Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File:                     p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier:          PiCIbJsVuTKX7JUe2ANVwayj74m/0ZGvnRprH939uoA=
Subject key identifier:   A7:85:B7:44:A2:A7:11:A3:58:3F:CD:BD:A1:0D:F4:A1:66:62:86:1D
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer:       /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial:       01962ECF684DCB4CA260DFC721D637C719A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number:          0BCC
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
                          2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: ucfoEol5E23M9MrfI+Kdfnj2k962kiYwZAaJRfVlf3k=)
                          3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:68:4d:cb:4c:a2:60:df:c7:21:d6:37:c7:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=a785b744a2a711a3583fcdbda10df4a16662861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:75:2a:23:07:d9:f8:75:13:dc:ca:bb:ad:
                    9e:e6:11:e4:51:ac:87:46:17:fb:a6:ed:52:72:d1:
                    c6:2e:36:7a:cc:38:5c:71:d2:22:99:c0:0f:8a:72:
                    f1:58:9d:d1:a9:4d:e6:1b:87:bd:88:d0:78:6a:ae:
                    6a:41:99:7e:c7:1b:0e:73:07:fb:6f:a6:b4:53:ee:
                    f8:3e:f6:ac:92:fb:a9:61:7b:02:a3:26:13:82:ad:
                    04:d5:79:cd:4e:d6:4f:b7:e6:7a:af:f3:bd:57:cd:
                    b2:8c:44:76:18:07:10:de:1a:8b:5e:b1:fc:f6:e3:
                    c2:6a:aa:6f:fd:37:2b:df:31:16:63:f7:c3:95:4d:
                    ec:a6:c6:04:df:bd:b7:12:9e:ac:1b:93:65:d5:9e:
                    34:ad:23:c9:ff:35:e0:05:e0:e1:41:0d:3f:35:41:
                    3b:e3:27:cf:7d:01:47:c7:ad:9c:2e:dd:88:24:3a:
                    d4:1f:28:08:ad:47:c3:44:44:43:41:82:92:32:6d:
                    9a:ca:79:3a:23:d5:a4:c4:88:06:25:01:71:9b:4e:
                    22:65:ba:0d:82:46:f2:04:51:a5:5d:47:a9:d4:fa:
                    78:fe:80:a4:4b:cf:91:8b:fc:14:6c:86:69:b8:4e:
                    62:53:69:95:e4:66:19:a5:f5:37:2f:cd:85:ca:d5:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:B7:44:A2:A7:11:A3:58:3F:CD:BD:A1:0D:F4:A1:66:62:86:1D
            X509v3 Authority Key Identifier:
                keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:43:41:34:cc:e0:1c:20:89:92:61:7a:23:27:5f:34:97:
         b9:bd:74:58:b2:67:58:5e:f6:db:66:9c:2f:4d:c1:f0:d8:a5:
         3b:b4:ba:9c:0d:8a:08:65:83:4d:3e:67:34:f1:8a:67:22:43:
         c1:f9:d1:93:f8:1f:da:a5:fa:f8:27:f2:96:65:43:63:bf:3a:
         3c:8d:2f:51:69:02:31:5c:42:4a:3f:8c:dc:f8:8b:95:80:65:
         0b:e1:89:b6:4d:87:b1:21:fd:06:1f:13:b0:5f:eb:cd:f3:f0:
         c6:27:eb:77:1a:48:be:ce:3a:07:b3:2a:2e:7b:81:a4:0a:1b:
         87:bc:cf:5a:7e:a4:be:dd:a3:97:a5:fb:f3:e0:9b:64:1e:28:
         3a:6f:05:10:97:2e:d4:12:27:41:72:16:99:a6:8c:44:92:47:
         86:68:e8:e2:e0:12:7f:67:ba:bd:d4:a3:b2:f2:b0:f1:82:fd:
         2d:00:25:89:18:41:6a:90:7a:07:85:cd:d3:74:9f:95:a7:78:
         12:59:09:ca:9b:1d:b1:e4:ec:fe:26:6c:eb:8b:4a:ad:a6:1f:
         76:91:1f:46:18:4e:8f:63:6c:36:4c:6c:ae:00:3e:67:87:5e:
         a8:26:26:d0:42:ad:9b:25:10:97:d2:12:06:96:99:81:bc:ee:
         9c:f1:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----