Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File:                     qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier:          nIpN4xObtAs6j1LQ/ezc8vP+9bgoS0fWA6NhUIMCf5M=
Subject key identifier:   97:CB:56:DE:47:71:95:87:F4:9E:5D:F9:89:CB:ED:67:13:50:EC:31
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer:       /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial:       01962E2AC5C5214BB381128A2A424EBFE1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number:          0BDF
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: l4rTibufRSBBi18mb06C4kjrzoeA6eOt0YKdR3/2/2c=)
                          2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:c5:21:4b:b3:81:12:8a:2a:42:4e:bf:e1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=97cb56de47719587f49e5df989cbed671350ec31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:bb:dc:7a:16:c7:3f:2d:fc:17:9c:6b:62:
                    f9:e3:92:4c:9e:74:b4:92:02:e1:50:55:9b:19:94:
                    a3:93:b8:83:26:bc:71:70:f2:8e:eb:c3:28:bf:45:
                    ac:ad:6d:cb:a9:7b:aa:e2:2b:af:42:9b:a1:68:5c:
                    57:dd:ef:39:92:4e:3d:87:7e:62:ba:b7:6d:b0:ef:
                    e2:51:17:01:cb:b0:36:a5:5c:45:7e:b7:55:a2:cf:
                    ae:9f:93:7b:06:3d:3e:17:c8:63:d6:a8:21:ee:8c:
                    d1:bd:fc:ed:3e:22:a0:40:af:25:e8:32:6f:39:87:
                    89:fb:1c:51:14:1e:6f:75:1c:46:e9:7a:70:5e:24:
                    e5:56:63:30:ac:21:aa:cd:d5:2d:a6:c0:d2:fa:86:
                    f3:eb:40:18:fb:82:f6:08:b1:6d:d5:ef:b0:f8:72:
                    7c:96:58:c0:ba:5e:c9:d8:b4:82:09:f3:ea:88:01:
                    42:b2:8d:ff:0e:d0:bf:db:6f:27:9a:d4:fc:87:29:
                    b0:c9:ff:84:12:8d:48:fb:e8:f6:01:f8:e0:21:6d:
                    99:f7:f6:29:06:3f:e8:89:a4:fb:6e:3d:91:c6:64:
                    a0:b3:03:0d:d4:19:35:b9:5f:7c:26:78:7f:ea:9a:
                    8a:79:0e:cc:19:52:50:0a:67:49:4b:e4:95:50:29:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CB:56:DE:47:71:95:87:F4:9E:5D:F9:89:CB:ED:67:13:50:EC:31
            X509v3 Authority Key Identifier:
                keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:91:56:49:b4:9c:b4:44:c0:e0:1b:82:73:bb:c4:95:42:
         24:32:a4:8c:97:45:b7:19:3d:c4:83:aa:bb:3a:ac:3d:ac:c4:
         c6:d1:aa:05:a1:1b:fa:5a:6b:e8:00:57:c9:1d:54:8e:17:69:
         56:7c:ba:59:d3:b5:2c:40:e1:1a:fe:04:11:d8:f5:68:b4:23:
         03:c5:69:f8:46:d6:b1:9f:e2:d9:d7:63:5d:d3:d0:39:c1:77:
         a4:bc:7f:7b:ef:df:b3:2f:25:ec:4a:53:4e:1d:5c:6b:34:a5:
         1a:5c:44:60:d3:99:72:86:28:8b:c2:52:6f:85:6b:58:c1:05:
         76:0d:8f:59:b9:24:7c:e1:5b:2b:83:19:82:19:a1:95:eb:14:
         a5:ca:d3:12:93:1c:ee:77:60:f5:65:33:6b:d8:30:62:b5:48:
         63:1b:64:03:e6:ac:91:87:c9:96:65:4b:0e:7b:f2:26:ae:3e:
         1c:a5:9a:d8:9b:67:61:cc:9f:dc:fc:d2:e8:b3:7a:fc:37:aa:
         7e:5c:ad:b7:35:60:a0:cc:a8:bf:e2:77:62:fd:44:5f:db:2d:
         9e:5f:48:3e:c3:5f:42:5a:72:83:09:57:23:6e:d2:7f:98:94:
         f9:6a:2b:96:52:7b:b3:49:5e:b0:83:0b:b8:ef:89:32:e2:a0:
         47:a9:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----