Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          +8rm0+4bu2AXva+DnzqDsjGwGUO97DgM5wwTnL6S69o=
Subject key identifier:   66:E9:2E:07:0D:EE:29:C4:8C:84:FD:5A:FF:78:D6:0C:55:3B:95:EB
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       01962E2B317E34C0422C33B8F02DC7683964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: 2gzSP14OzjzPH6sFjXU7gOFo7nSYipRB1WfVyR0W718=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:31:7e:34:c0:42:2c:33:b8:f0:2d:c7:68:39:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=66e92e070dee29c48c84fd5aff78d60c553b95eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:6c:af:91:a1:78:7e:93:21:40:ae:c1:e3:
                    f3:55:05:ee:f2:3e:18:df:aa:f4:6d:e4:b4:cc:d6:
                    fe:ed:75:7b:07:5c:c4:dc:da:0d:7b:55:1c:36:04:
                    ab:e4:06:22:25:f1:bf:2d:6e:50:0c:f9:b7:5a:4a:
                    cf:6c:41:d4:5f:ec:cb:08:03:fd:74:38:2d:f1:da:
                    cc:e7:41:cd:74:29:28:a2:3a:10:3a:8d:d8:cb:15:
                    4f:10:9e:f2:7f:4d:93:88:d2:4f:a2:45:58:26:49:
                    eb:e0:39:80:6b:5a:d4:9c:0a:c3:71:0c:05:56:36:
                    8c:ad:6d:ac:2a:67:ae:03:ed:e9:64:5a:4c:e4:c6:
                    6e:a2:a9:a6:00:60:80:6d:ae:44:45:6c:67:40:6c:
                    97:52:89:87:a2:02:c6:17:59:1f:f1:4e:6e:ab:09:
                    e3:e5:1f:f5:a0:5a:67:f1:d0:fc:9f:b0:de:37:2f:
                    ca:09:95:89:ef:4e:cf:29:a1:06:4e:7b:fb:c8:9f:
                    c1:e5:1c:54:e6:97:dd:a9:d9:3b:fb:ef:41:5b:e2:
                    f0:93:8c:8c:4f:ec:17:d4:2d:18:ba:17:6a:58:8c:
                    bc:48:63:9a:18:e0:16:ae:ae:bd:ba:d7:c9:60:93:
                    a2:08:cd:a2:7d:44:e8:50:61:53:6c:db:d7:14:38:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:2E:07:0D:EE:29:C4:8C:84:FD:5A:FF:78:D6:0C:55:3B:95:EB
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:f8:62:02:0e:67:d6:b4:a5:a3:aa:2c:0b:24:2f:78:5c:
         86:39:e4:95:64:0a:25:b1:45:20:b5:d1:4b:a4:89:7b:9e:20:
         82:35:df:8e:eb:28:96:09:53:dc:97:56:a6:3d:84:df:08:de:
         50:14:09:5a:c1:7d:a7:13:40:fa:bf:13:39:3e:10:18:d4:90:
         02:a1:e0:fa:c9:21:78:ef:70:81:eb:12:55:d3:68:8f:82:6d:
         5d:41:0a:b8:4a:b4:98:22:ee:71:51:95:a4:9d:8d:bf:b7:31:
         5f:c7:6d:15:ca:97:4f:56:b3:24:1f:08:8e:a1:30:bd:60:06:
         80:85:f6:9b:20:d2:65:49:95:00:e8:7e:65:ae:60:5d:bd:c0:
         0e:3d:a1:75:e2:fa:e4:f8:f6:e1:ea:25:0e:8f:da:e2:5f:30:
         1b:e4:8a:28:4c:de:b2:37:2a:85:ac:92:49:60:67:3a:c7:dc:
         ea:af:46:a8:2d:d1:20:09:17:1f:36:13:44:c6:9c:13:86:03:
         b0:f2:7b:b0:cf:2e:f3:7e:3c:a9:87:7a:26:56:13:4f:1a:7d:
         b2:24:eb:30:17:9b:f4:92:d7:af:8c:c8:f9:3c:1c:42:a3:bf:
         1a:a3:a8:2f:bf:d0:e1:ed:d4:3e:22:b2:5b:ca:47:12:94:26:
         84:46:34:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----