Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File:                     qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier:          c2rkIelAN/wQS6dzk7bZqMCp/NlOWmd2XXhKJ4RCg/E=
Subject key identifier:   45:18:C1:6D:43:51:69:39:44:3D:FC:93:12:D3:D3:CE:03:A9:EE:42
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer:       /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial:       01962E98DCC216DC41C9CA4AC1D282501F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: EHWTnAilKT3Lxvs/NgnEmdQo2VSdyRQPaHje1pdh0VM=)
                          2: tcbbFJDqhBbRkJh6NDYN55iLfDE.roa (hash: vKEQ9e0Db9WBNbap5GYKx4PxGXK/ovDmh/isyYRiZ1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dc:c2:16:dc:41:c9:ca:4a:c1:d2:82:50:1f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=4518c16d43516939443dfc9312d3d3ce03a9ee42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:6b:de:50:81:44:b3:7f:64:9c:c2:55:88:
                    b0:f1:65:45:d8:d4:b3:8d:d8:67:8d:cc:a7:71:66:
                    a9:db:a0:28:bc:12:5f:7a:41:90:8c:da:58:eb:10:
                    de:f9:bd:13:25:1b:be:ef:b1:87:23:be:ca:7a:2f:
                    6b:1e:7a:10:f7:fc:a5:19:87:87:48:c5:c3:f7:0d:
                    cf:3e:c7:23:2a:22:3a:69:83:2c:9c:ff:e4:c5:af:
                    65:1b:26:38:a7:a6:7a:30:89:87:a8:99:75:f1:11:
                    7e:4e:db:62:f1:da:c5:35:6b:30:1a:6c:e9:84:9c:
                    72:53:87:7c:19:43:23:a1:62:c9:a6:f7:a2:47:83:
                    24:9d:db:15:c4:3f:a5:ba:d1:5e:3c:d7:bd:26:d7:
                    44:0f:f5:53:0b:ec:5b:4a:27:8b:ab:27:81:4b:fa:
                    65:9e:4b:37:5e:b9:90:b7:2f:cc:d9:76:07:a4:67:
                    9c:f3:f4:c5:d3:d2:8a:35:ad:a7:e5:31:e6:7a:b4:
                    39:31:9d:78:82:99:fb:c7:23:b6:46:d0:c4:ce:11:
                    af:8a:41:23:49:ec:c1:da:ee:c0:6e:b9:c5:b3:ce:
                    ef:6e:13:1f:9b:88:1a:b0:c1:14:25:a9:0a:1c:0d:
                    a6:2a:f5:a4:66:e8:95:0b:4e:bb:61:3d:cb:d1:ea:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:C1:6D:43:51:69:39:44:3D:FC:93:12:D3:D3:CE:03:A9:EE:42
            X509v3 Authority Key Identifier:
                keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:74:17:a9:87:53:f9:5a:1d:44:d0:c2:72:a3:78:e3:a1:
         19:81:2c:57:80:53:05:a2:d2:b3:d9:f7:55:f3:54:b2:4e:a8:
         b2:69:28:41:49:13:64:54:d6:c3:33:3a:da:99:ec:41:19:d5:
         c8:38:29:3e:12:b7:a9:18:43:03:9e:29:c5:86:8e:f5:25:5a:
         01:d8:95:d8:d8:9c:cd:ae:8c:88:b0:c5:e6:40:b6:f0:9b:ed:
         bf:c8:79:ff:e5:56:6b:40:cc:a6:75:96:61:77:ea:99:a2:73:
         a0:d3:f8:94:70:78:db:47:76:13:9a:20:6b:13:4e:e8:d6:86:
         8b:da:9d:7a:54:13:90:97:04:26:8d:89:f7:36:93:c9:18:9c:
         f1:f6:25:64:32:50:3f:12:b2:5f:fd:21:7c:65:20:e0:82:a9:
         00:03:db:b0:53:6a:c3:9e:71:5c:c8:3b:a4:d5:3b:f2:42:68:
         5c:7b:52:72:54:25:2b:f2:2c:15:0a:32:db:b8:5e:37:47:86:
         42:ed:33:69:d8:c6:c8:c8:4a:e7:c6:c2:c9:00:53:ec:5a:88:
         71:70:b5:a3:9b:7a:46:32:5e:88:1a:d1:c2:52:0e:85:c4:24:
         6b:e8:e1:66:52:df:59:00:72:68:67:ea:ca:6a:4a:80:29:1c:
         7e:bd:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----