Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File:                     q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier:          Ou2HCIQxN+qsNjFUsTQVHQEkKmkLCuA4QZdeobqiXOk=
Subject key identifier:   8D:23:36:59:37:E6:52:CE:47:29:6C:06:CD:A5:98:77:C2:0C:B4:F8
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer:       /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial:       01962F74442E1996F79B7E8C56969E4EED8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: DQGDW2EyDx7OECmywOIjlUUd4xrJu7YBmCqjNl0Kce4=)
                          2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
                          3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:44:2e:19:96:f7:9b:7e:8c:56:96:9e:4e:ed:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=8d23365937e652ce47296c06cda59877c20cb4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:ba:7d:86:8b:a2:60:11:1c:cb:dd:68:f4:
                    f8:1d:51:31:cc:5c:fd:4a:1b:fc:cd:da:d7:da:9e:
                    7c:52:00:14:ec:cf:94:6e:67:00:c7:76:0b:6c:75:
                    ed:02:20:36:36:58:c2:db:6b:73:33:11:a0:dc:77:
                    3f:f8:9e:ac:3a:15:34:98:a6:f5:ae:1e:26:71:51:
                    98:df:e5:0e:36:2b:d8:d6:b6:a1:ca:2f:99:d5:d7:
                    7b:cc:fa:5c:1d:e1:d0:ad:42:6e:7b:56:28:45:18:
                    06:e6:4a:85:fa:7b:82:3d:f7:a8:83:b9:12:50:f4:
                    ae:b6:fe:4f:b8:61:14:a5:40:62:8a:17:fc:f4:d7:
                    77:8c:71:cc:3f:2d:59:b3:d9:13:28:4c:be:57:98:
                    72:1a:55:72:00:96:50:7d:d7:97:31:73:46:a9:41:
                    37:e8:49:15:6a:49:79:e2:dd:49:f6:4b:73:20:2b:
                    23:45:bd:d2:c8:d0:0f:7c:cd:b6:cf:d5:12:17:1f:
                    72:a8:0e:d1:53:51:50:52:29:e3:d8:83:ca:f9:4a:
                    26:5d:26:14:16:9f:b0:5e:ea:ad:d5:7b:e0:fb:b3:
                    cc:c6:01:14:77:17:48:74:4b:fc:e9:b7:a6:87:32:
                    82:f2:4a:d9:0c:f8:2d:c6:8c:f9:ef:e2:48:9e:6b:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:36:59:37:E6:52:CE:47:29:6C:06:CD:A5:98:77:C2:0C:B4:F8
            X509v3 Authority Key Identifier:
                keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:c1:d6:73:01:78:ce:c3:33:11:cd:39:45:ee:02:e9:74:
         8e:2b:98:7d:f3:f8:0a:a9:3a:c0:07:55:43:67:3f:5c:cc:21:
         49:c4:bb:eb:cc:29:82:25:fb:42:ab:43:82:c2:43:c6:73:a5:
         a3:28:e4:14:7e:0a:ae:26:f5:d5:ff:8f:1d:11:bc:78:8d:53:
         51:8e:e1:55:e2:56:6a:79:62:9c:b9:23:20:b8:16:69:ce:41:
         e3:f1:b5:7c:3d:4d:b5:1b:28:e5:bf:90:78:ab:cd:2e:61:57:
         65:61:1d:6d:e9:10:31:21:8c:a8:62:9e:f5:82:b6:90:f1:c1:
         da:77:b4:95:90:41:57:7e:68:b2:df:6a:60:c7:88:ff:96:39:
         d4:9c:fd:7f:7d:d9:cc:16:91:84:d5:0e:38:56:4d:2c:bd:a1:
         31:21:34:f1:5c:5a:50:6c:2a:2c:c8:00:11:31:52:ce:dd:f1:
         4f:ec:6c:0c:df:81:a5:4c:86:3d:56:74:65:82:20:9c:40:f8:
         25:f0:8b:55:f7:ce:12:56:24:c5:32:c5:0e:e1:5a:42:cb:2f:
         89:55:d9:34:b8:59:e8:59:4f:06:01:fd:55:55:65:08:b7:29:
         7a:64:f7:66:ca:2d:39:2a:c2:1b:82:d3:7c:ce:7f:12:c2:c6:
         e3:0b:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----