Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File:                     q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier:          7rJychiX3o1RKs+bvCnK6zkD+BO5h5dlOIn4M6SEzwc=
Subject key identifier:   E8:1C:B8:2A:2A:11:37:63:E6:E2:54:A9:07:A5:91:2C:88:B4:AF:3D
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer:       /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial:       01962FAB943EE0DA725D87FB2B992BDA0FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: KnXrUkbD9BUjXueTVsEQZC+uix90LtNzydYTK8H9Zcc=)
                          2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:3e:e0:da:72:5d:87:fb:2b:99:2b:da:0f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=e81cb82a2a113763e6e254a907a5912c88b4af3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:2f:70:15:1a:a4:69:c2:f3:65:60:8a:86:
                    d4:36:b7:f8:d7:5a:30:82:69:c9:7e:1b:0a:fd:32:
                    e1:3d:70:84:41:a9:92:6d:10:77:52:12:45:85:66:
                    5b:f1:22:18:62:c6:29:43:0b:cd:97:5a:99:1d:d2:
                    e9:4f:6b:9d:74:1f:65:6a:b9:cf:3b:47:cb:e0:f3:
                    38:e2:41:05:76:b7:72:50:1d:d7:31:2c:41:f6:26:
                    5d:39:bb:88:90:ba:d0:b4:5b:b2:77:e9:f0:ff:25:
                    ac:c0:ea:d0:50:fc:e7:e1:a4:39:12:9c:1a:46:93:
                    b1:27:29:21:0c:40:e1:60:19:c6:34:6a:3f:af:14:
                    92:5e:d0:3a:64:eb:ee:3e:b9:02:f0:3c:4d:23:71:
                    9b:33:6c:dc:0d:f1:2e:40:77:8f:77:2b:07:69:79:
                    81:59:2c:7b:23:4b:7a:df:5f:6b:7b:18:32:56:9a:
                    91:01:f6:0e:16:e8:7c:11:b8:df:d0:7b:b6:59:50:
                    39:64:64:1f:28:ee:32:0d:3e:c7:6a:c8:17:97:0d:
                    f8:d6:4e:58:2f:9e:60:e7:4a:c9:0b:56:67:f3:51:
                    31:0e:61:96:c5:f2:77:4c:7e:e7:51:85:4a:16:ff:
                    6f:db:a5:9a:9f:bd:27:92:c1:52:d8:9a:2a:ad:7d:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1C:B8:2A:2A:11:37:63:E6:E2:54:A9:07:A5:91:2C:88:B4:AF:3D
            X509v3 Authority Key Identifier:
                keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:dd:c4:6a:90:df:e2:12:ea:d8:f7:f8:af:19:62:c6:8b:
         44:4d:04:a8:7f:de:51:76:f9:b9:50:7c:a3:20:72:96:39:b5:
         1a:2b:01:f5:0a:3f:12:e2:21:55:48:b1:9d:41:1a:a3:00:3a:
         45:1f:e4:ad:4c:ea:b3:01:f5:e1:00:51:20:3f:10:37:70:61:
         fe:2d:83:5e:e2:96:82:f1:0a:1d:46:1b:b0:3c:23:42:11:5f:
         88:40:4c:8b:02:0f:21:f4:eb:4c:ce:ef:a0:e3:7f:e4:32:86:
         e6:77:8d:bf:eb:d8:59:ff:f9:fd:c1:47:f0:b1:49:fc:a2:4c:
         08:fa:bf:27:1d:6f:0f:c8:a4:f3:f6:9f:df:ca:84:2c:3d:b2:
         42:fc:25:54:45:4f:c6:33:aa:a5:17:2b:da:aa:a3:a2:8d:45:
         aa:a1:96:c3:80:45:02:15:e6:cd:d0:06:92:86:56:1e:ef:f0:
         60:c2:98:38:e4:3d:43:01:50:b9:a8:28:c4:ed:ae:ae:39:d1:
         00:1a:25:2e:74:67:c6:11:c5:d9:40:5d:0a:bc:e9:e8:fe:54:
         ff:38:cc:f6:2d:85:f9:5c:84:1d:90:00:8f:ae:9f:17:86:90:
         91:57:17:11:0d:09:47:f4:0d:03:16:85:17:f8:4c:a7:5c:03:
         62:96:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----