Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File:                     q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier:          tnDwYGCy+BWj084AR2vxlOQPHHfuNNi925tDiiE5WtY=
Subject key identifier:   BB:CE:A2:3E:44:BC:6F:02:2A:4C:99:D8:3F:BC:23:3A:CB:92:D6:B2
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer:       /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial:       01962DF3A97A6F6E87D1D419AC9C7B304897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number:          0870
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
                          2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: aQh1qDlnmHtcS5QgsOzXFRaj6Q7s98qrO3wuS/wuxw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:7a:6f:6e:87:d1:d4:19:ac:9c:7b:30:48:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=bbcea23e44bc6f022a4c99d83fbc233acb92d6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:8f:78:72:33:0e:93:e4:64:80:16:26:a1:
                    18:86:a0:e5:cb:ee:7e:0b:c8:ad:39:cd:86:a5:77:
                    00:b6:ab:5d:c4:c7:e7:e9:62:c4:1f:f5:36:b9:33:
                    30:e7:2c:96:20:88:d6:96:54:6b:28:31:a7:6f:f7:
                    2b:f3:e1:83:5f:dc:92:e9:26:ec:99:d7:67:91:4a:
                    1f:5a:f7:be:95:24:82:84:d0:4d:ee:d6:b3:2d:e0:
                    bc:f2:61:23:3e:bc:e3:d2:ba:54:31:1d:ae:bf:60:
                    1f:29:46:08:35:c1:89:34:32:56:28:d2:02:44:48:
                    07:7a:b1:5a:50:90:fd:16:b7:98:f8:5f:59:87:bc:
                    cc:f1:e7:e8:9e:c8:f5:fd:68:7a:93:19:43:eb:9c:
                    fb:cf:12:1b:2c:2b:9d:0e:05:22:69:d8:af:9b:d2:
                    9e:6a:43:f7:37:3b:d3:34:0f:30:a9:30:34:08:57:
                    60:7d:82:0b:a1:85:7d:a7:07:e1:47:92:58:0a:85:
                    db:9b:28:9a:3e:f4:31:8b:ef:ef:47:61:f3:b9:38:
                    a3:d3:eb:e1:d4:ea:bc:53:d4:d4:9a:67:b4:bd:b1:
                    f6:da:2f:8b:7b:68:78:7f:9a:41:02:bf:e8:06:d3:
                    88:bc:26:d3:61:3d:f6:43:a2:fb:d1:0f:13:76:d0:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CE:A2:3E:44:BC:6F:02:2A:4C:99:D8:3F:BC:23:3A:CB:92:D6:B2
            X509v3 Authority Key Identifier:
                keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:36:99:be:fb:7d:b2:07:fd:dc:8d:90:6a:24:fa:c0:26:
         fb:e8:9a:66:ac:6a:ba:5d:b0:41:78:1c:3c:d8:56:7e:03:9f:
         52:94:0e:5b:1d:dc:3b:53:8d:01:0a:c9:96:af:76:af:ae:68:
         48:33:0c:bc:e1:ab:09:01:50:e0:ae:86:3b:fd:ed:91:a3:be:
         e4:fb:ee:5c:39:89:48:0c:23:8c:9b:90:2b:41:89:dd:77:5e:
         e7:aa:c7:4d:d3:22:1f:cd:02:ab:44:e6:12:0d:7f:8f:3b:72:
         24:2b:ce:16:ba:bf:d0:c2:9b:5a:37:3a:eb:72:9b:2b:99:0a:
         88:e2:f7:73:d0:94:5f:54:0c:bd:d8:1b:e3:87:d9:54:3c:04:
         6c:15:11:6e:4b:15:73:e2:e7:37:c6:37:09:3d:a4:b8:1d:e8:
         e7:32:b1:51:33:55:03:7c:91:29:fe:ec:6e:14:3e:51:6f:d2:
         93:ec:5b:ed:57:cc:75:7a:f1:d0:94:e0:03:73:a2:c5:eb:5d:
         4c:d4:f5:f1:b7:85:fc:7d:bd:b7:3a:e7:c8:0f:27:70:47:89:
         b7:48:9d:f0:2d:d4:cc:ef:33:a5:bd:cd:ac:a1:fe:d9:a9:c3:
         0e:09:a2:4b:68:fb:98:63:a4:92:14:8f:fb:dd:b2:c7:eb:7c:
         75:e3:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----