Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          A+RF6v0raKhsKYRcRh5u+wTEO6epDOWEwHjtuLN1Whw=
Subject key identifier:   7B:55:B5:CB:D8:B2:EA:05:BA:19:84:7F:57:C7:F8:D9:37:62:6A:52
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       01962E2B015E6DF3781E1C448E4214176F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          067D
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: dgNfIPSl7I3seYpapQM4OSOJkn3kTbAcyTqChojdw3M=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:5e:6d:f3:78:1e:1c:44:8e:42:14:17:6f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=7b55b5cbd8b2ea05ba19847f57c7f8d937626a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:27:ad:4c:cf:0c:2f:c0:c0:0e:a5:22:da:
                    83:56:12:ef:fd:4d:04:24:40:5a:4c:0f:4a:7d:83:
                    5b:d1:56:c7:66:80:a6:61:48:a9:b5:35:2f:e0:a3:
                    54:3b:3e:ec:27:b8:d5:77:8c:80:ff:6e:85:ab:87:
                    0f:ea:fb:a4:56:fc:49:5d:a2:d8:44:6d:14:48:ee:
                    e6:99:68:1e:36:45:5a:50:c9:27:02:2d:1c:40:74:
                    c1:dc:9f:16:6c:b1:7e:51:ff:62:b1:e5:e1:9c:b9:
                    21:ce:46:a7:1b:77:f8:e2:71:7a:07:83:3a:4a:76:
                    22:a0:f3:7e:bd:d8:c0:4e:37:ba:7f:b6:db:cd:60:
                    26:73:46:b5:80:48:3d:6c:5b:3e:f9:d9:ff:bd:91:
                    84:a8:15:1c:a1:44:d9:48:7a:58:8d:dc:bd:32:70:
                    9e:1d:6e:5e:03:88:e2:3f:2d:e4:16:6b:46:a4:66:
                    c5:59:ef:09:55:2d:2b:1f:17:0f:01:f5:31:94:f7:
                    fa:9e:60:0b:51:7f:a9:06:7c:7e:ca:fc:3c:3a:78:
                    65:9c:05:75:ce:95:1c:89:5b:fd:4b:a4:1f:00:e0:
                    c8:50:91:a1:f1:80:a4:73:25:4c:54:07:70:8c:0e:
                    52:56:c4:57:1a:02:4f:5e:fe:42:d4:ce:2e:ce:59:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:55:B5:CB:D8:B2:EA:05:BA:19:84:7F:57:C7:F8:D9:37:62:6A:52
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:09:ca:2a:52:06:4a:e6:18:26:fc:cd:5a:e9:1a:b4:c5:e4:
         d1:d3:4e:b8:5c:8c:2a:e3:3a:f0:fc:93:52:36:f5:12:82:2d:
         fd:a1:9b:5b:f4:1b:fa:51:d1:dc:9c:0a:bb:9f:18:3e:8e:40:
         d2:8a:e5:d2:f2:21:9d:2f:6d:0a:00:8d:de:11:0e:8b:a1:5f:
         bb:e9:a4:64:99:df:ed:44:92:97:7b:f2:fa:07:7f:e1:83:cd:
         ed:df:30:6d:3e:89:67:c8:06:3d:d6:23:96:3d:51:ce:13:6e:
         17:bf:3d:50:59:1d:7d:b8:45:88:76:3b:42:37:4f:63:7f:5f:
         75:3f:4a:c4:02:60:93:69:df:8e:42:9f:c8:69:cb:5a:a8:66:
         97:ca:a2:9a:59:ec:f4:48:53:3b:21:28:b5:db:95:35:5b:95:
         ab:4a:fb:4f:56:58:f3:59:e9:82:71:98:74:f5:d0:33:a8:82:
         35:08:8e:40:82:ea:2a:43:4f:8d:62:25:0a:1d:a7:b6:7f:4a:
         2c:8c:1a:85:cb:67:c6:b1:4a:02:a0:21:cc:ec:18:5e:0c:59:
         1a:9f:8d:3e:26:3e:46:85:7d:64:8a:94:a4:f7:30:20:c2:91:
         78:7b:93:9f:5c:c5:1f:80:06:41:22:e1:42:13:01:d1:24:1f:
         1f:b5:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----