Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File:                     A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier:          hZWt+BB9Fa2RPFhz/edJTjoYDp6PCTOE1DiFvWjBKUU=
Subject key identifier:   D2:A4:E4:74:34:69:FB:E6:61:72:96:83:DF:7C:6F:E7:8D:BE:03:F6
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer:       /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial:       01962FAB906CE19F82EA97DAEA5D92810BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number:          065C
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 2j9Y51xwRYelF6JrKcKDFxJ1u_0.roa (hash: 0/wxjfgZFvKq0jXNMFirhtTQajhUkEHAhxXEqfHBgNk=)
                          2: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: rlKF1Kc7x4RuTqleTe8tpjTkePtDABcLX+js+Gw+zRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:90:6c:e1:9f:82:ea:97:da:ea:5d:92:81:0b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=d2a4e4743469fbe661729683df7c6fe78dbe03f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:36:41:ab:97:95:01:3c:f0:e2:a2:9f:0a:
                    9a:55:2c:95:e2:5b:46:b7:3f:d6:da:68:19:c5:3f:
                    81:0b:c2:f5:4a:de:6e:a6:83:61:98:63:6a:49:39:
                    f6:39:b7:10:85:89:15:82:6d:17:7c:ea:be:de:b9:
                    2e:86:fe:09:19:50:8d:57:be:72:b1:3f:fb:15:51:
                    48:01:8d:55:4d:df:ad:5a:37:bb:dc:b7:dc:d4:25:
                    70:38:e5:e8:63:6e:7b:f9:c0:bd:8c:64:63:d3:da:
                    a8:71:00:48:bd:e3:2f:a4:6c:64:99:98:5d:13:21:
                    8a:eb:d6:b5:fc:01:3d:9c:c7:40:69:c7:8b:87:ff:
                    4d:4a:d4:1d:cb:58:ed:0e:b2:52:cc:25:cc:97:4d:
                    05:11:28:b6:e5:88:a0:89:a2:f6:0d:74:b5:e5:fd:
                    8f:f5:0a:73:18:54:09:64:b8:d6:93:05:4c:c3:87:
                    65:32:8a:01:1d:a8:1e:0c:b2:e6:33:43:15:2c:99:
                    55:6e:44:4b:ef:65:3c:58:c8:15:86:01:be:e9:be:
                    d9:e7:71:cf:21:ca:2e:18:d9:a0:8d:21:56:46:b1:
                    71:f6:bf:75:9e:ec:53:1d:ea:36:b7:ca:c9:60:82:
                    9f:5f:b2:a6:5f:a2:1d:b0:e6:36:35:6e:93:0d:a7:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:E4:74:34:69:FB:E6:61:72:96:83:DF:7C:6F:E7:8D:BE:03:F6
            X509v3 Authority Key Identifier:
                keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:51:31:e6:64:31:6c:df:14:f7:89:02:6b:ca:a9:72:1b:7e:
         18:94:52:e5:00:40:a0:d3:19:19:7f:1a:8f:cb:7f:24:fa:99:
         5a:c8:c2:f1:a9:2d:e5:ce:5b:9f:ea:4c:93:36:d3:ee:19:e6:
         a2:1e:e5:38:49:ef:58:14:e7:ca:d7:25:d8:c3:da:6f:a6:d3:
         70:30:31:36:0f:ac:78:19:d2:ad:ce:d2:88:53:ec:c5:e8:29:
         79:85:c0:1d:ca:86:0a:04:c0:ab:d3:4c:95:2d:6f:82:f2:52:
         1b:6a:f0:c5:b3:44:1f:c9:55:46:4a:88:40:6e:03:b0:dd:19:
         20:50:ef:bc:d7:3d:87:e7:12:10:c8:ed:1a:a4:69:12:3c:0d:
         5c:94:9c:b0:1a:b9:b3:6a:0f:dd:7f:a0:b2:90:10:ff:30:45:
         43:ff:1d:51:74:cd:a4:90:ee:84:0f:98:ba:d3:1d:47:3e:e6:
         62:3c:02:58:92:d0:ad:12:bf:f3:43:61:fa:28:98:b5:e0:69:
         75:d0:3e:55:f5:42:71:34:3f:9e:25:4a:b4:18:20:06:44:38:
         12:04:f9:d0:a5:72:e3:a1:89:8b:f7:1d:bb:d3:7c:81:52:f5:
         1f:22:c8:20:a0:b0:d5:5d:45:0f:7c:37:dc:c1:1e:a7:a6:4c:
         04:4b:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----