Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier:          FYC90lNVSm+J8tSExw7qqtq0t29DfIgzAaM5Kop0ep4=
Subject key identifier:   9D:4A:30:59:FF:91:8F:12:2A:EE:BB:A9:CC:16:76:6C:6D:E7:22:80
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       01962F3DC72212C9439C93B0FDDABD5A041C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number:          0FC8
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: ptlBJ2mYGYMZjEBh34dgnwliZAPzZASgYNMnrZUCMKY=)
                          2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:22:12:c9:43:9c:93:b0:fd:da:bd:5a:04:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=9d4a3059ff918f122aeebba9cc16766c6de72280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:0c:82:4c:07:34:bf:ab:46:f9:cd:cb:dd:
                    a0:a3:79:a5:26:0f:89:48:5e:51:56:d9:97:81:70:
                    4f:36:74:1a:39:cc:fb:80:32:b7:11:9a:3e:d3:c3:
                    08:c2:b0:b6:54:81:f6:e4:cc:1f:78:64:78:92:eb:
                    18:b2:67:cf:9a:b3:49:14:81:a4:fe:58:4c:89:7c:
                    55:80:0d:16:cb:08:1a:85:8b:1e:49:47:c6:65:8a:
                    da:79:6f:af:5b:ff:50:61:19:db:3b:95:90:54:5d:
                    cf:5b:7d:78:84:1f:fc:51:fe:a2:1b:be:06:b8:6c:
                    b0:a6:5d:05:88:24:49:cb:e0:d5:88:74:2f:4e:ca:
                    5a:f8:68:6c:6b:f9:9d:ee:c0:5c:5e:57:4a:bc:9e:
                    40:00:9f:c6:ed:ba:bb:b3:7c:3e:c5:f4:d5:04:6e:
                    fa:b9:9c:32:84:77:10:9e:ad:62:ea:ee:50:43:74:
                    a2:d3:90:c4:5a:15:15:4a:79:3c:07:09:5c:9a:58:
                    ad:3c:b5:82:a3:ce:af:d6:41:2b:83:a7:59:5d:de:
                    3d:f7:dd:7b:94:8b:5a:90:f7:2a:f3:ad:57:ae:45:
                    5b:49:40:69:7d:d7:91:bc:f5:ab:d4:c1:5e:56:a8:
                    a5:3a:95:20:d0:ef:9d:de:8d:6d:45:76:45:5e:e2:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:30:59:FF:91:8F:12:2A:EE:BB:A9:CC:16:76:6C:6D:E7:22:80
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:30:87:fd:a8:0c:0a:0f:76:e8:73:d9:7b:df:c4:0a:ae:b3:
         44:30:3b:c5:4d:68:85:53:f4:9c:9d:7f:c1:75:11:5a:ab:ae:
         e9:b3:d6:cf:35:b5:83:ff:3a:cc:fc:d3:9e:3c:60:b6:88:cf:
         0d:27:5c:a1:0f:cc:75:ea:f3:19:7e:3e:a2:3a:3b:7d:75:36:
         a2:61:df:a0:38:2f:f8:67:f9:18:f0:5c:19:d8:aa:7a:32:12:
         c5:e0:7e:ee:9d:73:e1:2a:13:27:e0:67:30:9c:1a:9f:84:78:
         7d:89:c0:b0:cb:56:65:72:9a:ec:d6:85:62:ed:b8:44:d6:28:
         fb:75:2b:36:6f:79:5a:1b:78:ac:86:c5:e6:31:b9:c2:b8:a2:
         81:51:30:74:cc:49:0d:f2:93:06:60:33:1f:42:99:b4:32:3f:
         5f:ce:ab:7d:b0:d2:1a:94:dc:8c:47:fb:ab:88:92:b5:0b:23:
         12:42:b1:10:14:17:28:d1:24:d9:f6:c4:82:60:92:5b:f1:55:
         8d:79:bd:51:f4:5d:e7:22:93:b8:a3:31:4b:b5:ef:9c:a9:4a:
         56:78:c6:ec:7c:5a:57:a6:1a:08:3e:19:c0:2e:13:ef:25:25:
         1a:ea:44:90:a5:28:77:22:d5:dc:54:97:96:37:3c:e4:f3:34:
         5a:53:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----