Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File:                     sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier:          eYtWKTlP7IR/TCl2FMkS/AHfyNL1E7M1OZIzrZcdz+E=
Subject key identifier:   2A:FA:60:AC:3B:25:6D:D7:74:75:32:E6:3B:8C:59:F4:C8:1D:BE:92
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer:       /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial:       01962F7481ABF23FC34F6E6CDC632B006AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number:          0D02
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: lltEosiTAhjD5ORO/m56D5cHPtWvtjFo/evBU1nP5w4=)
                          2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:ab:f2:3f:c3:4f:6e:6c:dc:63:2b:00:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=2afa60ac3b256dd7747532e63b8c59f4c81dbe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:7f:00:37:b2:d4:38:5e:51:30:96:89:6b:
                    ff:ad:a2:3d:a6:8a:01:d8:c2:cd:ad:5f:6a:97:5e:
                    20:a1:b6:cb:cc:f6:9a:b2:3f:08:cf:2a:5f:0a:ad:
                    a9:d4:69:1b:cf:64:57:29:30:b1:75:e0:81:ce:3a:
                    c7:0c:bd:33:2a:3a:0d:5e:7f:ea:2b:24:dc:01:ae:
                    98:5f:41:83:73:bc:f2:57:6a:ca:5f:3a:4f:26:00:
                    51:e1:4f:11:8c:dc:12:69:37:fd:38:82:d7:d3:07:
                    4b:dd:0f:29:60:7b:70:cb:39:82:af:6c:61:a2:93:
                    e7:b0:5d:26:17:07:a1:eb:79:70:05:0d:23:dd:5f:
                    21:b0:b6:8f:ac:61:0b:89:eb:a7:1e:26:4e:60:bb:
                    50:d2:1a:59:ca:a5:a5:0e:7e:4d:02:46:fb:e9:1f:
                    91:a6:57:21:f7:ac:53:ea:6c:52:57:11:09:25:41:
                    2f:8e:95:84:04:99:30:05:07:74:6b:f3:d1:9f:7b:
                    71:a3:c2:b8:22:23:50:82:db:70:3e:e1:46:ce:9f:
                    e4:0a:2e:19:6e:73:a5:4f:5e:53:34:ce:f7:5b:72:
                    33:50:37:33:2a:d8:5c:ac:a1:f6:33:ea:14:51:b3:
                    91:f2:73:f2:f2:f1:9f:4d:3a:bc:2b:2e:38:d2:94:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FA:60:AC:3B:25:6D:D7:74:75:32:E6:3B:8C:59:F4:C8:1D:BE:92
            X509v3 Authority Key Identifier:
                keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:65:4c:65:ff:47:d2:8d:ba:3a:f3:65:77:09:9e:72:f4:
         8d:66:c1:67:cf:87:b4:f4:44:8d:f0:d1:d6:25:09:08:42:f2:
         e3:62:a7:ae:24:fa:96:38:88:a8:40:b9:1f:34:89:0f:ad:b4:
         d0:cb:b1:f0:8e:a5:8e:4b:82:0a:9d:6f:4f:1f:df:1c:f9:d8:
         90:98:07:ea:d4:d9:01:a8:23:91:93:bd:9d:b2:03:3c:6c:80:
         93:ff:f0:62:81:9e:4e:3c:ca:f4:d5:d3:fd:fb:7f:dc:29:e3:
         73:6f:51:f4:8d:fd:53:92:e0:c5:dc:dc:92:5d:37:5b:78:d0:
         8c:e0:79:97:c0:e9:dc:37:9d:2c:81:4b:a7:f6:67:40:d4:48:
         ca:04:22:a6:72:4a:f2:76:23:59:41:82:0a:b5:02:22:86:7c:
         19:c5:a3:d1:26:66:5a:7b:cf:24:86:7c:b1:d7:cd:9e:98:ab:
         6d:2e:56:9c:20:f6:c4:3f:05:c1:58:29:fd:b4:fe:63:4c:92:
         a1:20:26:54:30:6f:36:58:55:bd:1e:4f:08:0d:95:56:f4:6d:
         80:08:ab:5b:67:23:47:a1:e3:22:15:61:f0:65:16:b2:2d:5d:
         62:01:ec:8e:05:03:63:fd:de:19:88:9f:4a:41:dc:db:af:87:
         30:db:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----