Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File:                     qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier:          wSeUFe5WZ1fQBTxPbhUQvxmc6N1o/zhcl7Vi3cFuNrk=
Subject key identifier:   25:7B:39:19:78:13:41:A3:91:D8:99:EC:52:EC:42:32:89:48:35:49
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer:       /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial:       01962E991961D291D978C59D51736AA81D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
                          2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: WCs88+oalHjWciBv9ZRnX2JACd76vqPnXkh8PYrSPfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:61:d2:91:d9:78:c5:9d:51:73:6a:a8:1d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=257b3919781341a391d899ec52ec423289483549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:4d:ed:5d:bc:89:bd:9c:a2:da:74:ab:54:
                    2c:13:12:98:03:70:88:89:b8:e1:96:4e:74:36:e7:
                    53:51:a8:b5:37:cf:9e:49:dc:51:f3:36:e8:5a:43:
                    07:c8:ca:d9:0b:8b:e7:4c:76:df:9e:f8:d2:69:5d:
                    4d:fa:e4:6d:f3:26:a7:90:14:d3:38:38:a7:dc:7a:
                    c4:14:79:0f:67:1b:56:ee:89:7b:67:8f:c0:e7:63:
                    d2:6a:84:9b:b8:0c:79:58:f8:53:fd:a1:31:ad:ef:
                    f1:d0:a8:95:e3:ba:3b:17:62:6e:c7:8f:68:c6:4e:
                    0e:c1:2a:1e:f8:cc:11:4f:6a:96:f8:27:e0:8f:81:
                    03:b8:95:8b:fe:88:80:17:d8:3e:9d:6f:65:70:14:
                    44:cf:eb:14:03:8d:16:db:7b:76:3f:2f:e8:d0:47:
                    f1:33:45:0d:fb:51:33:84:7e:cc:85:af:1c:d0:d2:
                    ed:53:13:b9:bb:68:d8:1c:43:37:90:86:62:c9:5e:
                    9d:6c:dc:12:d5:6b:c9:17:ae:1e:b9:37:56:d2:7d:
                    a0:5e:2c:47:e7:79:91:98:98:49:79:da:16:66:d3:
                    30:79:f8:d4:ed:4d:86:16:b0:51:e7:9d:b5:6b:db:
                    4c:61:85:15:4d:60:a9:ef:34:d1:5a:73:7a:b1:2d:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:39:19:78:13:41:A3:91:D8:99:EC:52:EC:42:32:89:48:35:49
            X509v3 Authority Key Identifier:
                keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:63:1a:5d:49:43:0f:ac:f5:ed:78:12:8f:3b:92:a6:4b:
         d3:98:a8:41:27:5d:08:cd:77:0e:c4:1b:99:89:0a:95:78:48:
         3f:66:26:b7:4a:86:a3:8a:66:2a:e8:8b:f0:fa:00:fa:76:10:
         7e:2f:17:31:3d:f7:6f:48:a7:a0:1f:f6:09:29:a6:30:b7:92:
         96:b4:93:0f:fd:5a:ff:55:60:cd:f7:71:0f:cd:61:c3:1a:5f:
         ae:b2:9c:f5:a6:e6:6d:0d:56:15:52:c2:d1:dd:45:ab:32:22:
         c8:73:cf:1c:ec:02:ab:09:58:4d:9e:a2:24:53:c2:e8:49:02:
         91:8a:01:d3:27:78:5e:26:3b:8d:5d:61:39:80:29:af:c6:46:
         de:b8:19:04:8d:b1:b9:67:38:ed:4a:41:36:47:90:e4:23:50:
         f2:10:f2:77:01:91:42:dc:7a:ab:d2:85:48:06:53:1a:a1:58:
         57:4a:30:21:67:e0:dc:53:e0:09:5b:d7:39:e1:8b:14:9a:6d:
         3e:91:e0:3c:1d:05:05:af:d4:12:10:96:73:a9:35:21:83:83:
         df:2b:7f:97:62:49:49:d5:1f:99:64:e6:e0:af:9d:7e:1d:93:
         a0:79:ae:bd:70:f8:84:6d:6c:7d:45:25:28:6a:0b:f2:74:e4:
         73:5b:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----