Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File:                     insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier:          h7vi9QrOmnc2W/4HJd3p2oo8BdDSbO+bc7hwj5S7NuA=
Subject key identifier:   CB:04:9E:31:BA:93:6D:4B:CF:B0:E9:52:1E:0D:4A:C4:4D:72:BB:35
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer:       /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial:       01962FAB7F3A8EF93C84BEFB5BBEF6940D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
                          2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
                          3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: 7DHzbmEWJhyuglbk3DtWnwbSiSshllAQD981XzfYAKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:3a:8e:f9:3c:84:be:fb:5b:be:f6:94:0d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=cb049e31ba936d4bcfb0e9521e0d4ac44d72bb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:96:ed:11:85:da:ab:d1:28:37:1c:4f:2e:
                    d2:9e:55:a0:37:b5:20:d8:23:f0:f9:31:8e:30:5a:
                    6b:85:cd:57:4c:32:c5:dc:e0:eb:ae:68:2c:d0:e9:
                    bb:ee:2d:78:9a:99:b2:86:89:6d:9c:53:44:b7:8b:
                    6d:8f:21:3b:0f:69:71:83:ae:29:87:5e:a3:e7:ed:
                    11:25:5a:4d:c9:a5:f7:f8:d5:b5:51:d2:12:80:56:
                    9b:64:c4:61:87:88:81:9a:df:d8:43:43:73:34:e9:
                    08:02:fe:cf:c7:36:76:90:d4:88:e2:d5:42:c2:ab:
                    95:38:09:9f:02:d7:cd:72:3e:d5:79:37:28:5a:fd:
                    8c:31:d6:9d:3d:50:9e:b4:63:8c:68:1f:cb:97:23:
                    8e:09:66:00:e1:26:b4:f6:6b:5e:b4:70:0b:a4:e6:
                    d4:13:fc:5b:10:6e:15:86:92:c4:07:34:82:84:95:
                    e4:98:2b:10:39:7b:b3:34:5a:11:ff:8b:c4:ca:53:
                    d9:cb:c4:78:1b:cd:d4:40:cd:9d:f4:69:12:a2:25:
                    db:af:bb:e6:a8:c1:81:34:a6:47:b0:56:89:e5:fc:
                    9b:c7:b8:2f:33:24:aa:59:b2:af:37:58:1e:d3:59:
                    e0:b1:0c:8f:72:8f:76:ee:3f:6d:68:f7:11:07:24:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:04:9E:31:BA:93:6D:4B:CF:B0:E9:52:1E:0D:4A:C4:4D:72:BB:35
            X509v3 Authority Key Identifier:
                keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:0a:05:0d:9c:7b:f8:c3:6d:05:78:22:c6:12:84:4f:4a:
         f7:2e:a0:1e:de:18:50:08:b7:8a:a5:ba:42:3f:c2:c3:49:69:
         a2:b1:dd:18:90:b0:3c:d3:fa:a4:4a:54:ec:1a:95:cb:e5:90:
         1d:23:6a:f6:b4:e0:d6:df:fe:92:8d:74:40:5f:4c:6a:8f:d1:
         96:0b:2d:5f:4f:40:1f:b6:da:96:81:f4:80:f2:19:4f:1f:d8:
         08:df:d6:19:a8:a8:09:aa:10:27:e1:1c:03:e9:0f:cc:97:ff:
         89:b9:3e:99:42:db:35:0d:f6:40:61:25:6a:12:bc:22:50:87:
         c7:6a:b3:37:b9:b3:93:a2:e7:d0:ef:8b:a1:37:62:fb:4d:49:
         4e:00:17:2d:c0:8a:91:da:42:4c:d7:6f:87:aa:b5:23:64:8f:
         f9:25:7d:9a:e6:f7:b9:01:aa:f7:64:8c:43:06:7a:dd:b1:92:
         8d:25:82:32:7e:e4:98:81:6e:91:87:76:ac:11:1c:c5:87:6b:
         ac:ae:32:b5:af:b2:ae:4d:20:b4:d2:e0:e0:cf:1a:fb:b3:1e:
         ed:70:a4:5c:99:43:0f:04:5b:30:a7:00:67:1a:e1:06:9d:b8:
         07:50:86:3f:24:26:68:f7:a6:e8:51:a5:29:50:c1:f3:ce:e7:
         80:08:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----