Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File:                     rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier:          ssikqwPnkSvdm/qC5z0jfQEXP+rIirSZBwINRlo7A2U=
Subject key identifier:   39:E4:8F:F9:89:C9:38:7C:7B:D0:CD:1C:E2:87:94:00:5B:11:7D:9D
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer:       /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial:       01962F06FBC90251E8F2C2AF1CF0D0586E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
                          2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: 3H+WmwVJz2PXxCVLGQTJbnC5OV81inpjtaf2z+dqvEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:c9:02:51:e8:f2:c2:af:1c:f0:d0:58:6e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=39e48ff989c9387c7bd0cd1ce28794005b117d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:d0:3f:fd:53:7a:58:87:0d:75:2d:cb:1c:
                    20:4a:41:1e:98:d4:6a:9f:43:c9:af:92:55:ec:63:
                    ec:87:3f:b0:af:ea:a0:74:a9:95:9e:c9:b2:c6:a3:
                    ab:50:25:b0:cc:b3:24:3c:9e:96:d9:05:1e:fc:1f:
                    21:9b:e7:de:2f:a7:f1:b7:13:62:62:9c:c7:67:28:
                    05:8e:2d:b1:4a:a5:c8:37:06:64:24:6d:da:c1:8f:
                    2d:f3:4e:f3:d4:ec:fa:8f:2c:6f:cc:fc:bb:79:cd:
                    22:d3:c0:cd:0d:00:b0:42:d3:78:76:a1:92:7b:71:
                    e5:07:f6:48:d8:09:ee:74:6f:2a:7d:84:7a:cb:2e:
                    56:0c:8f:d9:4c:34:78:02:31:db:46:82:e5:0d:d9:
                    9f:89:de:1c:e9:c2:af:4a:e6:b5:76:db:6b:04:da:
                    69:65:0d:6b:ce:23:07:1a:11:17:27:ef:a0:9f:93:
                    38:f4:e7:d0:bd:86:2b:1b:7e:46:c3:aa:3f:48:d9:
                    f6:9a:d9:5d:81:c0:51:2f:03:92:67:04:27:b5:73:
                    e4:7e:21:f9:ec:63:a6:6c:79:45:6e:86:bb:15:1f:
                    9d:68:07:1e:bf:42:5d:00:f6:cf:81:b3:88:45:99:
                    7e:73:ba:cd:1f:57:eb:33:1c:9e:73:8c:7d:eb:07:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:8F:F9:89:C9:38:7C:7B:D0:CD:1C:E2:87:94:00:5B:11:7D:9D
            X509v3 Authority Key Identifier:
                keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:d3:55:c7:80:c6:ca:65:9a:3d:16:c4:38:fc:17:bd:8a:
         f9:70:4f:2c:ef:a7:25:9a:bf:9b:9a:35:bf:bb:2d:cc:8f:93:
         66:2f:e8:84:e0:cc:77:ca:5a:e8:5c:5e:95:ce:c0:f2:ba:2f:
         4e:ea:48:f3:d2:93:d5:35:71:8b:81:33:6a:22:2a:cd:66:25:
         4a:33:0c:f0:a0:93:68:a2:d6:b8:7e:c3:10:bb:ba:3d:37:57:
         d2:c4:47:2c:00:a0:c7:a9:7e:d6:96:d5:59:f6:f2:dd:09:01:
         73:26:f1:43:7c:98:0c:7c:e9:eb:81:57:6f:50:1e:bb:e0:75:
         6f:b0:b6:3d:90:e8:b4:c6:20:a6:28:4f:98:54:c9:88:be:fb:
         03:e4:4e:54:36:be:f5:99:b0:73:f7:e7:c0:b1:92:e0:67:f6:
         c7:7e:8e:5c:4e:c0:10:8e:1b:d7:8f:f0:87:db:9a:89:e5:0a:
         39:3d:00:45:13:89:70:67:bf:ef:48:23:5d:2a:18:30:a4:0d:
         a6:55:a0:c0:3a:da:3b:2e:8a:36:15:51:a9:65:e6:fe:0b:3a:
         77:cf:39:82:0d:93:96:21:77:b0:c7:75:f6:7a:b7:47:73:9c:
         0f:f1:16:53:65:ee:96:e1:f0:16:0b:57:0b:9e:45:8b:61:41:
         16:e0:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----