Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File:                     pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier:          +oRqYrzCOThXsbarR0g6Qt5+3L5W0RaRaLv9wjeenfs=
Subject key identifier:   84:AA:EC:BF:82:C7:A4:2F:A3:5D:C0:A1:4A:FD:27:5C:5D:E3:D2:D4
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer:       /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial:       01962DF3BC9C89C32E7ADEE913A97C334715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number:          09CB
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
                          2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: 5nlr0EOjkw9UJ0O7SJGjDddLWU6bvLPXXc6a36/aP8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bc:9c:89:c3:2e:7a:de:e9:13:a9:7c:33:47:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=84aaecbf82c7a42fa35dc0a14afd275c5de3d2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:b9:c9:18:f4:9e:98:d9:50:14:4f:07:a9:
                    4f:77:28:97:82:b6:f4:f1:04:be:19:d2:8b:30:fc:
                    4e:de:1d:26:1c:a5:22:9e:9d:d5:ed:b3:87:c7:c9:
                    18:38:e8:a2:2d:ff:0e:43:64:2c:99:d8:6b:d2:6e:
                    1b:f6:10:57:f0:cc:a6:4d:f1:a7:b7:fa:55:ea:a8:
                    11:e5:14:4f:ef:e5:91:ab:09:f7:a8:db:18:98:fc:
                    d4:62:fb:e4:d9:5d:eb:65:fb:a7:62:f8:56:38:12:
                    d6:4f:c5:48:ae:ae:49:27:d4:7c:80:9c:3e:d1:63:
                    29:e9:36:eb:f8:85:e4:1d:92:c0:04:bf:65:a1:d1:
                    21:fe:22:c1:07:6a:01:7b:74:c8:6f:80:56:25:e5:
                    b5:04:61:da:66:aa:a3:dc:cb:d8:7d:a4:81:03:2d:
                    fd:bb:2b:6b:79:42:74:ff:4c:53:fd:fb:93:9f:66:
                    20:02:84:2e:0f:72:f0:e6:90:aa:1d:eb:3c:26:c4:
                    63:46:6a:b5:c9:e0:14:f9:80:56:a9:d0:8d:2f:00:
                    d1:eb:34:a1:e0:14:1c:4e:7b:a2:24:df:54:fb:c5:
                    71:62:55:86:6d:62:34:64:74:9f:96:f6:d3:74:34:
                    33:d0:da:88:65:37:3e:a1:3e:7b:bd:97:4f:ab:3c:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AA:EC:BF:82:C7:A4:2F:A3:5D:C0:A1:4A:FD:27:5C:5D:E3:D2:D4
            X509v3 Authority Key Identifier:
                keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:e0:14:0e:13:31:84:df:1f:2a:42:79:30:9c:66:68:cd:
         f3:7f:72:86:93:68:13:24:08:d7:f1:0f:61:c9:1e:e1:6f:1d:
         fe:9f:78:c5:e0:86:cb:cf:28:fa:f0:e3:db:0e:6d:28:5b:ea:
         aa:5b:e3:e3:8b:92:3b:fa:9b:dd:c0:c7:9c:af:86:0d:df:54:
         d2:e7:26:a5:05:39:b7:ed:68:93:61:19:b1:7f:90:38:23:41:
         09:fa:bb:36:6a:6c:20:7d:74:b2:06:0d:ce:74:2e:9a:14:ab:
         ff:46:38:38:d0:85:45:06:a0:c3:d0:30:40:a7:66:de:15:be:
         c8:83:a0:bc:c5:94:9e:90:e6:7a:5b:c8:fe:6e:a8:60:b2:ba:
         92:b7:bc:f8:fd:21:f8:a7:36:bc:5a:be:39:9e:12:ea:ce:da:
         e3:5d:56:2e:9e:04:e3:f0:94:f8:8c:d7:39:5c:4b:c0:48:cc:
         aa:41:57:f0:4c:5a:c9:f8:db:c3:4e:8c:8b:a9:95:bb:e0:76:
         19:0b:5f:a6:0f:eb:9d:8e:d8:12:c5:71:f8:54:94:ad:4f:f5:
         72:8e:0d:88:8a:ed:cc:2f:0a:b1:7f:18:3d:59:21:f5:2e:4c:
         ab:4b:00:48:43:b6:8b:79:77:df:1b:22:c0:1b:ba:bb:81:d6:
         1f:dc:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----