Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File:                     q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier:          7M0T0SUh13jJaddEVpKXGTabxpvAdjwQ/aXGT1jskA4=
Subject key identifier:   15:AB:4E:38:42:36:D0:48:0A:85:E2:91:2A:0D:FA:0A:50:79:F0:C7
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer:       /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial:       01962ECF5B0CAF0AA15C0B1E6516FBBBA3B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number:          0BD9
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: Q7n8gF3ZYVbGL83zzh2dQnmawHc.roa (hash: nZCFM7j2sE+1KCmTTykVW0xazn9X/ppTbL+++Wr3NQI=)
                          2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: 6wvOl3iK3wIq6fsZqOQL0xWto3tNe9f0QKH0J3PXLTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5b:0c:af:0a:a1:5c:0b:1e:65:16:fb:bb:a3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=15ab4e384236d0480a85e2912a0dfa0a5079f0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:ce:3d:40:96:56:e7:48:97:f5:58:a4:16:
                    ac:8e:d0:cc:99:75:db:e4:46:8e:52:15:93:b9:4e:
                    5d:bb:0f:4d:9f:a4:d6:74:e9:f3:83:46:1b:e8:53:
                    6a:78:b4:cd:c9:5a:6b:d0:1e:4d:b0:a3:6b:12:47:
                    77:29:80:6f:ed:b0:69:8d:42:fe:30:4e:23:be:80:
                    c2:32:4d:3e:27:ed:a0:37:86:ff:05:77:b4:3f:63:
                    fb:ef:15:d5:cf:60:dc:7d:0d:ae:1c:2f:8f:4c:fb:
                    b6:b0:e3:dd:e0:d4:fe:9c:2e:d6:db:75:83:0c:f7:
                    5a:4f:30:13:a9:d2:0f:b3:9f:de:d2:89:56:35:bf:
                    f6:ca:c3:03:4f:ce:97:04:de:94:cf:33:2b:e4:f2:
                    5a:7c:ee:1f:b4:8e:23:a9:94:8d:f2:54:78:bc:1d:
                    86:01:92:12:62:77:06:9f:87:cd:db:d5:19:7a:e1:
                    ba:bb:21:f4:0b:5a:42:6f:76:98:34:89:dd:f9:27:
                    66:d7:e2:e0:2a:8c:60:2a:5b:77:cf:2d:d4:9a:8d:
                    54:f1:d0:95:7a:34:a4:98:28:3c:2a:88:f9:06:6c:
                    7f:dc:8d:6b:f9:ce:e4:18:22:9d:46:b0:7a:0d:99:
                    ce:93:44:8d:9b:75:2b:b9:aa:80:d8:ef:2e:d4:b4:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:4E:38:42:36:D0:48:0A:85:E2:91:2A:0D:FA:0A:50:79:F0:C7
            X509v3 Authority Key Identifier:
                keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:b9:e5:12:2d:43:3e:72:3a:62:65:06:df:7c:ae:95:eb:
         16:84:91:bf:2f:11:81:79:da:16:0d:62:24:bd:5e:ca:fe:50:
         9f:0f:0e:fa:5c:94:2b:8e:c0:29:7e:3c:e8:84:57:2c:72:41:
         4a:52:12:67:1f:56:fe:de:b4:ef:bf:26:7b:f1:50:47:40:a4:
         db:8b:95:da:fe:36:ac:68:29:50:75:1b:fd:0b:b0:25:35:26:
         4b:cc:a7:73:ee:c8:a6:79:be:6f:d3:a3:61:fc:4c:84:fa:d4:
         f0:fc:34:0d:3f:a8:f8:74:cf:70:39:46:84:0e:d4:7a:11:86:
         f4:96:04:bd:d3:e7:db:fa:07:cb:85:49:8b:31:28:45:09:1f:
         1d:0a:22:83:45:92:86:9d:f5:16:a7:cd:ec:65:90:de:9a:1c:
         92:7d:11:2f:98:8a:8e:89:f5:d9:87:4d:1d:5d:df:11:70:45:
         30:3c:57:45:90:bf:09:8b:0c:c3:4e:37:d8:21:d4:76:38:ce:
         f5:51:45:d3:a7:32:29:45:64:c2:c0:14:2e:b2:fe:35:d9:92:
         5e:27:d5:6d:8f:c7:3e:55:bf:db:20:fb:85:0b:d7:6b:4e:f0:
         86:a2:e3:9f:72:69:ea:35:06:62:24:44:05:31:5d:e8:a3:f2:
         c3:b1:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----