Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File:                     AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier:          I7ikCLUDs4VdqtUigyluo2u7J4iyyvrYOnODhMjfI9c=
Subject key identifier:   C1:CA:C8:E2:19:58:D5:B4:F0:D0:21:35:52:54:15:41:FC:1A:F5:27
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer:       /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial:       01962DF3B1FB0E6A2E462C552F87352FABA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: CHCPTPk4v81N5M5lMQiMI1sMrMvtAz6s2lK6JFgEBLo=)
                          2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:fb:0e:6a:2e:46:2c:55:2f:87:35:2f:ab:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=c1cac8e21958d5b4f0d0213552541541fc1af527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:60:52:c6:26:51:94:95:c2:1f:45:2b:8a:
                    4e:8d:3c:aa:49:40:50:5d:ad:01:89:7a:7e:2f:28:
                    ba:59:ab:97:89:a0:a0:81:bd:0d:2b:14:b3:04:14:
                    5a:32:b0:a3:81:14:11:12:d7:b5:38:b6:62:b2:f1:
                    1f:42:68:39:e4:45:cb:99:33:b2:b1:50:72:a2:07:
                    b1:cd:85:17:f6:cb:cf:5c:8a:d4:c2:12:7e:4a:fd:
                    c8:bd:e7:cb:c9:54:3a:85:9c:a4:72:90:1b:fb:45:
                    ac:5e:72:4e:f6:29:8f:9c:34:d4:71:a0:42:c1:3e:
                    59:26:2a:b8:ea:43:d0:66:f8:02:9d:76:75:38:76:
                    4c:2c:41:67:ec:31:55:9c:68:3f:88:f2:62:9f:30:
                    5a:09:a4:e2:1c:b0:5b:bf:27:9b:0f:36:f1:d2:1a:
                    b9:1e:cf:7b:47:9b:7b:e1:d1:09:df:4e:26:68:2f:
                    41:cb:54:ac:54:39:1a:f5:7e:17:ab:43:86:18:61:
                    3c:96:c1:46:be:7f:59:69:7b:ae:ac:4f:6d:62:9a:
                    8f:0f:b8:6e:5a:ee:fa:cd:ba:44:ac:8d:b3:5d:51:
                    b1:4a:f4:c3:02:05:b9:e9:09:aa:24:1c:4d:26:d1:
                    f2:93:ab:f6:89:ea:5e:5c:21:59:43:3a:d7:bb:2c:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CA:C8:E2:19:58:D5:B4:F0:D0:21:35:52:54:15:41:FC:1A:F5:27
            X509v3 Authority Key Identifier:
                keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:6f:e7:6b:02:e9:a3:7d:3a:78:1f:8b:f6:29:3b:2c:17:
         27:8c:3d:2d:e4:90:49:97:a8:31:71:e5:e0:ae:9f:b2:c9:84:
         cf:29:27:61:4f:0f:44:cb:17:1d:d0:0b:ee:0c:19:ac:1f:87:
         3c:c7:b3:81:e5:5c:b1:ae:22:e1:d5:b0:ca:3b:20:58:ed:f0:
         cc:7a:5b:0c:2b:4e:8b:64:58:50:cc:36:99:90:b8:6e:68:c2:
         34:b5:51:14:8d:1a:47:63:86:ff:70:8d:bc:60:7d:5a:ac:ab:
         23:a0:fd:d2:33:43:b2:bb:b9:e8:82:93:31:d7:08:00:12:37:
         4c:6e:73:41:c9:55:96:b0:24:35:45:36:f4:fd:8f:ce:9a:35:
         de:dc:9a:6f:aa:42:0d:24:ab:3c:e2:de:e1:cb:a4:7d:be:54:
         cb:da:a6:55:bd:5f:f0:b6:d1:b8:88:5c:5b:3b:74:a7:ec:64:
         04:a6:b2:ac:90:55:f9:b7:e5:29:a3:1c:8b:90:5c:90:72:e8:
         9e:be:01:8a:bd:e3:ca:40:7a:d2:3d:77:db:00:77:69:af:8e:
         d8:1a:cf:d7:1c:87:24:3e:a4:19:e7:47:46:b4:0b:a0:34:48:
         90:db:32:e5:2f:76:f5:cc:06:57:38:ef:be:6f:ee:9c:4f:09:
         f5:a7:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----