Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File:                     qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier:          dFGfMjyqV4ru4QgPTc387U/LCPDYJxybAF7Wgcb3iUw=
Subject key identifier:   A9:AB:68:13:A7:7E:2B:65:0F:DB:7E:4E:40:48:3F:1D:18:FA:94:23
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer:       /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial:       01962F0667F46710A1A55E2F10FF15752705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: TOzNLtk2EcFN8tWWUcBYc6SMW8E.roa (hash: q/YjRgOTnjUrtQ6qzvmbEUmVOXxgxmvQW4n5HH9vrjQ=)
                          2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: MsaWL2tamVb4mKkJAJsZvANDZ5CSae+nex4NyzjpejI=)
                          3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:f4:67:10:a1:a5:5e:2f:10:ff:15:75:27:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=a9ab6813a77e2b650fdb7e4e40483f1d18fa9423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:85:81:a7:c5:8f:73:99:0a:ec:c0:65:6e:
                    d1:0c:a6:2d:d0:29:92:21:ee:db:92:d0:3e:a0:6e:
                    b7:57:19:35:af:c1:86:02:b9:64:cf:0a:fe:4e:57:
                    cf:5f:b8:88:a3:bd:a7:7a:d0:93:9b:d8:ed:17:95:
                    64:22:91:50:a1:bf:8a:ed:68:67:fa:fd:dd:11:76:
                    2b:51:13:6a:2e:4c:c0:1c:dc:06:c7:d7:28:97:65:
                    6a:ae:b7:de:30:0c:dc:3e:b4:3a:06:f7:5e:02:59:
                    15:3c:6e:ca:6d:04:b6:1c:5a:4a:a8:10:88:93:dd:
                    bc:01:72:94:60:6f:70:b5:37:84:0f:14:cc:95:e7:
                    fb:7a:25:61:9a:54:0c:62:ae:af:af:b1:26:7f:27:
                    31:f4:32:6f:d0:d7:87:ff:99:14:fe:fb:31:4c:b6:
                    5d:a7:a8:ff:b6:28:d8:ad:91:97:41:16:a9:5b:20:
                    10:55:f3:4b:c1:0f:e5:48:a6:a1:8b:6f:57:4b:ea:
                    f0:ea:59:87:0e:a6:c1:3e:ee:48:1d:5a:93:49:43:
                    1d:30:5e:56:d9:1f:48:db:b3:66:a6:3a:3b:e3:67:
                    29:83:11:66:eb:03:7c:98:12:05:00:7b:d8:13:67:
                    3c:49:7a:14:95:c7:97:93:ab:15:b1:ec:66:15:9f:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AB:68:13:A7:7E:2B:65:0F:DB:7E:4E:40:48:3F:1D:18:FA:94:23
            X509v3 Authority Key Identifier:
                keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:97:8d:a1:09:ff:1e:0d:1e:5c:85:1e:5e:54:b3:e2:c9:
         bf:5c:05:aa:73:3d:4e:2a:a2:47:ee:85:a0:dd:9c:24:a9:1d:
         2d:e7:bd:f3:78:b0:e9:76:7f:c1:52:0c:99:78:ba:52:f6:4c:
         8f:e2:ff:b7:55:2e:6c:60:3b:2e:f9:fd:5d:bc:25:6a:8d:c1:
         b2:4a:95:c7:06:75:52:35:81:5f:32:ee:75:79:2f:3f:c3:5c:
         ac:54:16:d1:0a:69:33:ea:ad:47:ef:43:cb:2b:f6:be:2f:b3:
         24:8e:0a:46:e3:84:4c:ed:53:49:9a:7b:cc:32:2b:ce:d7:96:
         2a:75:cf:ce:03:d0:71:76:3e:3f:6d:5a:ea:26:14:ff:58:c8:
         c0:1e:ac:27:b9:75:c9:ee:36:0c:1c:1d:77:df:25:cd:bc:d9:
         b6:e8:27:79:cb:de:06:58:97:a5:d1:5c:3d:41:22:e2:5a:20:
         36:f9:f2:b3:89:6c:19:85:05:bd:ce:f3:dd:98:07:28:c7:44:
         e8:81:86:2a:ff:14:6e:4e:8c:14:3e:76:56:fa:dc:0a:03:ad:
         90:3c:45:5c:d4:82:d1:49:cb:a1:97:f9:d7:9a:bd:51:2e:1e:
         90:7f:89:48:8f:cf:4a:6e:4b:21:8d:a3:03:69:8d:a1:17:5d:
         51:25:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----