Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File:                     88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier:          Jro336zlJqHBbWxEQN6vd8sOjC91XSOUB1KAZVD/TG0=
Subject key identifier:   9E:0E:24:1F:D9:34:B9:B3:B7:75:C5:F7:10:B0:F0:3D:BC:77:EA:4F
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer:       /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial:       01962E61FA501B7CE057F6CE32A466B0B987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number:          102E
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: qDxSs7tn+EuWkRb7I5JX0XsflEselOThowlPZs42hQI=)
                          2: uhzHg_0oTjSNISZWz69g2JwlZBI.roa (hash: SYDZB0vXv8S1CegMsOsTpWapvWlbrYaUA5uYqL/hcv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:50:1b:7c:e0:57:f6:ce:32:a4:66:b0:b9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=9e0e241fd934b9b3b775c5f710b0f03dbc77ea4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:3c:fb:59:8d:56:45:0e:6e:de:ba:3d:32:
                    16:8f:75:dc:d6:39:47:28:64:05:d9:14:bb:d9:92:
                    e4:cc:ed:ad:70:5a:66:34:4b:9a:4a:ef:09:aa:14:
                    97:d2:c8:b3:c8:16:37:c0:d2:19:c0:80:dd:59:6a:
                    75:3c:cb:27:e3:6a:3a:f1:a5:de:3b:56:00:77:5d:
                    0e:e2:b8:d6:35:a6:d4:5a:ef:7a:f6:cc:8f:c2:16:
                    25:17:ad:55:d7:d4:59:6b:21:ea:d7:91:e3:38:12:
                    49:4f:ad:3f:38:1d:cb:85:f3:29:4d:57:74:e3:21:
                    38:e5:f6:c3:38:f3:56:65:b4:09:7e:e1:45:ce:29:
                    e5:00:d9:d8:fc:01:a2:8b:63:4a:d2:b9:2d:03:04:
                    7c:94:22:fa:6e:be:6c:57:41:71:90:59:08:8b:ca:
                    ec:8c:9f:a0:e9:c8:ac:69:b8:4e:d2:89:f4:49:e4:
                    6d:a4:10:36:f9:c6:cf:6f:37:39:60:64:1f:d6:0b:
                    34:22:6c:d5:66:49:76:e7:f9:70:6d:f6:2e:84:f8:
                    61:94:74:55:49:de:e8:e8:8d:d2:fb:18:bb:a5:cd:
                    99:54:1d:ee:3b:ca:9d:a7:cd:80:c0:85:cf:34:5f:
                    6b:ae:89:b0:19:c0:10:35:ae:e1:8f:a6:91:bd:ed:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:24:1F:D9:34:B9:B3:B7:75:C5:F7:10:B0:F0:3D:BC:77:EA:4F
            X509v3 Authority Key Identifier:
                keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:8b:18:1c:2f:a5:e1:1b:95:35:18:f5:d3:6d:d4:30:81:
         e2:d0:3e:52:d1:96:a7:1f:c5:e9:80:e3:6b:49:13:a7:52:dd:
         93:00:f2:d5:7f:99:de:88:61:03:95:56:0d:0d:a9:70:0a:93:
         f0:d2:4b:13:66:75:38:0f:ea:8d:c9:e1:4b:90:e3:2b:b6:21:
         fd:64:7f:c7:04:9c:2d:1a:31:8b:48:c5:83:c7:2b:29:a1:46:
         5a:57:3b:5e:03:66:a5:7d:32:d6:02:29:83:e1:d5:28:20:a4:
         93:a2:7a:eb:ab:26:f7:c5:3a:76:d4:18:46:95:8f:fb:70:cc:
         2e:bf:54:49:cf:a2:eb:dc:8b:75:05:77:15:ab:2d:c3:2d:ef:
         01:ef:54:c3:54:0d:13:ab:5d:9e:fd:55:b9:63:04:dc:25:f6:
         d2:e5:5f:3d:7d:31:57:2d:ad:dd:e4:65:58:ac:b6:f8:d7:5c:
         13:7a:03:30:ac:6a:cb:6b:21:91:9b:da:d0:2d:62:67:3a:5f:
         f8:19:fb:91:ad:c4:25:1b:70:22:60:85:f4:fa:47:87:69:ef:
         3f:63:84:9f:71:0e:d4:79:0d:c0:3d:5f:d3:46:1e:fe:d8:43:
         13:e9:2f:99:48:0d:cb:fe:37:9f:a4:97:9e:f3:49:d9:e0:b4:
         97:1e:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----