Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File:                     qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier:          Zk0JPexC0XXFLvXGW7J8GaPp08249sdhx66MVFZEdjc=
Subject key identifier:   EA:62:A7:94:18:E4:68:82:C8:B4:D4:CE:E1:B9:E8:96:53:B1:BD:09
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer:       /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial:       01962F3D59361B67F471D501187415C2D76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number:          B9
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: EAG1x3XO5TkwCP1HWHiPb4/gmDLqV3Y/uHFZBGZIwXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:59:36:1b:67:f4:71:d5:01:18:74:15:c2:d7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=ea62a79418e46882c8b4d4cee1b9e89653b1bd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:0d:33:9b:36:74:9d:9f:03:96:50:42:be:
                    b0:8b:9a:45:e9:e3:e2:12:17:7e:bb:63:e8:d3:ae:
                    5f:7b:89:ba:30:c1:29:83:f1:dc:97:6d:16:f8:05:
                    9d:4a:e2:52:c5:36:61:7c:f1:32:b0:2a:a6:86:78:
                    c0:27:55:94:df:44:cc:4f:8f:db:c3:20:bb:53:5d:
                    58:be:bd:bd:46:13:20:70:d2:a6:a5:7d:b9:b9:9e:
                    44:5f:7b:b3:8b:c3:f2:cd:b9:e3:bc:89:bb:37:4d:
                    99:81:4b:29:95:34:87:80:e5:81:ec:12:ec:7c:28:
                    47:34:36:d9:34:fc:3f:2b:8d:c0:78:2f:9c:36:88:
                    05:0c:a6:57:82:46:4a:a1:b1:b6:37:98:87:5a:f8:
                    36:22:e0:7b:f8:aa:ca:2c:9f:fa:bf:f1:31:fe:c0:
                    86:fd:74:b1:35:8b:aa:80:cc:12:41:b6:82:e7:77:
                    f7:99:93:ab:21:d6:79:22:36:91:4e:02:b6:ee:2d:
                    1c:9d:30:e2:6b:45:00:c8:68:71:0d:9e:bf:54:74:
                    e9:99:94:b8:a5:58:9c:df:f9:ae:d7:08:be:ba:f7:
                    13:d7:61:fe:2d:8b:b9:ef:a6:7b:82:10:1b:e3:5a:
                    89:04:53:79:53:4f:5b:76:be:64:ea:3e:cf:67:c6:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:A7:94:18:E4:68:82:C8:B4:D4:CE:E1:B9:E8:96:53:B1:BD:09
            X509v3 Authority Key Identifier:
                keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:92:ca:de:71:4d:18:9c:72:a9:2f:7d:2a:ce:3a:43:aa:
         85:2f:8b:40:27:7b:09:de:d6:ff:65:0c:f4:17:76:a5:4f:0b:
         a4:56:53:ba:81:25:d6:87:2b:11:29:70:a9:59:a4:d3:29:28:
         69:62:91:80:8d:47:d8:19:26:f8:60:8f:01:d7:da:03:0e:5e:
         e4:6c:ef:1c:00:64:d6:89:6a:62:81:4d:33:a5:32:82:50:84:
         9b:87:f9:bc:37:33:a4:b7:e7:0f:5d:a2:3b:c1:b5:ea:8b:a5:
         76:2a:a1:13:d7:5d:28:0c:37:54:90:b4:4f:78:06:37:60:e4:
         f3:04:73:7d:7d:09:e2:2c:f2:75:34:d9:7b:99:5b:1c:62:71:
         32:9c:60:e8:88:88:13:53:82:1b:65:aa:a2:41:7a:be:ad:7c:
         bd:d9:9a:a1:54:b0:33:04:9f:07:5f:d3:5e:1f:9f:9d:49:0a:
         5a:7c:a3:2b:1d:cd:e9:d3:c4:a6:af:79:79:8e:74:dc:b9:71:
         8a:bd:9e:2a:81:94:58:47:31:be:8d:d1:1e:1e:f4:68:14:12:
         91:40:a0:44:aa:70:19:64:13:da:db:35:36:98:bd:4b:d7:86:
         7e:51:f9:df:74:7b:88:15:9a:76:b3:db:3a:72:71:5a:9f:bb:
         ae:02:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----