Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File:                     rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier:          8iQJyXztEUx2G/bzqPpUNCvTcqPeDTwl/tBdo6eTHFU=
Subject key identifier:   E3:1B:02:EB:86:E2:D1:BD:93:FB:4E:24:80:F9:95:7B:49:0D:A1:F4
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer:       /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial:       01962E98F945FC92931A306DC4E01908B519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
                          2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: nRSxT3yPmFJIfk17RuMXUOerry7vZjhmCn6ykz0tdak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:45:fc:92:93:1a:30:6d:c4:e0:19:08:b5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=e31b02eb86e2d1bd93fb4e2480f9957b490da1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:c6:8b:b7:e2:b2:fd:f8:de:e4:8d:9c:0a:
                    e4:68:62:63:73:0d:74:12:9d:08:c9:54:ae:44:fc:
                    08:04:9c:3f:32:eb:67:6c:b3:b1:b7:67:a8:5b:98:
                    83:7b:e7:9c:74:76:a8:8e:b2:c7:4f:a6:a4:fb:72:
                    bd:51:b7:5e:97:78:8b:19:62:54:e5:6c:66:46:c5:
                    20:76:9b:63:af:1f:9a:eb:d4:cc:90:52:5a:f1:3f:
                    e3:98:d9:b8:90:25:36:76:6d:dc:9a:6f:e0:40:c5:
                    ec:02:15:07:45:31:01:f5:c5:81:45:5b:b1:83:a4:
                    63:12:fe:e2:cc:58:96:79:c7:a3:b5:30:e2:fd:86:
                    55:c3:4d:72:40:29:14:06:2c:a9:98:8d:61:5c:7e:
                    cf:e3:33:94:01:e9:cd:bb:08:ba:fa:b7:03:05:44:
                    34:a1:f1:4b:2c:60:2e:38:f2:bb:6f:0c:86:34:f8:
                    32:fb:a8:d7:1b:b6:01:0c:c5:35:f5:7d:45:7b:0a:
                    c2:9b:51:22:7f:1c:a4:68:9d:da:34:1f:93:b2:3e:
                    9e:9c:df:ea:5e:06:23:44:b3:e3:0f:88:7a:86:4a:
                    b1:65:5b:ea:4f:9e:3a:84:b5:f3:d1:15:bc:df:28:
                    ee:27:82:5b:cf:de:91:88:fe:a3:e4:a1:9f:40:c6:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:02:EB:86:E2:D1:BD:93:FB:4E:24:80:F9:95:7B:49:0D:A1:F4
            X509v3 Authority Key Identifier:
                keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ae:74:89:94:fe:6a:44:2f:57:4e:2a:16:4a:93:75:d2:46:
         98:aa:58:26:3c:a0:2c:6f:55:37:93:3e:8e:84:31:bd:4e:e6:
         eb:c6:c6:19:4b:c0:df:fe:2a:b7:36:6e:3e:ba:29:71:c5:b7:
         b2:df:d7:26:8b:02:3d:a7:91:7e:78:36:83:35:c4:25:42:86:
         a8:e1:11:3e:80:6c:2e:10:59:45:87:96:1b:e4:b8:b2:ac:50:
         ec:2b:9a:13:09:88:88:14:bf:2b:b8:36:80:63:ab:b5:3f:0a:
         46:d4:d8:bb:a8:f3:88:e8:be:bb:1b:0c:d1:b9:86:a9:6c:da:
         78:15:cb:fa:59:85:79:a8:85:82:d3:9d:45:89:28:14:fe:4d:
         8d:32:9e:e5:98:79:4d:ac:ae:a6:1f:6e:44:2c:de:1a:1c:5d:
         ef:83:a1:d9:24:a6:5e:e8:ee:c5:95:de:2b:3e:0e:2c:6a:38:
         f5:d5:d4:1e:77:b1:f0:6f:36:62:69:b2:ee:cd:55:ea:4e:67:
         a1:b5:62:c4:81:67:85:49:62:77:b6:bb:3a:ea:8e:be:a9:4d:
         8f:38:e9:65:1b:33:1a:a0:cd:d9:0b:34:a0:02:47:e5:58:25:
         5d:22:cc:72:ad:56:9b:c5:33:58:62:05:a3:5e:f8:10:f9:e4:
         67:be:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----