Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File:                     AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier:          MEkAaS8MeUBxraxMBKwCfzO5Fp+duR9Oz9z2nALwf5U=
Subject key identifier:   24:7B:D5:C7:09:EC:0D:AB:DF:9E:ED:DF:75:68:D7:ED:EF:E5:DD:B3
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer:       /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial:       01962ECFB27E95CC02199497F4394AF2DDA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number:          0F5D
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: OX4me1uQohy4zA/VK02uFOBlNhuq3GZ7/TAq9xdEvYQ=)
                          2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b2:7e:95:cc:02:19:94:97:f4:39:4a:f2:dd:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=247bd5c709ec0dabdf9eeddf7568d7edefe5ddb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:60:85:e8:d1:3e:7c:80:2e:91:2b:24:91:
                    06:91:05:ca:0d:64:59:6f:73:85:ba:e4:e3:7c:e6:
                    2b:f4:19:e8:3d:71:c5:ed:f8:e8:93:b1:db:41:d1:
                    0a:7f:92:f3:88:09:d5:93:4e:c4:8c:ec:f5:3d:42:
                    d5:c4:c9:65:9a:ed:36:f0:88:9a:cd:ff:75:dc:12:
                    0d:39:21:87:f2:63:9d:d9:de:36:f4:c2:38:52:22:
                    77:df:ca:5c:95:f2:3f:5b:3c:67:2b:65:5e:01:b4:
                    da:95:58:79:cd:60:fe:79:19:6c:dc:58:5c:31:a9:
                    1e:b6:91:07:79:3e:97:72:1b:77:60:45:e9:46:28:
                    af:b2:66:22:db:28:c9:b8:7f:05:a3:13:bb:91:71:
                    24:d4:d2:b1:9e:4d:a5:a4:b4:c5:f6:1e:7e:2c:5c:
                    1b:f9:2c:4b:20:a1:94:75:ea:8d:2b:11:33:e3:d9:
                    f3:98:a0:18:fd:b1:97:d0:d3:fe:7d:59:ae:a8:ce:
                    58:8e:46:1a:fb:ae:8e:29:c9:54:a6:63:e9:cd:0e:
                    c0:b3:91:b0:22:06:a4:2f:08:4d:ff:b7:40:2f:77:
                    0c:a5:eb:93:cb:80:6c:62:b9:19:79:b5:61:ed:ad:
                    e5:48:a4:65:1b:ba:79:26:4c:b7:2f:5d:0f:2e:9d:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:D5:C7:09:EC:0D:AB:DF:9E:ED:DF:75:68:D7:ED:EF:E5:DD:B3
            X509v3 Authority Key Identifier:
                keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:76:99:ca:47:cc:7a:6e:68:51:a9:e8:56:36:1b:e6:8f:c6:
         22:07:2a:d6:72:a3:43:84:b7:1f:16:ef:6e:1c:0e:39:22:bf:
         45:82:36:89:9e:2b:a9:c8:e3:e8:f7:b1:a1:8e:13:16:84:c5:
         cf:a4:d4:38:82:13:f5:30:10:7f:59:85:37:ff:83:72:69:a5:
         7c:2a:27:c0:9b:3b:8d:c7:96:3d:d9:67:2c:f1:30:0c:40:a4:
         9b:ed:46:c1:a4:de:15:e7:ed:00:85:7f:77:0c:ad:3c:3b:89:
         1d:fc:c7:bd:33:1b:5c:f9:16:fd:30:60:75:e0:0a:fc:5d:4c:
         cc:8e:ee:d0:08:5b:27:de:4f:d7:d3:e6:76:d0:20:23:f1:cd:
         dc:a9:e5:1b:95:ca:c0:4a:a7:87:c0:df:0f:3a:be:05:b3:00:
         eb:e0:17:00:12:e9:49:e4:0a:5b:ca:7c:69:94:f2:32:dd:5c:
         11:9f:2c:b4:8a:d0:dd:5d:e7:32:5c:58:dd:27:03:5a:77:cc:
         66:bc:e3:58:dd:4d:05:14:ee:a1:f4:c9:ac:5a:0d:76:ec:42:
         43:71:4f:d5:e5:72:4d:cc:b1:13:97:29:7f:7e:c2:d6:05:0a:
         50:79:63:b0:f5:b7:2f:e5:cf:59:0d:4b:c3:df:82:d1:b6:2f:
         ac:9b:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----