Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          gwRjotOmPnFXzdA0lYzZl1HA6xwueT6Hmwo7NUCV/Ks=
Subject key identifier:   E2:EE:53:9A:F8:E8:16:81:95:3F:5B:01:19:6E:22:4C:07:43:FB:A2
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       01962F06578534EC6149D3B00B5DE2765FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          132A
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: uPI1LSX1RyA3oIw1OdeVIyPrGLyBdAPY4YwxmR9lTbY=)
                          2: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:85:34:ec:61:49:d3:b0:0b:5d:e2:76:5f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=e2ee539af8e81681953f5b01196e224c0743fba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:f1:2d:7f:4a:5b:55:dc:c8:a8:80:58:0e:
                    80:85:fe:07:7e:5b:26:b4:dc:53:56:24:f8:07:7a:
                    4b:dd:6a:07:3b:64:2b:63:d0:f1:a0:3f:42:2d:b1:
                    bf:51:be:3c:66:d0:17:f4:a8:f6:d2:09:5e:60:00:
                    f7:07:37:5b:02:96:eb:44:4e:e2:ad:ab:17:60:57:
                    8c:46:07:f3:5e:ab:df:be:91:8c:f4:d4:f8:05:7e:
                    49:39:3e:26:aa:fb:03:19:19:87:54:7f:d3:43:6d:
                    06:f1:3b:61:fd:03:b9:89:08:2d:ee:b9:15:3b:43:
                    b8:f8:01:07:9e:33:f0:aa:56:67:bf:25:3c:64:35:
                    00:2b:76:e5:a3:95:8b:61:eb:e7:99:eb:2f:65:df:
                    bd:3f:18:c5:a8:57:a9:2e:fc:3d:67:82:0a:4b:12:
                    91:86:a2:c5:06:ca:4a:8a:3a:b3:b0:82:44:7a:60:
                    93:aa:01:bc:10:9b:26:22:06:8b:50:91:80:df:f7:
                    73:8f:4d:89:27:af:63:0f:18:91:a0:0b:85:03:66:
                    51:e3:ad:70:27:d7:0f:d3:4d:a9:9c:7f:36:fd:4e:
                    1e:9d:97:42:6f:45:23:58:40:c7:7c:c8:01:7e:c2:
                    ea:c1:b3:64:72:11:22:96:8f:aa:3b:49:51:92:39:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:53:9A:F8:E8:16:81:95:3F:5B:01:19:6E:22:4C:07:43:FB:A2
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:31:db:88:b6:c8:3e:1f:b1:76:2b:3d:a1:99:2f:88:2b:
         d5:43:fe:a3:63:64:3e:42:72:a0:0f:a6:26:02:1c:5a:9b:80:
         c1:fa:4b:65:4c:ed:9a:be:e2:5a:23:7a:ad:cd:9f:1c:61:7e:
         13:4e:d0:e8:a6:77:f4:36:e2:9b:bc:6d:ac:7c:b8:47:0d:71:
         39:c5:15:7b:fc:01:49:9a:0e:75:de:98:ce:74:7c:6b:55:07:
         b6:66:ef:e0:8d:0d:63:d2:1d:ef:68:35:6b:68:2a:09:0c:5e:
         2a:f1:34:71:31:32:b6:70:1a:5f:7b:6f:67:a4:df:23:89:d3:
         0a:03:c8:ed:f2:97:84:8e:b7:9a:d8:39:1e:4b:bd:64:da:20:
         a7:5b:da:8b:ac:b4:b0:4a:52:1b:7b:b8:b0:44:c2:af:06:7c:
         bf:4b:02:5f:2d:2b:9b:55:f3:6f:70:22:19:39:3e:81:1c:79:
         cb:5e:c7:32:67:88:62:2d:bf:50:75:5f:d1:22:ed:71:aa:58:
         e0:88:bc:cf:fd:00:c4:2e:e6:66:38:4f:5c:63:66:41:a4:f9:
         cc:e8:dd:2e:70:15:f6:6d:78:76:4d:b8:f3:a6:3d:5a:03:66:
         7e:69:99:0c:65:14:8e:e0:55:9a:b9:5d:b3:6b:68:b1:10:11:
         dd:10:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----