Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File:                     90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier:          7NZu//aGWzmUCGp1BF5NTKAwnMPBMWfDu8UdiUYZvVg=
Subject key identifier:   A3:41:D1:37:B3:7B:12:80:B6:B8:20:EF:F8:A5:EC:C2:F3:BB:B1:FC
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer:       /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial:       01962F070AF4165D77B5575A7F8259C34E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number:          122A
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: CUni8wudNHwJsB+Se83HkI2TNSFbKK3LQqpuGXofCpk=)
                          2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:f4:16:5d:77:b5:57:5a:7f:82:59:c3:4e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=a341d137b37b1280b6b820eff8a5ecc2f3bbb1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:33:61:01:40:d6:bf:9d:ea:6d:59:98:d1:
                    fb:47:21:fe:a7:25:18:68:d5:59:71:5b:12:67:7e:
                    f4:d9:6b:44:3b:46:1f:bc:75:0e:e4:09:3e:b4:20:
                    45:c4:af:94:63:02:60:f4:f8:9b:89:21:52:3a:25:
                    10:fa:82:b6:f2:90:6d:19:5a:3b:69:a1:1d:9a:75:
                    d4:2a:02:27:66:9e:b3:35:e8:41:bf:d4:e4:ba:33:
                    6d:d2:ec:a0:0b:f3:a1:bf:3d:f8:65:bf:ce:d2:37:
                    1e:24:6d:62:72:28:54:56:be:05:64:e1:08:4a:fa:
                    52:d2:9c:f8:df:7a:87:93:d6:7b:5e:64:a6:3c:c0:
                    8a:f4:bd:9f:a0:bf:ae:ff:e8:ae:8f:83:17:3f:95:
                    4d:ad:b9:dc:13:47:9c:e9:25:f5:3e:22:ef:0a:fb:
                    43:bf:22:52:8e:08:58:55:8b:23:22:79:24:01:6e:
                    0c:1b:0d:81:eb:72:43:6d:d7:c7:33:65:8e:11:24:
                    84:13:1f:9a:d1:e8:b9:cc:7a:cb:82:c3:69:5b:d8:
                    54:3d:3d:93:e0:1d:64:3c:87:c3:a4:54:67:ed:79:
                    03:47:ff:02:51:99:7b:53:1c:3e:31:13:ac:e7:de:
                    c5:88:8d:1b:7d:d7:05:8b:2a:1d:88:6f:fd:42:19:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:D1:37:B3:7B:12:80:B6:B8:20:EF:F8:A5:EC:C2:F3:BB:B1:FC
            X509v3 Authority Key Identifier:
                keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:54:4e:0b:89:1f:93:68:68:1e:0d:0a:46:ef:89:d9:c5:f8:
         29:75:4f:0d:35:7b:53:c8:00:67:97:85:4e:41:02:3c:f7:a8:
         e4:e5:ef:31:3d:b2:02:4d:f3:54:2a:86:5e:16:f4:d0:96:73:
         a8:de:0f:9a:26:0f:94:01:ae:26:93:cd:12:35:4b:24:df:30:
         29:2b:b0:40:49:c0:12:9a:40:9e:fe:3f:ce:37:22:36:23:7f:
         d5:fa:b3:c7:6f:92:cc:d1:e2:51:bd:bf:61:d7:28:2a:b0:e9:
         53:f3:81:54:6a:7c:38:69:41:d5:e7:8b:4f:80:a2:f8:89:bc:
         2a:68:f7:2a:2e:e3:e7:7f:a3:32:ce:66:f3:1b:b1:ed:f3:0d:
         ee:64:41:0c:25:1e:03:a7:eb:db:fa:7e:b6:42:ee:a8:63:87:
         6b:8c:d9:12:e3:0a:97:10:ad:9c:8c:20:25:fa:a1:9b:c9:c7:
         e1:08:1a:12:b0:a1:b5:11:e9:d1:36:45:65:8c:80:e6:67:c5:
         9a:25:83:3c:be:9c:2f:10:53:21:16:ef:3b:f1:98:fb:65:27:
         32:af:4f:33:32:e4:47:89:78:ea:3a:65:e2:c2:dc:e7:f7:f0:
         09:cf:12:c8:9e:ec:50:2b:cd:33:30:01:37:bf:01:86:dd:3b:
         6f:d7:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----