Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File:                     q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier:          lsiWl5X1VKiHr32hVi0qoffbrlPaoDfpwiCZoiVj8fQ=
Subject key identifier:   1E:E3:C5:CF:73:A5:92:79:13:06:B7:82:E6:BE:DC:0A:7A:D4:EB:1A
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer:       /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial:       01962E994DB80D36A4514F544DED8C7099D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
                          2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: T0dBaGgNwqUWXPU9qCHWGylexDVOtoTFQKb3psQMymU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:b8:0d:36:a4:51:4f:54:4d:ed:8c:70:99:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=1ee3c5cf73a592791306b782e6bedc0a7ad4eb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:9c:ff:e4:01:cf:40:c2:9a:e8:50:64:15:
                    84:f2:4a:7b:04:b6:97:e8:00:4b:0d:00:a8:32:c6:
                    fe:04:83:4c:15:57:e9:36:92:57:43:fb:7b:7b:6c:
                    3e:ee:1d:19:09:cf:04:33:5f:c9:4a:4a:1b:67:b4:
                    bd:63:8c:78:35:34:45:07:12:58:53:57:b1:7f:2d:
                    ee:62:59:c3:cf:67:39:0a:c7:9d:2d:34:99:d8:5e:
                    dc:5b:0c:c9:d9:6c:6d:79:cf:ec:fa:4f:eb:c0:a4:
                    73:2f:52:18:a1:2f:82:8c:8b:b2:2c:26:f7:4c:4c:
                    dc:bc:46:49:be:1a:12:66:d6:28:bd:2f:19:60:34:
                    e5:55:a5:e2:24:26:2b:36:1f:34:df:9b:fc:8c:82:
                    e6:d2:c2:c5:d0:4d:8f:b5:de:0c:f0:a3:aa:a8:4b:
                    a3:ab:99:ab:f8:cd:00:f7:d2:a0:ff:00:5b:45:9f:
                    c1:6f:35:89:98:34:e6:52:4b:20:3d:c1:b9:9e:ec:
                    8e:29:7a:11:47:2c:ac:6b:0f:d3:08:1c:44:e7:db:
                    cb:a8:25:29:c5:30:2a:db:f1:c5:b0:d7:fe:be:fd:
                    64:c9:de:70:9e:2c:7a:8c:c1:6a:de:2f:2f:14:7c:
                    5d:43:d4:a3:c4:f6:cc:7c:0e:00:4d:ec:ca:87:54:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:C5:CF:73:A5:92:79:13:06:B7:82:E6:BE:DC:0A:7A:D4:EB:1A
            X509v3 Authority Key Identifier:
                keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:12:1d:14:9b:87:c1:f9:79:b9:8f:7d:84:6e:e3:bb:21:
         f9:24:8f:5d:b5:1f:ed:e2:e9:2b:e3:d4:d9:96:b2:11:bd:0e:
         7a:0e:4b:31:f4:3b:4d:43:fe:26:94:78:cb:46:a0:2e:f1:d3:
         8f:75:ad:21:9c:4d:b5:0d:51:6b:aa:a4:ab:fc:42:ed:0d:4c:
         bf:a1:e9:f2:75:96:8d:02:fb:93:62:af:0a:fb:7d:e4:6b:ac:
         46:6d:2f:d1:4d:7d:17:09:ae:41:b7:92:14:55:59:9d:7b:d6:
         72:93:4a:cc:77:af:d8:8a:8c:f6:67:a2:61:f9:d3:63:83:bb:
         a7:20:cb:f2:ee:fd:c3:ae:77:d9:80:17:86:e6:84:8c:ab:bd:
         15:f4:35:91:53:e2:19:f6:b9:cd:66:72:d1:1c:ef:30:c2:9e:
         51:b1:93:4d:cf:d4:af:f0:f2:d4:93:3a:68:b3:39:29:2e:8e:
         eb:72:8d:81:f9:78:06:c4:77:38:63:65:0d:a2:36:f4:50:7b:
         0f:5e:91:fe:86:5d:95:98:6a:92:5a:d8:ff:ca:8a:31:92:f4:
         b1:eb:98:e5:58:2b:f9:ed:cb:e5:43:63:ca:b7:01:d3:ed:80:
         e7:db:cd:5b:bd:ee:4d:50:e8:74:5f:23:d0:a9:ca:ac:34:a3:
         1f:dc:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----