Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File:                     qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier:          dZ3Xh+ttj30DLElc8j4/ZxM8nJuEzViciiQQ+TqRh0Q=
Subject key identifier:   EE:04:34:66:69:EB:D4:27:0E:64:61:8E:49:DD:A0:C7:C3:86:49:B5
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer:       /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial:       01962ECFAD3AFF4515DC4B5521AC0AEDFA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
                          2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: qodi+8NadgfwKHcUsaq4gTNGZEzZ2W8RiAD4DMVT7xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:3a:ff:45:15:dc:4b:55:21:ac:0a:ed:fa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=ee04346669ebd4270e64618e49dda0c7c38649b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:53:c1:0e:05:75:b3:a1:58:9e:c2:38:a1:
                    75:5c:3f:e7:f1:9b:1b:ca:5d:3b:a3:5a:6b:5b:18:
                    f9:36:c2:e8:30:4e:05:fc:bb:4f:a0:11:da:2a:9a:
                    a2:1d:23:ee:84:03:1f:87:7d:5b:8e:e8:72:3f:1b:
                    2f:a1:57:cc:fd:cf:32:13:db:65:30:b3:7f:8b:f7:
                    e3:15:a3:3f:f9:4d:57:53:0c:37:28:b9:04:a1:10:
                    ec:b6:b6:f9:86:d5:1f:ef:b7:24:f4:1d:50:41:b5:
                    eb:b8:64:a7:04:4d:24:da:a8:3b:53:17:30:c7:87:
                    23:6a:37:56:ef:72:1a:8f:5b:0d:27:8c:5b:a1:37:
                    9b:ac:d3:7c:94:75:f1:6a:ad:3b:a2:df:e1:68:2f:
                    58:ba:de:ab:31:81:f0:30:12:7b:73:bd:a0:92:53:
                    16:a9:4f:02:b4:a8:ab:5d:73:5e:48:b9:7c:0e:b3:
                    70:f4:7b:e2:04:da:6a:a0:1a:56:73:a8:a1:90:89:
                    cf:71:9a:37:4f:34:3e:6d:90:c3:3e:a1:30:fe:cd:
                    4d:46:e5:f6:f7:40:75:49:5b:54:d6:bd:58:11:ee:
                    83:cc:b3:95:45:d5:a6:a3:3a:ad:38:b1:00:25:35:
                    21:64:3c:11:8a:99:4a:4b:71:bd:40:43:53:24:3c:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:04:34:66:69:EB:D4:27:0E:64:61:8E:49:DD:A0:C7:C3:86:49:B5
            X509v3 Authority Key Identifier:
                keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:7e:c0:b1:b6:e3:28:0b:18:4e:a1:be:44:b4:3f:87:e3:
         42:72:44:b3:90:3c:41:e5:8e:4a:a9:f7:f3:7a:e0:28:76:92:
         c6:df:ac:81:73:ca:1a:ce:3c:ca:35:e9:61:04:63:ee:9c:3c:
         9c:f2:48:92:cb:04:c6:32:65:71:66:e0:e0:32:ac:4b:b9:67:
         5e:e1:a7:91:78:5e:74:4b:65:3a:4b:17:1f:ca:d9:b6:29:5a:
         aa:bf:74:bd:e6:cd:38:01:33:09:51:94:f9:f3:76:81:e5:3e:
         94:61:1c:92:04:32:75:be:95:f9:75:6e:95:65:33:8a:ee:56:
         e6:3b:94:34:2b:d0:64:0f:e8:cb:88:49:53:30:7a:41:27:ee:
         25:15:8b:9f:49:3a:ae:f5:4c:f3:33:58:c3:3a:da:c7:a1:60:
         b5:7c:e2:83:4b:86:90:ba:b6:0c:33:eb:6c:b2:f7:2c:2d:fd:
         c2:7a:69:53:c7:92:b4:b4:1e:ba:26:82:50:2d:d0:34:e0:b9:
         27:99:e6:66:55:7f:96:54:bd:7c:52:f8:da:f0:2b:49:24:45:
         d3:5d:f1:c2:dd:15:23:fc:23:cb:10:73:84:8f:3d:14:2c:7c:
         e1:e3:7c:0f:37:ff:22:6d:c5:44:0e:65:85:96:8f:2d:e3:57:
         22:93:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----