Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File:                     qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier:          BeubSiM8NUYiOauC8G5NUX1TSnMCsPEFsA9YFgIzZGc=
Subject key identifier:   23:E7:A8:14:13:8B:34:AE:1F:AF:8D:E2:F6:D8:63:48:F9:AE:4F:1A
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer:       /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial:       01962F3DCE5DA28032B555ABB955A91E3DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
                          2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: asr3T8q+nfITshWHULES7Xf+RcC8Irk7svr9m2hkoeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ce:5d:a2:80:32:b5:55:ab:b9:55:a9:1e:3d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=23e7a814138b34ae1faf8de2f6d86348f9ae4f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:72:1d:87:5c:b3:ee:cd:c0:f3:f4:4b:25:
                    e0:df:23:9d:75:7f:85:bc:59:60:e3:69:21:dc:73:
                    d7:3a:64:23:56:14:74:38:f1:a6:3f:4d:e1:eb:18:
                    7f:40:4b:99:d8:bf:ec:55:05:51:8a:bb:89:92:f5:
                    e1:41:b0:c1:94:2c:d3:e2:86:b5:3c:c0:a5:69:92:
                    50:39:f6:45:73:9d:29:41:5e:03:23:7e:6e:be:02:
                    ba:3b:22:f0:ce:6a:5d:9d:98:ef:31:2e:2b:b0:a7:
                    8b:2f:21:6b:14:3b:a4:44:3b:30:55:5e:03:99:89:
                    97:8f:c1:e6:b0:55:ba:9e:9e:4c:ab:a2:d8:e0:68:
                    ea:69:77:5e:99:4c:a7:82:4f:42:37:e0:6e:7a:d9:
                    49:55:3b:30:0d:33:41:dc:bc:56:b4:68:40:21:7d:
                    31:1e:69:6d:4a:7c:94:c4:81:58:3d:3c:8d:a6:df:
                    b7:e4:34:c6:b1:dd:89:03:74:44:f3:5f:24:c8:86:
                    3f:d8:2d:93:4e:f0:e1:a1:d7:c3:97:18:be:fd:20:
                    8e:29:65:a2:b4:8c:a2:54:9a:f9:66:7d:09:fd:c2:
                    6a:6e:d8:51:61:83:73:15:b0:5f:06:72:44:b5:6a:
                    d2:bf:e6:d4:33:34:74:6a:f0:8a:05:1b:d8:8e:d4:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:A8:14:13:8B:34:AE:1F:AF:8D:E2:F6:D8:63:48:F9:AE:4F:1A
            X509v3 Authority Key Identifier:
                keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:bb:98:75:c7:40:df:a5:db:a4:32:4b:7d:e3:41:fb:fd:
         96:96:ce:ba:2a:fe:f1:6e:b0:33:1a:d5:e3:45:66:cf:52:7d:
         00:4f:f4:e7:5d:ac:6d:07:b5:56:d3:94:db:43:9f:4b:3d:36:
         82:17:ee:cd:e8:41:61:94:24:d8:1c:92:2e:b2:32:38:1b:38:
         d7:29:09:a8:e4:59:5e:51:b0:4d:c2:1e:ba:77:45:44:c3:5e:
         ca:42:19:64:67:ee:c3:6e:d5:d2:1a:07:7b:3c:eb:d4:6a:43:
         b5:bd:ca:00:e5:e1:da:43:ff:df:a2:b9:9c:f1:bf:86:5a:e7:
         3f:75:ae:a1:ce:f5:27:90:55:11:10:92:ce:9b:0c:ff:4f:0b:
         c8:b4:e6:f8:13:0a:07:a5:be:0a:08:9b:e4:28:7f:75:7d:2c:
         e6:fc:c3:c5:22:e5:b3:1f:08:e4:ba:c2:3f:11:70:da:12:29:
         eb:b6:12:9d:00:0a:30:81:84:aa:42:89:cb:34:5b:f4:a9:fe:
         73:4e:43:2f:6b:44:da:5a:85:60:c9:1f:64:5c:ab:51:fd:bb:
         bc:3b:2a:9b:66:6f:ed:e4:c0:88:15:c1:0f:b1:84:71:31:5b:
         1d:43:df:7b:96:e6:8a:5e:5f:fd:58:58:a7:0a:1b:f8:0e:f7:
         10:df:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----