Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File:                     qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier:          h5AegW8fD4SreK1/ykvLni44CkXwqdqXjKClVLkSoxw=
Subject key identifier:   2C:CA:79:74:EC:4D:E3:2D:44:7F:94:8F:D8:A6:FF:14:FE:0C:2A:9C
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer:       /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial:       01962F74360BF29E530F745B4AB18F562EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number:          05B9
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: whPV3F3vmK7WRmthdifC+VEZT89B5oLXjOwkYE0otVA=)
                          2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:0b:f2:9e:53:0f:74:5b:4a:b1:8f:56:2e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=2cca7974ec4de32d447f948fd8a6ff14fe0c2a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:17:6b:b8:8b:42:28:f8:e8:29:73:fc:81:
                    f9:3c:14:61:0a:3d:c2:37:9f:b2:08:90:da:8e:af:
                    6e:e0:9d:b9:b6:08:6e:73:3e:5e:88:08:2c:e8:03:
                    b4:b6:ef:5e:07:96:3e:03:3d:db:33:2a:5b:65:2a:
                    e6:7c:0b:98:bc:18:7c:11:a2:98:67:6d:30:18:84:
                    a3:7c:4a:64:36:ca:cf:a9:63:f6:dd:c6:ec:fe:d9:
                    19:45:fd:15:4a:e2:c7:01:0f:c2:9a:b6:50:ae:c2:
                    ea:5b:11:5c:35:e3:ae:f1:ed:85:d6:22:e7:bb:d9:
                    3a:9e:da:99:9e:3a:24:5f:6d:70:9b:90:69:30:a9:
                    d6:c0:c5:cb:16:5d:7f:31:52:81:0f:6f:0a:05:72:
                    e8:34:db:af:d5:1d:a2:9c:3f:fb:20:d8:fc:50:47:
                    29:f4:5c:97:17:23:8d:49:48:a4:cb:c8:38:a9:06:
                    b7:cc:15:4f:52:e2:5e:93:9f:1c:9a:22:4a:da:99:
                    1f:35:f7:b9:54:f0:c5:50:0a:ad:8f:e7:e7:a0:e1:
                    03:01:31:8a:75:8a:2d:00:d2:f1:ee:20:67:37:00:
                    62:bc:f8:f7:b9:a3:95:49:22:1d:fa:44:a2:25:db:
                    dc:36:cb:42:51:7a:49:98:04:d6:01:70:4a:ba:bc:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:79:74:EC:4D:E3:2D:44:7F:94:8F:D8:A6:FF:14:FE:0C:2A:9C
            X509v3 Authority Key Identifier:
                keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:61:ee:89:bc:7f:5a:c7:33:c1:13:49:11:d0:2a:aa:03:65:
         b9:db:76:16:a8:46:85:37:62:41:d1:97:7f:db:56:7f:99:2b:
         9b:bc:04:98:af:6f:ed:e4:b1:82:80:01:d5:4a:b0:5b:73:f9:
         c4:28:0d:c5:d6:63:d8:a8:57:b3:4e:83:76:88:5e:26:f2:d7:
         64:32:dc:50:c6:6a:64:a9:c3:42:8e:90:41:51:32:1c:9d:be:
         17:46:d3:00:b2:0a:7b:87:46:68:3c:83:eb:2d:07:ed:38:c1:
         3c:7e:47:8c:cb:d0:c5:97:d9:77:e9:5f:76:c5:7f:7a:33:ed:
         a7:df:35:49:b1:f7:49:6e:1c:e6:f8:af:f0:9a:8c:b2:f0:39:
         43:84:59:f5:9b:26:92:73:17:49:ad:e4:18:91:12:8f:c2:7b:
         87:ed:f3:a9:c0:a8:a7:2e:ea:73:ad:a5:3d:a2:f5:ff:43:16:
         eb:bc:52:dc:2e:2b:0a:8e:56:81:32:de:c7:30:e8:5e:3f:f5:
         1e:65:53:34:5e:aa:15:32:13:94:b6:6a:36:84:ff:d3:6d:a5:
         92:db:48:83:e8:4f:9b:3d:6e:02:bc:b7:e5:d2:1f:f4:3f:d4:
         99:3c:58:a8:d4:63:d8:18:da:37:62:52:67:09:79:94:00:02:
         55:1d:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----