Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File:                     q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier:          szha2gux4zyWxhTbUn2vJOvpMfZCp8mRozPZq4MmB0A=
Subject key identifier:   F0:02:37:84:F8:94:52:6C:2E:21:17:C7:BB:54:D6:E7:F3:02:67:89
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer:       /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial:       01962F0657CEE797315BD3C19B8506631B67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number:          0ADD
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
                          2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: oFhTl5+P1b1yms6rfBbPNyOFAoIqSReV7qTzZWQnqI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:ce:e7:97:31:5b:d3:c1:9b:85:06:63:1b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=f0023784f894526c2e2117c7bb54d6e7f3026789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:a6:37:68:11:9e:75:78:88:e5:89:3e:71:
                    18:69:af:ff:2d:34:5b:f1:54:82:9f:38:45:bc:e2:
                    75:5a:8d:12:e4:21:d7:9b:fc:df:1b:cb:4b:64:a3:
                    c1:ab:5a:2f:98:f4:79:79:20:55:1e:da:04:79:e2:
                    f3:84:b1:f2:0d:1c:aa:8f:cb:6e:0b:cd:94:85:5f:
                    f7:ec:e9:59:97:4d:4a:73:11:42:55:34:73:93:b0:
                    f4:92:77:5d:f7:ce:9b:d0:8e:e5:8f:e1:87:dc:15:
                    ce:32:c2:b7:57:c9:49:2c:0c:d1:1e:b0:da:a6:9e:
                    76:0e:fd:c1:10:54:9b:e2:d7:26:1a:3c:2e:94:9f:
                    3f:d3:5f:b1:6d:7f:34:de:42:ee:ac:2f:8b:00:81:
                    b6:c6:50:39:9e:47:fe:db:64:68:2e:bf:d4:87:b6:
                    13:8f:4b:06:97:3b:00:99:2f:1c:1c:6c:c6:af:e1:
                    5c:04:3a:e2:b4:69:e6:80:63:16:f0:54:7b:c9:1b:
                    04:72:e6:8b:80:72:e5:71:9e:db:64:d5:03:d5:f2:
                    33:73:8c:80:f7:a1:c1:60:e8:5f:31:b0:24:d4:81:
                    04:73:ad:c8:a2:16:2a:7f:d7:d6:05:01:83:74:18:
                    53:2a:95:05:18:c0:e7:82:d4:2c:88:6c:c7:09:4b:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:37:84:F8:94:52:6C:2E:21:17:C7:BB:54:D6:E7:F3:02:67:89
            X509v3 Authority Key Identifier:
                keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8d:27:ab:80:4d:52:7d:ea:28:e7:d7:be:95:10:d8:d6:a8:
         6b:ad:66:9d:2c:65:f5:f7:d9:48:c1:f9:e6:83:38:38:2e:d3:
         b2:b6:7b:b6:08:d9:98:86:88:1a:61:6e:3c:c0:22:99:61:0a:
         6c:3c:ad:09:0a:ca:44:ef:e1:91:87:74:1d:a1:c5:4b:fa:25:
         d2:13:f1:22:2e:d4:db:53:96:73:7f:ab:19:dd:34:d1:51:43:
         c4:b8:b7:49:04:5e:e7:53:7b:5e:ff:4f:e5:f1:48:4b:3d:24:
         52:09:18:ae:61:9f:07:3a:8b:85:90:e6:0a:42:b1:b1:d9:74:
         4d:81:8e:71:c7:0d:b0:84:18:bc:61:c3:2c:52:6e:0d:51:03:
         b7:b7:e8:50:b1:07:ff:09:1c:be:c0:1a:b0:64:bb:bf:e4:fe:
         09:73:ec:0e:ba:ab:59:bc:29:e5:fd:a8:42:2d:15:9b:78:cb:
         bc:9b:97:d2:7e:43:49:1e:2a:4c:03:7f:89:8a:66:43:ee:16:
         d9:06:8b:f3:c3:b5:23:17:01:0f:f4:1c:1a:d4:f6:89:25:d6:
         70:96:9a:83:fe:8e:99:8d:18:1c:85:f4:1b:c5:37:0f:f5:a9:
         96:86:a4:ae:9c:77:92:a6:1c:d2:25:7a:5d:87:60:3e:58:9d:
         51:ee:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----