Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File:                     qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier:          fS2xjaQNfC0oQQgUYLwSCCEPyAF+3NO7hkwXCw8UZzY=
Subject key identifier:   D2:D8:A5:F9:EA:35:C3:DC:02:03:54:D8:9A:9B:91:ED:94:66:88:C5
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer:       /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial:       01962E99AFB553D63DC6C475E8E0CEECB0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number:          0BAC
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
                          2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: T+NwBYReKh12cELqvQ+45WOZ2wCpw3BiIP1OsxdPb0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:af:b5:53:d6:3d:c6:c4:75:e8:e0:ce:ec:b0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=d2d8a5f9ea35c3dc020354d89a9b91ed946688c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:b0:8e:8e:7d:aa:db:12:1b:5f:67:d4:f9:
                    58:35:dc:d8:b1:66:ce:c0:26:86:22:90:5f:14:7a:
                    d0:7f:fa:40:82:b1:74:90:f5:e8:b8:c7:67:20:21:
                    87:06:8b:4d:81:88:a5:10:b0:7d:5a:fe:2f:9f:e9:
                    52:5f:33:d2:26:f4:af:d8:d5:0f:f9:23:ab:ff:f6:
                    fa:18:ee:db:3c:db:85:17:e4:12:e2:78:99:1c:ea:
                    0f:5e:59:f6:3a:70:20:3c:e1:99:f7:00:b8:19:b7:
                    10:44:ca:9a:21:09:c4:df:18:ec:c8:7f:e5:ac:b3:
                    e4:8d:c6:ae:74:95:e8:56:3a:0c:08:68:13:54:c0:
                    37:15:74:f6:d8:6c:e1:3a:11:11:8c:51:a9:50:0f:
                    5e:56:89:ff:e0:c0:a6:9c:2d:b3:be:6d:6b:9d:38:
                    f8:29:67:40:d8:d6:63:b8:6f:8c:4b:0c:83:0c:f3:
                    c0:62:05:97:85:66:fc:4e:f3:9b:1b:39:f6:86:5a:
                    05:b6:88:a9:1d:1b:58:ab:9d:4c:d0:df:e9:db:48:
                    be:c5:3c:03:bb:fe:cc:2c:a8:ac:a3:17:03:f8:ef:
                    30:84:4b:68:5d:73:46:f5:9d:fd:41:ff:5e:54:aa:
                    08:9c:4d:73:10:8c:26:96:2d:9d:6a:4e:2a:3b:42:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:A5:F9:EA:35:C3:DC:02:03:54:D8:9A:9B:91:ED:94:66:88:C5
            X509v3 Authority Key Identifier:
                keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:6c:a5:c6:71:4e:4e:a0:ec:d0:41:97:ed:4c:21:e1:ca:
         56:56:37:a4:d1:3c:c7:4c:31:24:92:ce:46:97:fc:0d:71:35:
         3d:7f:ec:24:96:d4:8e:42:68:90:d5:8e:6c:4f:e4:e1:38:d1:
         25:50:a0:6d:35:6d:76:55:af:ea:e3:1a:86:14:9c:55:df:02:
         10:00:ae:60:ce:26:b6:cf:79:de:d1:d6:63:18:d3:8b:4d:78:
         1e:6e:c1:cb:3f:68:df:51:67:75:fd:6f:f6:18:8a:17:80:58:
         ee:cb:89:ac:ad:3c:12:f4:ae:2e:e1:41:fc:9e:b5:b9:4c:77:
         b7:0d:0a:c9:16:34:c0:fa:b1:fd:76:5e:3d:68:55:31:ca:60:
         68:62:f9:84:9d:19:f2:ea:33:3b:b9:03:71:9d:05:ea:3d:1d:
         d6:1d:ee:be:0f:20:cf:ae:5f:ed:9b:3c:9b:a7:5c:dc:aa:dc:
         92:ba:18:57:eb:e7:ac:84:1f:c9:11:24:6e:c9:22:0b:c0:00:
         cd:b9:09:1d:70:0d:cb:87:37:1b:e4:01:cd:7b:5e:15:c3:6f:
         11:28:ad:9e:8b:32:f4:a0:d3:8c:d1:17:f7:b0:f1:f9:a8:69:
         82:3b:85:13:e5:7b:df:95:e0:af:c0:b8:1f:41:30:93:bb:5a:
         5a:01:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----