Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          pvYE2Neswg+a28L/nBbDmctOJ7G8leL5+M29hI0ucB0=
Subject key identifier:   65:FF:24:29:35:59:C6:85:4A:34:09:C2:18:FE:44:16:76:8D:26:36
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       01962DF40F951788115EFC245370B9A6DC65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          03D5
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: vqSb/X3DSrHPw2R6o4OqR7A3ieZ/iufG1sM8w7ccZLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0f:95:17:88:11:5e:fc:24:53:70:b9:a6:dc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=65ff24293559c6854a3409c218fe4416768d2636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:98:d9:41:ba:37:a8:55:6c:e6:f9:77:98:
                    8f:47:8e:1a:ec:b2:77:23:28:f6:11:31:a8:78:3c:
                    62:44:fa:18:a9:50:18:65:bb:a7:8f:e0:05:05:fd:
                    eb:cc:5c:21:70:36:2f:fe:06:c2:4d:ee:04:82:e9:
                    5a:46:44:3d:a1:f1:dd:c8:11:37:fb:38:25:1a:90:
                    72:fa:3f:48:5c:32:4c:bd:0c:4c:60:e0:ab:05:82:
                    d0:71:58:b0:d7:ad:9f:e0:e2:a9:ee:d7:f0:da:12:
                    20:40:cb:93:fd:a5:83:b0:87:18:f4:d9:43:7b:67:
                    d8:21:3a:4f:b3:c4:b1:dd:3b:48:b4:3a:d3:2d:88:
                    95:18:9e:11:e5:7c:e5:17:7a:86:de:7a:2a:9e:79:
                    ff:d8:1e:50:b3:0d:7b:ac:e0:ea:07:68:0e:5c:c8:
                    5f:40:fa:93:8d:25:e6:16:29:58:76:55:49:c8:f7:
                    b2:f1:2b:d7:a5:24:99:44:49:d5:0a:be:ee:bf:b7:
                    d3:89:5e:74:45:2b:17:28:bd:4a:92:7a:f1:53:d5:
                    de:a9:a7:22:1f:dd:77:48:c2:3f:3c:cb:0b:23:90:
                    bc:bd:97:18:4b:0f:81:7f:f5:60:a9:bf:86:f2:09:
                    45:d9:72:63:dc:06:47:a5:d4:fb:c0:11:88:6c:20:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:24:29:35:59:C6:85:4A:34:09:C2:18:FE:44:16:76:8D:26:36
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:3d:9d:a2:1f:30:c2:d6:75:d5:c3:27:63:9c:30:a8:18:
         3e:ad:08:1d:da:92:c6:9d:73:c0:ac:08:dd:9c:99:9a:15:4e:
         52:25:2e:46:02:64:6b:16:ef:f0:34:2a:3d:ba:da:2a:d9:fa:
         11:e9:84:56:3d:a3:ce:ff:00:72:af:0c:60:d8:ba:d6:6d:97:
         cb:9e:8b:54:26:e2:a0:23:36:18:d4:f7:74:a7:96:d4:0a:31:
         90:13:e7:40:bb:14:5a:b5:73:34:68:a7:e9:e4:24:ad:f2:4a:
         b8:39:fb:69:b4:ab:f2:4c:d5:c4:e8:57:3c:c2:87:b7:56:87:
         2a:66:ad:d0:c0:cc:86:2c:36:aa:e5:67:d7:00:e7:66:79:10:
         7e:a7:e7:8f:ed:b0:60:79:f6:df:00:cf:4c:d2:69:21:8b:74:
         ea:8c:ce:ca:ce:c8:6f:a9:33:1e:6b:2f:38:6b:d3:35:32:cf:
         a7:61:99:64:c8:63:b2:77:31:f0:03:01:eb:96:da:90:5e:72:
         b6:07:20:64:c0:aa:eb:82:ec:1e:3b:cc:e2:94:20:a5:e3:01:
         64:28:be:ad:85:53:84:63:44:b2:35:0c:e5:f1:34:9a:73:fb:
         a2:4d:20:27:8e:bd:14:5f:e4:cf:86:0a:05:15:d0:db:09:fc:
         3e:f3:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----