Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File:                     KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier:          WbGjz7MvgrZfACpHsqdOUpKAebogBiyRU8G4upJ0Nmo=
Subject key identifier:   8A:87:F3:CF:5A:46:2B:D8:40:02:21:12:1F:2E:50:7E:EC:E2:DD:FA
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer:       /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial:       01962FAB70215FE0E9AEA32022C3EE67EB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number:          03B3
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
                          2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: LlloxUhaXknU9hB+mBszdU2oLMKQQd2i6n4jPYkFk7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:21:5f:e0:e9:ae:a3:20:22:c3:ee:67:eb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=8a87f3cf5a462bd8400221121f2e507eece2ddfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:9f:7b:67:b9:2a:b5:ce:61:18:19:62:4d:
                    dc:4a:9b:8c:2c:ec:2c:a9:f0:99:4c:da:28:00:79:
                    9e:ba:59:4c:75:f7:ed:4f:89:e0:ad:cb:16:6a:f5:
                    79:bc:eb:9d:b4:a9:73:e4:e2:4a:fc:63:dc:97:c8:
                    16:f2:18:a6:bc:04:30:d4:7e:ae:be:25:9f:26:24:
                    5e:6b:e2:54:bc:43:08:9f:95:cd:05:d8:11:b5:cb:
                    b8:32:d7:96:c2:35:bb:0c:a0:87:eb:31:4c:6a:d2:
                    ba:12:77:54:e3:b6:aa:68:85:b2:9a:c8:37:03:df:
                    43:c7:ab:c6:2c:2b:25:59:d2:27:c6:9f:7a:e4:67:
                    fc:dc:1d:d2:9d:e8:b1:f1:b1:7d:a6:a4:de:bb:a5:
                    00:8a:33:2f:99:71:00:11:55:56:b4:39:c3:0a:d6:
                    3d:f0:78:a6:48:93:f7:0b:02:27:3c:6a:17:0a:8c:
                    58:5b:24:6e:27:c5:2b:b2:9d:ee:3d:e3:be:09:42:
                    74:24:ca:88:33:9c:8c:d2:37:16:21:04:fa:9f:38:
                    88:8d:04:21:b5:04:59:b0:fd:97:10:93:21:30:0f:
                    d2:b3:e0:bf:e0:a5:c1:1f:e8:82:5c:d6:b4:f6:61:
                    b7:2f:ac:a7:56:06:bc:e1:af:6f:24:63:cc:c9:6e:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:87:F3:CF:5A:46:2B:D8:40:02:21:12:1F:2E:50:7E:EC:E2:DD:FA
            X509v3 Authority Key Identifier:
                keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d5:2a:21:09:68:88:c2:d8:82:1e:d1:b4:f1:88:d9:ae:8d:
         eb:68:55:8e:fe:b3:14:f0:44:c7:a1:f7:a7:3a:ff:e6:49:99:
         d5:2f:0d:fc:c3:f5:4b:7c:0e:d4:75:a4:22:34:6a:24:68:6e:
         39:a0:b8:95:62:8c:37:c8:ad:cc:d3:8a:32:81:f5:02:11:c8:
         c0:49:e7:a1:75:5c:0d:13:53:6e:5e:44:b7:a5:1e:c7:d7:8f:
         27:10:43:9d:e3:60:1e:04:fb:3d:92:2d:7f:ac:e6:fd:36:56:
         e6:93:95:d1:67:db:37:41:9a:b9:a0:c9:6f:72:5f:76:fe:b9:
         3a:88:0c:41:69:9e:eb:f8:5f:19:01:93:e2:1b:a7:0e:01:28:
         6f:f3:4a:9b:67:20:2d:32:05:65:91:b0:fa:b5:96:7c:bf:4a:
         7e:41:06:35:2b:c3:58:72:a2:ad:04:1c:52:1d:a4:fc:b1:16:
         ca:17:b8:be:4c:6f:dc:54:38:30:12:e2:40:cd:3f:13:e8:51:
         50:f5:d2:26:d0:a5:7e:54:69:85:9c:47:53:40:54:4b:26:86:
         4e:48:a8:15:1e:1c:4f:e3:e9:93:e8:8a:56:98:88:2f:e4:d1:
         20:cf:97:9a:dd:d2:d2:25:7e:18:c3:35:f6:6d:7c:d2:88:d5:
         e4:43:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----