Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File:                     q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier:          dFDJARumQHZuHs+TEZHyBN0mzrPEktd1dK1G7dQHU4k=
Subject key identifier:   AE:77:87:A0:32:24:5F:1C:46:D3:7D:59:5A:6B:B9:EC:59:94:9F:19
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer:       /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial:       01962FAB45881EB2E2B70B005A754E641F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
                          2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: wbikQU0bQM37nU1exY+3EfksbWReSmzl7YsRPpHA8Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:88:1e:b2:e2:b7:0b:00:5a:75:4e:64:1f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=ae7787a032245f1c46d37d595a6bb9ec59949f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:bf:84:93:e9:3b:6c:64:f5:74:23:82:60:
                    cb:9a:90:4d:aa:a8:1b:f2:23:c3:c6:c6:d2:1f:1b:
                    4f:df:fc:f6:b7:ba:12:a5:2e:b4:78:c9:e7:16:4d:
                    e5:96:89:53:e3:d9:3b:05:48:21:ad:73:24:93:47:
                    e0:96:29:a5:80:ba:d6:60:e9:50:4b:d2:6c:88:f5:
                    80:92:8f:19:03:e6:f0:04:dd:eb:10:44:54:45:e9:
                    e5:11:1c:36:f2:1e:cb:2e:df:9e:35:10:3c:c6:15:
                    cb:05:af:94:80:f5:e2:3c:85:5a:d8:86:8d:0a:ff:
                    2b:65:90:a4:9d:93:2b:6e:0e:62:63:36:94:18:46:
                    fb:e9:2d:7c:1d:6f:06:bd:2f:2b:4e:46:01:5a:b1:
                    33:3f:13:ff:b0:15:ee:4c:a2:78:a3:7f:18:7f:82:
                    84:7e:62:67:a5:38:3e:6d:00:5b:42:2a:50:3c:b4:
                    a8:a6:d8:32:49:79:55:64:b1:bd:7b:bf:21:8c:1a:
                    df:c2:6e:db:cb:8b:d9:8e:28:d9:b3:c6:64:29:f8:
                    56:8a:45:96:24:c1:a4:72:c9:f7:70:61:0c:5f:79:
                    ad:6f:00:ca:39:4a:8b:8e:a8:0c:b8:b7:93:0d:0e:
                    d4:d7:8d:ac:3e:0d:43:8e:f6:21:97:25:78:3b:73:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:77:87:A0:32:24:5F:1C:46:D3:7D:59:5A:6B:B9:EC:59:94:9F:19
            X509v3 Authority Key Identifier:
                keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:50:18:b3:45:0a:36:70:ed:f2:c4:ee:70:9a:a8:79:d8:
         a3:f2:74:17:21:ae:71:81:ab:c1:17:54:e1:27:bb:d8:41:24:
         10:02:b7:5a:6f:bb:f2:6e:89:b4:2d:4f:56:73:c3:3e:17:52:
         9d:cc:13:da:97:25:3d:57:0f:66:b7:3c:84:a0:25:3d:3e:4a:
         f2:4c:25:73:06:fb:b4:01:43:a6:d7:8f:e7:33:5f:3c:01:d1:
         fe:6b:36:50:a3:4a:21:da:25:d1:09:61:50:9b:97:07:7d:d5:
         13:03:b3:73:ba:3f:36:13:ae:13:5f:89:5c:34:5a:d9:b7:ca:
         67:7f:2d:3e:f2:ae:50:27:58:b3:63:d4:26:ae:fb:7f:f2:1b:
         a7:42:83:96:b5:c6:f5:72:59:a2:9a:c9:dd:66:fd:a3:7b:b8:
         f5:19:37:61:ff:20:87:5a:9f:35:ff:58:11:dc:33:12:87:b2:
         d9:1e:64:72:eb:c5:62:f0:a5:b8:9c:12:00:22:5e:80:03:fd:
         d2:89:56:51:ee:67:cd:1b:d2:ab:4d:77:84:68:04:7c:d4:1e:
         91:b6:0f:65:3b:ef:be:70:87:70:61:b9:e6:58:73:e7:b0:b0:
         1a:60:f0:2e:6d:76:57:1c:45:eb:13:e7:a7:c4:0c:66:74:d0:
         1c:72:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----