Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
File:                     pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json)
Hash identifier:          fl4H3Nqn50xWKPtiKRphM9HCTSdD5UO9smR0glvzjeg=
Subject key identifier:   F3:5F:A5:77:62:3A:22:77:68:AC:D7:34:5F:3E:EF:2E:FA:FD:B0:B0
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Certificate issuer:       /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial:       01962F06793CEC4EBAF7A828441A53472047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft
Manifest number:          099D
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=)
                          2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: FJrAyKxzlCuxhVv7pU69Hx8Rlas5qVDAw6nct5kts4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:3c:ec:4e:ba:f7:a8:28:44:1a:53:47:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=f35fa577623a227768acd7345f3eef2efafdb0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:bd:d6:be:79:06:56:ea:76:65:b3:84:7e:
                    7b:2a:c6:ff:2b:e3:35:ff:4b:31:ad:d4:9f:a9:d1:
                    8c:bf:84:70:12:f9:2f:a4:bd:c3:54:34:04:41:90:
                    db:4b:56:17:9a:70:90:e9:38:43:b0:43:4d:ea:d8:
                    ba:cb:68:2c:92:dd:94:a5:1d:51:90:12:a0:b1:7a:
                    95:15:09:c9:96:14:5c:cc:7d:9e:4b:7d:85:8d:84:
                    55:d1:55:99:03:91:2b:17:5f:4d:86:c1:b8:64:22:
                    e5:4c:13:fc:8b:3c:63:a7:56:ed:54:6d:d1:21:68:
                    72:4d:69:0b:83:b8:c2:fe:2f:72:4a:51:c2:f5:7c:
                    c9:35:86:6b:11:b1:7a:14:8d:0d:bb:33:23:15:3f:
                    4e:d1:a9:dd:ea:a6:95:c6:d6:15:ba:b3:71:fd:1d:
                    7e:92:78:8c:82:f3:bd:f2:98:7a:bd:2e:17:df:1d:
                    6c:05:46:46:25:ea:5d:79:5d:3d:3d:14:00:25:98:
                    c7:8a:d1:f3:b9:80:f7:9e:f5:55:5b:dd:8b:d7:59:
                    fc:88:f8:7a:df:f6:f3:21:20:d7:2f:2c:8a:7e:87:
                    36:13:96:d9:55:fa:94:44:c7:20:e9:ea:d4:97:88:
                    70:bc:7d:4c:2e:ff:b3:af:7d:88:a7:cc:0e:44:70:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5F:A5:77:62:3A:22:77:68:AC:D7:34:5F:3E:EF:2E:FA:FD:B0:B0
            X509v3 Authority Key Identifier:
                keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8c:01:94:31:12:22:ed:9c:30:37:74:7a:1a:3b:ee:ec:e2:
         7c:fb:61:15:8d:60:3b:2c:e1:67:8c:93:98:ef:6d:f5:eb:33:
         b1:c1:05:f1:6e:05:83:c6:38:f3:d0:78:b2:ae:0b:00:ff:67:
         e4:b2:c2:f1:47:b4:52:cf:ef:69:da:6d:d6:fb:9b:f3:a8:30:
         da:62:bc:12:fe:05:7c:eb:45:53:ff:9a:71:8c:a2:2f:36:e4:
         c6:1f:31:e3:1b:ab:ce:e0:8d:c1:45:ad:a4:cb:a9:8f:23:66:
         41:8d:fd:f0:72:70:97:a0:7e:c8:b9:7b:f1:8c:1f:e7:d6:75:
         72:80:02:8a:03:aa:11:f6:a0:a1:92:b5:ae:29:5d:38:8c:de:
         15:aa:ed:11:f6:84:9d:fe:37:e4:c7:f3:87:14:23:95:88:12:
         7c:06:5b:30:63:d6:85:41:f6:76:82:5c:6b:34:c0:f4:81:14:
         62:d8:36:f9:ae:45:94:08:a0:39:7e:6a:d9:0d:b6:0d:4e:16:
         58:10:72:2e:cd:66:5b:4a:f8:be:db:96:32:04:ee:dd:31:e3:
         75:8a:14:2a:2c:63:03:56:94:7f:f1:ce:7d:65:cc:d3:ec:11:
         45:ae:ac:ef:f2:ff:f1:36:40:b6:73:e3:6e:e7:a3:d0:83:a8:
         5e:e8:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----