:cd:c5:63:26:5c:f7:9f:c1:db:79:ad:5e:33:
         80:5b:28:93:e2:72:e0:54:ff:91:b6:81:88:58:f3:a9:b8:d4:
         48:d4:31:17:54:44:3b:43:20:78:db:a4:c8:70:50:69:fb:83:
         7d:51:e8:e3:8b:39:ed:27:53:ff:15:09:26:88:7d:5f:e0:c8:
         9a:95:04:9f:bb:0b:eb:d2:43:7f:43:9d:91:bc:0d:d5:e8:70:
         30:01:a4:1e:02:a1:69:20:57:f8:24:11:13:aa:8b:35:bf:fd:
         b4:83:69:48:5f:4f:13:38:85:66:72:46:0b:2c:8b:0b:b2:51:
         64:c3:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----