Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File:                     qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier:          t3gCGwl113Mq6DPzHQ7qEp2FL8CDoPA5CXHfezCHhm4=
Subject key identifier:   EF:A8:9B:EB:8E:85:51:B0:51:4A:15:A4:2A:61:74:E1:29:FE:5A:8E
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer:       /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial:       01962E993FEDA64ADFFB6913398007287F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
                          2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: TYTcypLIi+YMFjb2aUA7aAjNIiEONP2QBDTD94F/WJc=)
                          3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3f:ed:a6:4a:df:fb:69:13:39:80:07:28:7f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=efa89beb8e8551b0514a15a42a6174e129fe5a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:c3:c1:f9:ca:f4:69:d1:01:da:fa:10:74:
                    5d:b0:eb:48:06:0c:ec:10:43:38:0f:b4:ad:a5:39:
                    5f:3f:07:f8:56:6f:6d:18:0d:eb:69:43:13:4f:f7:
                    44:80:9a:32:82:71:20:be:5d:29:43:4a:7e:59:4f:
                    fd:11:ab:8e:a9:ca:2f:4a:9d:63:1a:e7:c2:56:2e:
                    0f:ff:c2:62:4e:4e:ea:ba:2e:58:b0:3a:ae:db:a3:
                    78:ba:8d:f8:78:f8:53:01:0b:f3:24:fa:14:b3:6a:
                    aa:5e:dd:17:9c:87:a2:5f:e0:05:07:e9:a9:e1:c5:
                    06:d7:8b:a9:bd:d4:35:ac:4b:94:d3:8f:3a:3c:71:
                    0c:1a:07:01:73:58:89:91:2d:e1:e2:a3:4d:2d:b3:
                    68:94:4c:6d:19:31:46:a6:a1:d8:07:d5:59:58:9c:
                    3d:4b:8d:69:08:f8:0a:ee:03:d5:be:a0:a2:11:04:
                    06:8b:ed:3c:34:50:ab:38:f8:ab:43:7d:e2:0f:a0:
                    fa:cf:e9:45:ff:46:07:21:e6:9d:5e:43:da:46:62:
                    d6:0c:4e:1a:af:bf:a8:8c:45:1a:3f:f8:fe:9c:c0:
                    25:8e:6f:d4:69:df:66:da:c8:81:dc:69:2e:9a:cf:
                    1a:4f:d7:0c:02:bb:5a:dc:e6:2b:cb:25:f3:cf:2b:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A8:9B:EB:8E:85:51:B0:51:4A:15:A4:2A:61:74:E1:29:FE:5A:8E
            X509v3 Authority Key Identifier:
                keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:ea:73:06:4d:fd:c5:4f:f0:54:9f:ce:1d:3e:c5:4e:9b:
         eb:67:5b:47:84:0f:a7:a5:a3:46:1b:9a:15:8d:ed:2a:af:22:
         5d:03:f6:31:30:1e:96:5d:7c:c5:cd:c1:4b:b1:ff:89:51:e8:
         8c:14:60:7d:57:82:83:61:2c:20:f2:df:c7:43:25:3a:51:b0:
         58:0b:66:b5:e2:0a:02:e5:dd:34:64:0f:a6:b8:8e:e3:87:a0:
         b8:f9:d1:65:b9:02:7c:53:ad:ae:7a:a9:5c:c7:93:54:80:af:
         29:5a:9b:c3:8a:a5:a7:e0:37:92:33:21:c2:1b:c9:33:56:60:
         e9:0a:0b:37:85:a5:98:10:e7:3d:47:65:68:20:a3:3b:30:ae:
         e1:ae:28:ce:d0:d4:b2:7d:bd:16:58:2e:1e:64:49:f6:7d:36:
         bf:dd:fd:7c:a4:23:1f:05:2b:8f:02:b8:60:85:9a:47:cd:07:
         5e:62:5f:33:1c:f7:ba:8e:ad:c2:ed:9c:6a:2d:66:7d:9a:2e:
         8a:44:88:f0:4b:28:4a:2d:0c:3f:ef:67:72:0e:f8:ab:26:a4:
         64:33:ca:06:fa:fb:0d:a0:df:d6:7a:4b:11:da:28:7c:b3:b4:
         86:69:97:9a:a2:e2:6c:03:a5:69:30:d4:ec:b5:ab:95:bd:cf:
         21:64:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----