Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File:                     qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier:          nA9mHoynOC9NU8cdOZxJK83g0aQyPRi0Grd+SYlB9nk=
Subject key identifier:   42:95:AB:BB:61:12:4D:CF:3A:CF:C8:FD:1D:89:E5:C4:85:85:D7:05
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer:       /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial:       01962FAB88E65BF9C72213F5D83B52E1C2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: /4dc1a3815XmJkV2LCganP3sekt5vOoQBobmBJDg9AI=)
                          2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:88:e6:5b:f9:c7:22:13:f5:d8:3b:52:e1:c2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=4295abbb61124dcf3acfc8fd1d89e5c48585d705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:bf:71:b5:f3:46:66:c3:aa:e3:2b:06:49:
                    52:73:2a:df:5a:2b:d7:a1:54:04:47:77:e0:49:f4:
                    6f:5e:6f:4d:d0:0b:9d:16:f8:26:b9:63:a9:a8:cb:
                    2f:c5:70:f1:f5:d5:4c:c0:9f:e0:e8:9b:e3:89:c1:
                    ff:81:29:63:e9:e4:2a:1c:e3:10:4e:e5:ce:8f:32:
                    a0:d9:10:cc:54:99:30:ae:95:5c:34:9a:4b:af:62:
                    f1:22:7d:4f:71:19:44:ab:22:0e:44:a0:8b:ff:9e:
                    8c:a2:54:03:a5:76:ee:c9:7b:3b:c3:5a:de:5f:89:
                    c9:bf:3b:c9:8f:50:c5:8f:a0:7d:87:79:f2:0c:9b:
                    c2:3a:66:46:37:97:bd:a9:4a:1e:70:ef:b2:5f:81:
                    02:c7:2f:24:32:3a:96:8d:b2:12:c8:b3:f7:70:d8:
                    31:f0:7d:de:8d:7a:45:42:e1:64:ad:23:c0:43:5e:
                    a0:9d:ed:b2:2c:bd:dc:2b:b8:5a:ba:15:cb:02:0b:
                    b2:a0:d2:e3:4e:90:8a:04:b0:f3:a9:87:a4:49:af:
                    43:1a:04:7e:91:c9:a7:51:ee:5c:b7:c9:05:bf:dd:
                    d0:8d:5a:9d:ac:da:e0:87:02:62:5e:b6:5a:5e:c6:
                    37:6e:60:03:ae:76:2f:9b:60:19:5b:c2:07:f3:7f:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:AB:BB:61:12:4D:CF:3A:CF:C8:FD:1D:89:E5:C4:85:85:D7:05
            X509v3 Authority Key Identifier:
                keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:72:1d:f8:9d:43:09:01:bc:14:2e:de:3b:c6:7b:86:75:
         a3:44:6a:e3:26:93:c7:a0:a0:f7:5f:64:de:8a:3b:05:6b:e9:
         10:f3:e6:57:ad:73:06:36:41:3b:3f:ab:4a:77:77:8d:26:cc:
         3b:c8:fc:8a:e7:51:b8:0d:24:62:2d:49:23:68:80:f5:4e:95:
         fb:56:2c:6f:5e:b5:ce:96:9a:7a:71:64:f3:3b:88:86:cc:6c:
         21:53:43:52:81:ad:27:be:20:4b:5e:ac:10:bc:e2:c1:55:fb:
         80:c9:da:29:66:69:e1:32:2b:75:0c:1e:dd:c2:f0:a8:42:44:
         dc:68:ca:09:dd:ca:82:53:a0:38:39:ec:2c:04:2f:5c:9a:19:
         b7:2a:23:28:66:7f:40:2c:9d:fa:5d:10:a2:9d:cb:49:e9:69:
         02:8b:68:6b:7a:26:16:77:f5:a8:28:48:6a:4d:b1:28:f5:c6:
         86:35:13:ec:aa:9a:84:85:21:1e:87:f4:87:83:28:74:ed:db:
         d5:d3:5a:b1:d6:f5:15:07:04:7b:d6:6e:95:55:a6:55:66:a3:
         3b:c9:71:21:c0:1a:d6:86:52:0a:2e:46:32:77:4b:68:35:21:
         59:d7:a0:8e:fa:2b:ef:56:ad:07:19:a3:e2:d7:51:18:58:d6:
         6c:3d:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----