Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          lOQsZfUIPxguT3veTk390gKhqwsyXyZlCVSP8ZfoQlg=
Subject key identifier:   23:E5:FE:37:B1:BF:01:EE:83:A2:81:6A:D2:EB:01:13:D4:7A:10:87
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       01962ECFDF19961B0E0F36DE01B6354A8FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: u0QyygE+ADYMjdy4OtELQR+KsoyqjJUfI8zib0yRW/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:df:19:96:1b:0e:0f:36:de:01:b6:35:4a:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=23e5fe37b1bf01ee83a2816ad2eb0113d47a1087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:34:3c:90:46:f0:a5:b6:00:88:21:81:3a:
                    de:81:b0:bf:74:5f:7c:12:b2:24:ca:69:ef:df:d7:
                    d9:00:a4:ec:37:5f:80:dc:c7:41:b1:b6:6f:6c:74:
                    ff:13:e6:18:ca:db:21:3a:18:25:e8:7a:5f:f8:69:
                    c1:07:f2:44:b0:5e:19:76:cd:5c:4d:9c:56:83:3c:
                    2a:3a:dc:15:fd:42:c0:cb:66:fc:11:16:f3:57:dd:
                    e5:a6:12:c5:1d:a7:39:17:27:98:84:4d:db:5b:d7:
                    5e:c6:dc:52:ca:4f:74:1d:e3:87:b4:d9:14:da:f4:
                    80:a6:d5:eb:5d:fb:c7:7b:43:0b:10:9a:b5:68:6c:
                    fc:90:e0:b0:fa:5f:a2:cc:5d:13:7d:fd:23:2f:22:
                    15:82:27:3b:57:36:19:f7:27:98:85:59:29:a8:1c:
                    96:41:cb:6f:2c:11:92:3a:62:b2:44:fb:52:ed:a9:
                    7a:6b:ac:39:85:58:27:1e:14:2e:58:31:06:06:a0:
                    65:da:62:84:d7:3c:e9:bd:c2:00:cb:07:ee:19:b2:
                    c0:c0:45:b5:61:61:9a:ef:a3:68:15:15:af:da:9f:
                    6f:a0:d7:09:cd:72:24:91:22:69:75:34:08:48:30:
                    0a:ce:d6:e6:29:2c:ca:ba:b1:f7:fb:b3:bc:bb:f9:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E5:FE:37:B1:BF:01:EE:83:A2:81:6A:D2:EB:01:13:D4:7A:10:87
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:7a:75:ee:9b:f1:6b:2c:4f:36:95:17:d3:ef:9b:a2:86:
         3b:c4:e3:48:51:40:3d:5a:25:93:c2:41:a6:6f:79:1e:4d:98:
         b6:f1:3d:c3:49:67:0f:1e:69:63:23:8e:7a:1a:8c:25:af:c6:
         a0:b9:73:2f:0c:f5:dc:1f:b6:90:3b:c6:95:4b:f2:1e:2b:b0:
         00:48:d9:72:93:08:7e:28:f3:cb:12:d2:26:82:12:ee:ec:c3:
         a7:8c:74:63:55:88:b2:f8:15:bb:21:2d:92:fb:c7:73:82:fd:
         50:75:72:10:ac:92:ad:ae:0a:0e:44:3c:61:45:45:54:f6:62:
         4a:14:60:d0:48:4d:50:ba:d7:47:e2:f4:49:d3:a7:1a:41:7b:
         a9:33:d0:37:0a:ec:33:8d:bd:89:90:26:bf:24:74:4d:50:fd:
         a8:88:f5:63:32:f8:d4:fb:5d:e1:db:44:f8:e2:42:c5:22:cd:
         2a:a9:07:8c:58:69:ab:db:9c:12:26:5b:a0:78:51:e7:85:45:
         98:5a:41:a2:a1:bf:64:c5:f9:3a:d0:c7:66:ab:5a:59:b1:a3:
         b7:d7:44:fb:97:c4:f5:dd:e0:11:cf:cb:5a:1a:70:6f:15:15:
         c6:23:0c:35:99:cc:e6:72:a4:99:fa:96:04:ff:e1:e0:44:e4:
         3e:44:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----