Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File:                     ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier:          2vgakaONajPXKvmh1EBnDG5NZaHmPlOYYsa6TP3jOTs=
Subject key identifier:   8C:99:B8:53:0F:BA:AB:8A:70:D4:F5:2E:9E:BB:92:DF:15:87:08:A3
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer:       /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial:       01962DF416C2B861BCED5734636211D58512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number:          0B5B
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: HUcCvL/etGKehaZcUaR85xNSSp52pvOh9+I5EiHe97k=)
                          2: iqTl4BIzOojgsD_Wimn0FwnJtEM.roa (hash: 3DGwbK08inzQ4rExkDlqu5OQopsFOPF3AI5Z6YQHb4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:16:c2:b8:61:bc:ed:57:34:63:62:11:d5:85:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=8c99b8530fbaab8a70d4f52e9ebb92df158708a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:36:70:f6:30:ac:55:c0:91:9d:3f:fc:68:
                    29:8c:ee:f3:b3:45:6a:01:75:ac:95:3f:7b:9b:f5:
                    09:80:b6:d2:50:4f:3e:ba:84:1e:b8:aa:9a:7f:0c:
                    1c:16:f8:ff:35:e9:23:13:bb:fd:5b:99:27:b2:2e:
                    f7:87:f5:db:e5:73:9e:0e:c2:bc:8a:5f:30:86:6e:
                    0e:f0:b7:e1:94:69:09:52:93:51:c8:02:88:bf:a4:
                    14:e3:85:38:ad:18:3d:b8:83:65:57:ba:f9:b8:51:
                    f7:08:a0:05:1e:97:d1:37:a8:be:f8:fd:89:87:60:
                    16:2f:18:ed:28:58:67:49:19:b6:fa:4a:08:89:cc:
                    68:9e:14:70:5e:cb:61:01:9e:25:9b:05:dd:92:be:
                    e6:53:e6:cc:6a:b3:b5:3d:2f:2f:5d:67:e1:31:dd:
                    32:c9:d3:07:80:ac:c7:fc:a9:9b:b9:ae:80:78:ab:
                    e8:5f:74:3e:e4:11:00:04:27:95:af:13:7f:af:ea:
                    46:a4:e9:8c:02:74:06:4e:86:e5:55:ac:05:12:e3:
                    4a:79:06:83:26:98:dc:00:3c:3d:58:d8:6a:c9:54:
                    0b:07:32:23:ed:b8:8c:8c:7a:21:be:2c:b0:40:1a:
                    e8:4a:42:4f:ee:82:bd:47:66:5c:be:2c:34:2a:11:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:99:B8:53:0F:BA:AB:8A:70:D4:F5:2E:9E:BB:92:DF:15:87:08:A3
            X509v3 Authority Key Identifier:
                keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:43:f0:7f:50:50:4f:ea:ff:9b:d6:42:04:6f:13:e2:05:14:
         02:43:f1:f4:96:5c:4b:53:7a:bf:e1:eb:5d:b8:6f:b3:2e:85:
         4c:db:5c:81:4b:ab:86:81:c8:b2:88:03:f9:72:9c:53:6b:49:
         89:0c:af:d9:84:1a:5c:55:aa:a8:5a:86:7a:54:ee:98:14:e1:
         0b:1a:b8:80:9c:bb:ca:5d:a9:2b:f9:af:3f:e3:f5:2c:66:a1:
         c6:ce:a2:12:89:0b:37:ed:fe:16:09:d6:f1:e0:a4:f2:b9:86:
         da:c2:c7:2e:14:e7:ba:99:71:54:9c:f3:df:0c:d0:e9:f1:f8:
         d0:47:9b:d0:b2:85:f9:1d:2a:19:f3:9d:4e:06:7e:fe:f3:51:
         9b:7e:54:bd:c3:5d:03:54:88:54:bb:0b:ea:93:5f:9c:46:25:
         eb:ec:33:06:64:c8:d3:0f:f4:77:fe:b3:4a:7b:ca:72:8a:2e:
         79:ea:b2:55:9b:d2:e8:22:7b:9d:e7:26:cd:84:da:72:b5:e5:
         8f:45:23:0a:5c:f5:5d:9d:5a:de:00:26:58:2e:65:12:f1:a1:
         a8:05:de:22:7a:e3:8b:f8:d3:70:c0:55:33:20:ef:5c:b2:c7:
         9f:0f:7a:0b:ea:de:bd:c0:72:d1:e3:60:e5:f0:1d:a6:93:cc:
         17:fc:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----