Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File:                     q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier:          xRWyBimIjmaOmc5Pck6rWvf27NWn4kEdNOsUP6H1inQ=
Subject key identifier:   76:23:02:E8:3B:08:C7:06:DD:6E:F1:EE:14:F8:C1:2F:98:BA:62:AA
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer:       /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial:       01962E98C2B7EC5D2F155995D7835ADAE2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number:          0B1C
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
                          2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
                          3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: 9TMlBx9w6LzTDekDrrVJsDMtzh7SBYCQ2l+XKTireBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:b7:ec:5d:2f:15:59:95:d7:83:5a:da:e2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=762302e83b08c706dd6ef1ee14f8c12f98ba62aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:41:05:1c:9d:84:f8:f0:5a:8d:b6:41:95:
                    cc:a6:a7:f0:ed:6f:c4:ce:4c:5b:59:54:af:b4:17:
                    5b:43:ad:1d:cb:90:3d:23:19:36:8a:ed:18:00:7f:
                    81:fb:8d:e6:31:18:1c:c5:7b:62:f0:35:8f:d1:36:
                    10:b6:19:1c:14:fa:fd:10:ab:d3:5e:2f:83:6f:26:
                    46:b9:82:e5:7b:47:bf:47:63:9b:3a:51:f6:2c:06:
                    b4:f7:81:f2:90:eb:d7:89:9a:76:19:9a:6d:43:99:
                    0a:48:bb:9e:63:d8:e3:9d:21:52:d6:5c:24:91:70:
                    8b:bc:53:cd:c1:9f:99:bc:d8:e6:2d:31:19:f6:ab:
                    5b:89:50:b8:86:76:a1:f4:15:cb:ee:25:28:ea:3e:
                    65:be:87:be:d0:fb:b0:4f:9b:16:a7:33:65:52:32:
                    6f:c8:f6:66:a8:72:d4:cb:8e:a8:1d:dd:16:60:e7:
                    db:f3:12:74:ab:3e:ee:cc:ea:75:20:72:77:ef:98:
                    b8:32:fb:fe:83:6f:40:84:68:1d:95:b8:ea:cd:10:
                    ac:5d:c4:f3:5a:df:bc:1a:de:f4:d3:20:de:3e:5a:
                    f8:20:a3:e6:e8:66:b2:16:51:ea:9c:56:ca:96:c2:
                    c0:81:82:46:94:24:4e:6e:58:d8:70:cf:db:37:69:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:02:E8:3B:08:C7:06:DD:6E:F1:EE:14:F8:C1:2F:98:BA:62:AA
            X509v3 Authority Key Identifier:
                keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a8:e1:b8:72:06:d8:86:15:e7:5f:66:52:93:06:f3:d6:5f:
         55:99:f4:be:d0:0b:11:9e:c7:dd:d9:43:61:bb:b8:38:d0:0e:
         d2:29:12:d3:12:7e:a4:c3:b4:78:7b:a1:70:0d:c4:19:fe:9b:
         85:f7:ba:61:60:c4:13:01:c0:8a:26:53:9c:70:0b:01:9f:d9:
         25:b3:b6:0f:85:4f:6f:ad:24:c2:c2:57:6b:2c:aa:ef:60:76:
         9a:20:39:91:47:cf:a7:12:dd:20:8d:69:29:08:cf:c9:8e:11:
         f4:b3:43:f0:5a:90:52:ba:1f:63:92:f7:de:ac:88:83:cf:50:
         5f:ab:dc:46:c4:dc:6c:5f:ce:11:30:a9:e8:f9:4c:50:33:26:
         7f:8d:cc:9f:80:f7:59:e4:08:6b:d3:43:4b:9c:05:21:0c:86:
         20:cc:3f:6c:50:09:e5:cc:88:a4:3e:03:de:71:9c:86:99:44:
         f2:45:fa:93:af:c9:53:ae:f1:cc:83:e9:f8:c6:cb:8e:96:ea:
         03:10:06:be:0c:42:67:cf:b2:c4:12:f1:57:ec:ce:a3:14:e2:
         ea:fd:46:76:d8:81:93:c3:c8:e7:4a:33:ce:4c:7b:5a:34:d9:
         9f:36:c2:51:77:88:45:27:34:e7:d2:18:d6:7b:6d:cf:1b:63:
         bd:57:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----