Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File:                     Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier:          kF/gXWP3iJ/iC0byhsZJvQvfU5+v0EXtCGyOBuGgJW8=
Subject key identifier:   CB:A0:7E:20:6E:21:06:BB:9C:2B:D8:1D:93:4A:E3:73:4C:52:BE:37
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer:       /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial:       01962F74D10D771713974D674579A67EED09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number:          0C9A
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: XQxVlB/6bHIskkafL6HS3SU8sGC86wH6GX662zuxrHE=)
                          2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:0d:77:17:13:97:4d:67:45:79:a6:7e:ed:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=cba07e206e2106bb9c2bd81d934ae3734c52be37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:f2:e1:72:15:9b:93:37:f2:38:7a:81:ef:
                    03:0a:4e:d2:37:54:98:50:23:b9:c6:2a:64:bc:06:
                    86:39:24:1e:f1:96:0f:1c:cc:61:ac:da:e1:8b:e6:
                    10:15:a0:91:11:ec:4b:3a:79:6c:fe:c4:a5:c5:4a:
                    0b:89:84:df:1b:8d:73:dc:51:dd:52:7b:ff:c9:e4:
                    2b:24:f3:d2:ea:55:64:f9:34:41:2a:cf:a1:8f:55:
                    5b:91:e4:4b:5e:b8:86:58:4a:4d:b5:b2:fd:66:ad:
                    6b:36:97:17:d9:30:24:8a:eb:47:67:a7:58:cc:cb:
                    69:c4:71:aa:f0:0a:26:9e:5a:d5:fe:cd:4c:ea:2a:
                    f7:4e:9c:19:3e:60:c5:98:9a:4a:e7:23:4a:67:da:
                    26:c3:5a:e1:31:45:32:c8:c3:f7:1e:5b:4c:18:d4:
                    e5:e8:bb:38:96:be:bb:f9:2a:c8:5e:d6:21:7f:b7:
                    1b:9c:bf:73:8a:20:d4:ce:0b:51:75:b2:54:f7:76:
                    e1:8c:d8:6b:ba:87:97:84:47:3f:e7:69:ff:bf:08:
                    1c:1c:db:66:10:f0:3f:64:fe:1d:18:3c:61:4f:57:
                    d6:2c:a1:c9:05:0b:4c:77:33:c7:97:7a:b0:83:ed:
                    28:fa:20:bf:14:bf:d0:7c:e7:e3:86:9b:2f:eb:ec:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:7E:20:6E:21:06:BB:9C:2B:D8:1D:93:4A:E3:73:4C:52:BE:37
            X509v3 Authority Key Identifier:
                keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2e:98:04:b5:36:a6:af:e0:a9:ed:3d:03:f2:77:a0:60:ec:
         95:fd:17:45:c9:6e:32:a3:59:a8:41:1c:a4:a8:d1:da:c0:02:
         4c:b3:50:72:17:d3:66:d8:ec:25:bb:4d:47:e2:c0:4d:06:7e:
         67:7f:6f:b2:a9:b2:b4:92:9d:f2:db:3f:a6:5e:bb:56:ca:bf:
         9b:95:1f:41:a3:b9:b5:3d:27:ed:2e:1e:b3:a4:c5:03:ed:a4:
         b5:2b:90:85:9f:53:d4:51:ec:33:77:a0:9d:3b:b9:b5:ba:02:
         0a:6b:92:3e:85:cd:b9:f5:a3:40:63:f0:d5:21:83:a7:77:f2:
         db:98:db:5f:24:a3:6f:6e:aa:8a:35:e6:68:5b:e4:ac:38:5a:
         eb:e5:b7:9a:da:c5:62:e3:22:1a:aa:f8:1d:eb:12:bd:ed:df:
         32:e1:e3:fb:42:42:e2:13:9e:b8:fc:5d:c4:e8:f4:37:09:37:
         12:fd:3c:40:53:0a:75:ec:36:6f:99:22:f0:73:5a:f8:61:e9:
         09:60:82:fd:bf:8f:8c:8b:5a:d8:3d:5f:67:14:3a:14:2b:f0:
         26:5b:79:b7:68:88:e6:e0:1c:80:83:8d:0f:86:0c:80:53:ef:
         7f:3f:bd:c3:ae:f6:7c:e7:77:26:bb:14:ee:20:53:4e:88:76:
         9a:ee:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----