Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
File:                     _qLamRGzG_Ww1hSRL9v5W_HXA1s.mft (raw, json)
Hash identifier:          IcLo5F/j+0+Qi+WaitiQNDG+KYAbF2eV+9py3sOgFV8=
Subject key identifier:   07:0D:19:77:EE:1F:EF:28:88:03:1A:92:85:6D:48:64:22:5E:45:DE
Authority key identifier: FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
Certificate issuer:       /CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Certificate serial:       01962F07284E209F30FA704DCFFC75F686DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
Manifest number:          0493
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: LVji7-hNinMvh2uZfU9itRxK6Eo.roa (hash: yz8p8NyEKPeKdywG9T51h7CGBtQCcml/qAuFdNgc+wQ=)
                          2: _qLamRGzG_Ww1hSRL9v5W_HXA1s.crl (hash: hL/Sb0Umyy/SH42Ocmf7gZ5Wz5Mm2Wahmlr4yE5OEwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:4e:20:9f:30:fa:70:4d:cf:fc:75:f6:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=070d1977ee1fef2888031a92856d4864225e45de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:3d:41:08:85:0f:66:62:22:a2:ac:08:f7:
                    f2:4a:e8:14:4b:31:b7:5f:4f:bb:63:c3:d9:50:53:
                    8c:c8:28:87:30:f0:f2:3d:1b:5b:0c:49:e9:ee:35:
                    1a:a3:6d:f2:f3:31:2e:ae:96:b9:8c:3d:0e:bd:35:
                    4d:39:64:9b:f6:54:48:80:20:5c:50:f8:74:d6:b0:
                    d8:cb:23:56:62:d4:92:d8:e4:fe:d2:2d:3d:b7:9a:
                    9b:b4:ec:e1:49:2a:30:67:6b:b6:55:6f:7e:21:5c:
                    03:7b:7a:ee:6d:98:f9:03:97:61:3c:56:80:90:df:
                    64:85:d4:c6:18:4e:9f:61:92:09:75:15:d2:95:0d:
                    75:04:9c:5e:09:b4:0b:74:22:43:9f:c8:9d:9c:41:
                    23:c8:d6:d5:c1:67:1c:f6:39:25:3d:2d:e1:9b:77:
                    95:e6:db:5f:cc:51:16:f2:4c:3b:39:b8:41:3b:01:
                    85:02:2f:2c:cb:57:52:7a:4d:25:63:8c:31:c7:6a:
                    13:28:e7:28:d1:cb:57:e2:ae:aa:f1:9f:e0:5c:f5:
                    af:a0:bf:1c:e3:6d:cf:52:87:31:da:fa:39:90:f7:
                    72:dd:06:eb:ae:7b:e5:c8:e6:d0:94:36:51:4a:3a:
                    09:c3:12:ba:20:0c:8e:e7:96:ab:ec:6b:50:d7:87:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:19:77:EE:1F:EF:28:88:03:1A:92:85:6D:48:64:22:5E:45:DE
            X509v3 Authority Key Identifier:
                keyid:FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:b4:e6:9a:b8:78:a9:37:58:d2:cf:d6:a0:38:31:7c:74:
         7f:fa:0c:45:2e:c6:2c:59:1d:7e:b4:27:d1:d6:b4:fb:b2:1f:
         a5:2e:dd:88:54:d0:c6:0d:bb:33:a9:84:f9:b1:4e:67:b3:69:
         c7:06:d1:81:63:95:83:e5:bb:87:ee:37:88:99:51:70:f4:19:
         9e:7e:da:35:45:45:e0:36:00:a0:e3:a7:4d:1e:a4:f0:ab:5d:
         ff:5b:e7:fb:9b:a3:6c:35:8d:79:3a:62:5e:c3:37:40:46:ca:
         87:0a:97:7b:a8:da:02:bf:bf:0c:8b:68:e7:65:47:5a:fd:61:
         6e:b0:c1:70:83:07:e4:cc:e8:b7:21:ae:b6:a8:52:c3:0f:5c:
         99:51:df:aa:78:9f:c9:0b:63:b0:24:5e:0c:bb:41:09:1c:71:
         0d:94:3a:cc:0a:d6:c3:02:25:e9:28:5a:b7:a6:80:ce:89:1c:
         79:ac:5b:58:de:70:92:6f:86:e6:b3:a3:c4:b1:b4:52:25:b8:
         8c:e4:3a:5b:b5:73:a5:65:69:2e:1e:bb:eb:52:7a:ad:e7:bc:
         bb:e9:32:ed:8c:c2:10:90:73:6a:60:ff:8d:c9:a5:a1:a7:af:
         04:70:71:65:3c:5d:94:ff:32:8c:e1:20:3c:cd:ab:c0:ec:1d:
         b1:ea:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----