Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File:                     qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier:          EaMNykun3jFRJw5mySTD5YgqCSx4KpCeSJaQXX2/Gsg=
Subject key identifier:   A9:04:28:55:8B:94:87:55:99:D0:DC:85:1E:4B:5C:36:8A:B3:51:09
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer:       /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial:       01962F06E9A341E02A96FF5075EF2DA25C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number:          0C60
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
                          2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: kGoQdt64FSX0+ghnyxLl1gg4lxyut8IoPjJ7ZWjoCEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e9:a3:41:e0:2a:96:ff:50:75:ef:2d:a2:5c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=a90428558b94875599d0dc851e4b5c368ab35109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:69:90:3e:1a:f8:d1:7d:32:99:0b:b6:ec:
                    4d:fb:ad:9d:3d:20:d4:e3:b0:2a:8e:72:17:8c:5e:
                    77:4b:d6:eb:7c:b1:66:b6:f9:c8:80:b9:06:56:79:
                    8f:bc:22:59:3e:51:a1:47:49:8c:04:a2:f4:8a:cb:
                    42:fe:a0:d3:f1:bd:da:a0:7b:5b:24:5b:96:5c:07:
                    98:88:8d:22:f7:e1:99:8e:29:6d:bf:a8:04:0d:ac:
                    e7:99:b3:c4:2b:f3:24:00:1d:45:db:36:80:75:9d:
                    cf:36:78:b2:0b:06:f6:82:21:76:8b:25:51:ee:03:
                    70:72:56:ba:06:86:3f:e6:0a:92:4a:21:ec:6b:69:
                    0e:1d:60:50:1b:e6:ba:50:d7:cd:b3:f5:c3:bb:89:
                    ad:6c:5f:cf:df:21:b2:e2:b4:7e:a0:bd:93:48:47:
                    df:c5:28:9f:fe:a0:a7:38:3f:23:b6:e7:06:f7:32:
                    c7:81:0f:fb:2c:09:ec:4f:cc:6e:bd:1b:6a:7e:6b:
                    6a:4d:cc:ca:bd:ea:73:91:00:c6:88:06:36:1b:9e:
                    f1:07:36:d1:6f:b0:57:c7:69:25:44:a5:fc:8b:a3:
                    51:b2:df:b3:66:5c:a5:3b:71:49:21:94:38:8e:e8:
                    7d:59:f5:c8:9b:29:62:b1:aa:b4:ae:61:07:3f:c8:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:28:55:8B:94:87:55:99:D0:DC:85:1E:4B:5C:36:8A:B3:51:09
            X509v3 Authority Key Identifier:
                keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1b:f2:cb:2c:0b:99:50:fe:f9:da:de:e5:b6:04:46:5c:6d:
         4a:5a:0a:86:76:0c:19:57:6d:2e:cd:ea:ef:9b:d0:8e:4a:c5:
         8e:db:fe:83:2b:af:35:6f:4c:2b:88:0c:69:44:81:1f:ef:8f:
         5d:d1:ad:bd:ff:fc:d8:a8:e5:da:15:b1:2c:b6:44:52:a9:cb:
         5e:b4:a7:52:82:b7:d7:1a:68:b2:2d:70:7a:09:47:14:58:ce:
         f8:34:6f:f4:6e:2d:16:94:84:03:4e:5b:7f:da:e6:59:73:8d:
         c1:13:61:b4:42:2b:74:73:e7:00:51:9b:a1:0d:cf:85:3c:86:
         76:0a:88:bb:7b:ce:49:fa:94:9b:ee:94:74:46:49:74:21:41:
         93:51:96:18:32:50:0b:ff:ae:59:81:dd:b4:0f:30:43:2c:e7:
         f5:85:81:ca:e3:f7:90:71:b7:74:d9:cf:42:28:7f:14:a3:67:
         a8:1d:cc:5f:b2:e1:44:3f:32:46:1c:76:86:43:5e:7f:30:e8:
         57:ac:c9:73:f0:d3:29:1e:86:9d:d0:be:e9:c0:26:76:5b:74:
         1d:6f:64:12:dd:e4:2c:50:54:56:06:48:61:bb:dd:d3:0c:03:
         f6:36:b8:dc:dd:0c:0e:8f:39:a9:e3:f9:3d:89:71:71:71:c1:
         f8:43:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----