Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
File:                     q0U2TkncOhW-_yacOjKzwFQci2Y.mft (raw, json)
Hash identifier:          1v5UmrG8iJjoctDBl6AX4ExMH4X9jNmPY3Si6LRihVI=
Subject key identifier:   31:12:D3:AA:D4:75:E4:1F:D4:21:26:FF:90:DF:71:C2:49:AB:26:32
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Certificate issuer:       /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial:       01962ECFA1288FBDCBCC1FEF558AB8796123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: Diq6O5ga68_B8MEC7x3IDqn6lbc.roa (hash: r+Ep1MU6KZ691K575NCgrIa7fSiICzMjhV/0OlU71vU=)
                          2: q0U2TkncOhW-_yacOjKzwFQci2Y.crl (hash: xLJo6la5HuUoCw2MusnaPKocZKZwJDKIYQ/tAzCK554=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:28:8f:bd:cb:cc:1f:ef:55:8a:b8:79:61:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=3112d3aad475e41fd42126ff90df71c249ab2632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:c4:c3:bd:58:2f:71:a2:b5:3a:7f:af:ed:
                    93:fe:c6:8c:fa:71:9d:05:bc:67:46:ec:b1:4e:0b:
                    14:46:cd:6d:4e:a5:ff:77:ba:00:52:b4:56:45:88:
                    ee:a9:66:22:a5:aa:e0:5d:79:a7:ca:e2:d5:8c:cf:
                    4b:ca:4c:a4:32:e2:4e:2a:5f:3d:40:54:3d:92:fb:
                    07:3d:b7:46:41:bf:6a:cb:f8:ef:0a:08:d0:72:ee:
                    f4:57:aa:f2:f5:73:7c:f3:93:9a:16:d5:e2:b6:48:
                    3f:38:af:62:51:23:47:cf:4a:81:7f:67:eb:86:4f:
                    19:7a:32:6c:62:02:83:fa:2e:cf:f1:b0:1d:ac:45:
                    8f:b4:3c:0d:da:ca:5d:73:4d:88:e3:1b:7a:a5:ff:
                    e7:85:71:0e:27:5f:d6:16:50:3e:b5:2e:cd:49:0e:
                    7e:25:ed:5a:34:34:94:bd:2c:4c:ba:2f:60:f7:ce:
                    46:ad:f2:6e:04:2a:b6:8d:cf:8f:a3:77:e8:9e:a2:
                    a9:28:38:97:5e:74:05:e4:4d:cb:1c:bd:10:9c:54:
                    bb:38:1b:e6:69:01:1b:3d:e2:95:c2:a2:eb:31:17:
                    5b:a7:ac:2b:a6:23:98:6c:00:98:9b:ed:3e:50:0d:
                    5c:b6:6d:3a:da:90:77:9d:f4:0f:2b:2e:c3:92:42:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:12:D3:AA:D4:75:E4:1F:D4:21:26:FF:90:DF:71:C2:49:AB:26:32
            X509v3 Authority Key Identifier:
                keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:da:3e:b2:99:4b:14:42:1a:de:e5:e8:38:ed:0d:12:80:
         01:e9:c8:e1:c8:95:0c:53:21:c7:d5:5a:f3:c1:1c:fe:c8:e3:
         24:fc:5c:32:b3:e4:d5:c3:8d:e2:4f:4a:20:93:83:4e:cb:07:
         c7:15:c4:02:7c:72:0a:75:ee:00:d6:70:0f:02:9c:de:aa:de:
         12:dc:ef:67:29:ac:90:c6:46:66:7f:a5:d4:d9:d9:7a:20:87:
         0e:10:f7:05:81:10:b5:7d:03:ba:89:f9:3c:11:16:0c:00:eb:
         b3:33:3d:ed:74:1f:77:bd:3c:e6:47:98:40:72:8b:02:32:f0:
         6c:80:7a:b6:56:3a:e1:01:56:e0:19:9c:80:9c:bf:86:92:df:
         ab:d2:99:55:a6:7e:f7:3b:9d:8e:80:a1:d7:46:81:f2:13:47:
         64:d6:82:4b:e8:73:4d:02:38:0b:fa:4b:00:34:06:b4:ee:15:
         e8:61:96:81:d5:57:c9:ab:00:19:8e:d6:86:3b:53:52:6b:de:
         8e:d6:a5:d3:dc:2e:fd:e8:8c:98:69:7f:9f:5a:44:62:97:4f:
         66:29:d5:eb:1e:24:a2:6c:d9:43:0f:15:c3:99:f5:ff:1a:9e:
         2b:82:13:fa:c4:88:5f:ff:05:5b:28:5f:7c:ea:2c:5d:65:29:
         cd:ef:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----