Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File:                     AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier:          8AhwkbhBooGKBDni/+IdywQf27OljbEdgOfvsVdKtyI=
Subject key identifier:   8B:A0:CA:D6:3B:5A:37:EB:81:D1:33:00:75:52:F1:92:2A:9A:75:2F
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer:       /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial:       01962ECFB466A1CB1BEA3B63972BED6FA5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
                          2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: DJ8DJ6NnNJPxi5li6o3IdmaFzs3sRY1KY69FwfckbbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b4:66:a1:cb:1b:ea:3b:63:97:2b:ed:6f:a5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=8ba0cad63b5a37eb81d133007552f1922a9a752f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:a3:2b:6b:1b:e0:7f:db:e5:11:ed:60:14:
                    35:55:6d:1e:26:7e:ec:08:ba:8e:de:c0:fb:36:63:
                    b9:1b:48:fd:c7:17:7d:e8:2c:f5:80:58:65:02:9d:
                    73:01:e7:a5:41:11:2c:30:3f:4d:40:db:48:51:cd:
                    05:2d:e0:c5:ac:6f:0d:77:89:b6:83:8a:5f:e7:a6:
                    fb:eb:de:89:e0:87:35:d4:0b:e6:f2:5c:16:17:0f:
                    0a:4c:d0:e4:41:e9:89:e5:95:3b:68:1a:59:c7:8e:
                    1d:df:e2:f1:c5:e3:8f:8c:61:d3:ac:b6:4f:56:c8:
                    79:10:94:15:55:10:73:c2:14:ed:82:58:b6:2b:c6:
                    3b:f5:83:12:3e:7a:2c:67:18:9f:c6:fe:05:30:67:
                    63:ac:90:63:91:9b:df:d2:b9:f0:a6:b5:6a:76:94:
                    88:12:aa:ce:8a:01:3c:8e:dc:7f:f9:8b:0b:e3:5a:
                    a3:49:5e:c0:a4:60:f3:83:ea:20:60:02:04:d3:40:
                    1e:84:49:a3:1f:18:e9:0c:bd:71:f2:10:bf:19:20:
                    ad:9e:f7:25:e9:88:c7:c7:59:52:eb:43:9b:fc:3d:
                    18:d1:4a:23:8a:bb:ca:ca:bf:de:47:1f:4e:4d:5f:
                    a8:02:65:9c:2b:ab:9f:e6:16:4b:f6:05:09:06:91:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A0:CA:D6:3B:5A:37:EB:81:D1:33:00:75:52:F1:92:2A:9A:75:2F
            X509v3 Authority Key Identifier:
                keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:bc:bd:a9:f6:2a:0d:38:90:33:7f:bc:2a:14:41:61:9a:
         d4:83:7f:1f:b4:04:a8:5d:f6:9f:f3:ff:f9:09:a0:03:3e:83:
         46:ba:33:94:93:cd:8f:6c:0d:22:25:5c:57:d9:75:ab:35:ee:
         a7:e9:02:72:d2:20:fd:ec:e7:b6:77:65:47:4f:89:d0:b2:4c:
         e8:1d:7d:12:91:0a:73:54:68:41:45:d3:cc:99:dd:a9:cb:e0:
         20:b7:5c:2f:2f:c3:75:a0:19:d5:8c:6d:7f:22:fe:38:6b:78:
         9f:66:68:7c:b8:0e:90:34:6b:e8:c1:d1:c7:ea:21:7a:86:55:
         3f:0d:c7:dc:d1:bc:de:e3:89:f9:c4:f5:51:c7:1c:9e:c5:46:
         3c:f4:57:cb:0a:fc:0a:74:34:30:8f:5a:d5:2c:cb:5d:f7:d5:
         67:29:4b:34:0f:e4:11:af:ec:36:56:cd:13:9d:33:83:2b:f6:
         33:59:78:53:76:82:ce:5d:00:16:66:5e:f8:13:b2:e6:d4:85:
         20:01:10:bb:0e:41:e8:6b:5a:52:b9:d3:a3:d3:fd:a7:6d:0e:
         42:61:05:0d:76:d6:8c:71:81:c5:9a:40:c0:3e:c5:92:5d:2a:
         1a:5f:14:26:50:25:33:e7:43:8f:ec:59:a3:94:02:21:0c:7a:
         c7:fc:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----