Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File:                     0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier:          mLAPm7ne1S/YNIwZSzrmU/UajDIRh9krkMn/0nVkCWE=
Subject key identifier:   8B:B4:A5:2F:0A:0E:5A:E1:96:0A:ED:42:A1:0A:26:69:08:97:80:F7
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer:       /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial:       01962F743949FD6A162291DAEFFF287CE726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number:          0EB2
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: 2yIrQXLC+i/RZsp0jmwx7M9nExgeaJTWQePqqEGnEi8=)
                          2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:49:fd:6a:16:22:91:da:ef:ff:28:7c:e7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=8bb4a52f0a0e5ae1960aed42a10a2669089780f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:37:c8:b4:63:cd:fe:30:5c:84:db:95:2e:
                    6a:4c:4e:a7:17:9f:01:3d:5d:88:7b:75:df:85:b1:
                    06:e8:f3:6c:ce:be:2e:62:97:30:cf:18:1d:8f:7d:
                    39:00:3d:4f:d4:0f:8b:59:d4:c9:89:30:e1:a1:d9:
                    42:85:79:59:0b:cb:1f:12:4a:92:67:f3:e6:ff:b9:
                    58:31:e8:1a:45:58:4d:bb:40:9f:33:ae:3c:3e:b7:
                    0f:cb:3e:7b:f6:42:6f:1a:fb:8f:20:09:a0:3f:ec:
                    4d:7f:10:90:fb:9d:35:dc:6c:ab:56:b3:0e:74:07:
                    75:d3:4a:22:9b:2b:74:e4:4b:2f:6a:4c:f7:f0:9c:
                    91:26:13:0e:af:d7:0c:ad:66:15:f3:a1:58:59:f2:
                    18:66:ec:da:b4:0f:74:c5:85:fe:f2:c7:bd:3f:3e:
                    f0:41:f3:d7:92:74:af:79:60:95:eb:9a:b1:e1:33:
                    86:16:70:21:29:8c:42:02:bc:6f:bc:6a:5a:b3:b1:
                    2d:91:46:60:74:66:3f:38:21:56:27:2c:a8:6b:ad:
                    5b:50:2a:d4:47:89:67:e7:7e:ee:81:54:9a:b4:a1:
                    75:35:4f:33:bc:a2:20:c5:0f:38:b8:c5:71:f5:17:
                    46:bc:d1:17:89:e3:61:63:03:7b:8c:ee:76:95:56:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B4:A5:2F:0A:0E:5A:E1:96:0A:ED:42:A1:0A:26:69:08:97:80:F7
            X509v3 Authority Key Identifier:
                keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:17:11:5e:40:23:ee:91:40:63:9a:56:1c:b2:fc:36:b5:a1:
         b9:29:bb:d5:f5:45:04:f3:5b:d6:b4:21:23:f9:d2:57:8e:54:
         4c:5f:15:f9:45:9b:1d:ca:40:46:8a:36:28:cf:cd:ac:1a:15:
         62:63:1a:b3:f2:63:5a:e8:9b:04:a4:87:13:6e:b8:d7:99:aa:
         5a:56:1e:d6:c3:ad:13:ea:53:41:83:c4:4c:03:7b:03:98:7d:
         53:69:01:0f:08:f4:89:45:81:7a:ec:c6:53:cc:84:01:e6:00:
         61:c4:7b:af:d2:74:95:40:c2:5a:07:d4:e7:6a:6f:80:c6:5b:
         78:f6:81:92:88:0b:55:17:20:9c:fe:37:d2:79:73:2d:81:32:
         f4:63:24:7b:0d:15:a1:49:9e:d0:2b:e2:0f:11:3d:06:58:64:
         d0:a2:53:f1:04:47:c1:08:1f:13:c0:9a:91:76:6d:b7:45:13:
         d8:a6:21:8b:bb:cf:2e:8e:76:f2:7f:07:0b:9e:bc:c1:a8:05:
         38:a1:ae:9c:66:38:0a:f4:f5:6b:65:df:92:f7:29:53:72:63:
         ff:df:1a:78:36:2f:1b:20:4c:f1:c6:75:c2:ae:da:4b:1e:00:
         50:f1:09:51:26:42:5b:54:dc:9d:70:ba:e8:2f:6e:99:8f:e1:
         7e:f4:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----