Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File:                     q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier:          CqWM1QsqUaoUslGKjN0l3hjcqXjbOQ8oTw0KL8UIBSs=
Subject key identifier:   F7:01:42:EA:75:14:FB:C7:55:6D:5B:8A:55:91:CF:13:FC:6D:35:00
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer:       /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial:       01962F74EB796F2EFFCC8DFB9461D8A66152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: ADuPvotZ5Mmhc9GiGcIKLU1L1R6mlhVbiaO+LkWtQII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:79:6f:2e:ff:cc:8d:fb:94:61:d8:a6:61:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=f70142ea7514fbc7556d5b8a5591cf13fc6d3500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:f5:04:e3:76:a2:ff:df:03:00:ce:95:b3:
                    98:cb:d8:fd:5a:c7:38:d6:0a:cd:25:54:89:e4:3a:
                    82:15:c7:5c:85:80:5d:fb:0d:8f:b0:b3:b5:52:98:
                    cf:01:43:8e:2d:0d:e7:4b:05:a1:4b:08:bb:67:3b:
                    22:51:92:41:dc:e0:56:97:fa:fa:06:2a:d7:fb:5c:
                    e8:3f:96:20:17:36:20:aa:2c:50:e6:92:0e:59:56:
                    75:2e:f8:91:7f:5b:b0:3d:1d:cb:03:45:a4:86:5d:
                    1c:b4:56:d5:00:df:e4:51:72:6f:be:53:67:a3:9b:
                    ad:71:64:92:48:9d:2d:88:d6:12:ad:97:03:d0:57:
                    4e:bd:45:03:0d:7e:b7:f8:77:33:eb:ad:89:6c:ec:
                    dd:7d:b7:b5:55:0b:d0:27:e6:ee:e2:74:43:2f:1a:
                    f8:c2:d4:75:cd:85:26:f4:37:3e:07:b0:09:ab:f4:
                    e1:a5:4d:16:75:29:4a:72:6c:05:aa:b7:62:cd:bf:
                    6f:07:fb:04:91:53:d0:45:7f:66:e9:ba:a3:38:3d:
                    c5:a4:7f:03:45:9f:26:c5:11:1c:39:00:6d:65:40:
                    82:6d:8a:63:0c:67:6c:80:5d:44:00:05:9b:5f:b2:
                    5e:9e:36:63:db:6e:62:0b:ec:7e:6c:16:3d:8c:4e:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:01:42:EA:75:14:FB:C7:55:6D:5B:8A:55:91:CF:13:FC:6D:35:00
            X509v3 Authority Key Identifier:
                keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:ba:9d:4b:d3:fa:5b:90:a6:35:3b:9b:a9:41:6a:48:5a:
         6a:ba:00:1c:76:71:06:4d:1e:7f:7c:c1:8e:03:6c:06:84:d5:
         87:bf:27:a6:26:85:82:68:b1:73:22:16:2c:2a:b5:b3:03:ce:
         b6:27:a3:1c:4b:70:17:7e:f1:14:3d:6c:c0:ff:95:0d:2b:0d:
         48:f3:6c:c2:34:89:46:67:e1:9d:a9:f0:84:b2:f4:85:39:da:
         94:00:97:85:96:bc:06:96:ae:63:8d:04:ab:42:78:20:51:b4:
         4e:00:cd:1a:84:e4:1b:0a:56:b9:7e:85:06:bf:60:59:ae:79:
         08:fa:94:50:55:29:87:98:07:b3:15:ff:ff:1f:c6:3a:7b:fe:
         a3:0a:dc:9e:42:71:69:41:0d:29:d2:eb:44:e3:60:2f:49:a1:
         d4:d9:17:51:8f:44:76:17:29:ae:67:8c:95:ca:cb:5a:f9:96:
         b5:be:0a:fb:49:57:15:73:1f:81:cc:14:c4:22:2c:8c:3f:f9:
         a7:14:4e:15:63:9b:1e:ce:00:cd:37:51:54:42:62:63:6e:ac:
         4a:86:a1:28:94:1b:21:71:10:d3:f4:1d:e1:3b:1b:09:72:1d:
         49:b9:d3:60:01:6b:e1:d0:cc:d6:c2:3c:cf:02:8c:d3:ac:22:
         69:28:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----