Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File:                     qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier:          SooqoSSc2G1ftJ8YPs53cRzFx9ZlztYNDu15NsVLriw=
Subject key identifier:   B3:11:4F:75:8D:46:8C:FF:75:EB:BC:D3:FC:1D:0C:33:46:70:15:1B
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer:       /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial:       01962E61B79DE86FC30D20E29FC14B89BFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number:          08E4
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
                          2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: f+5dBhLzE5E5FflnOIKrmXBfbLAKJIb9RR6REocqePY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:9d:e8:6f:c3:0d:20:e2:9f:c1:4b:89:bf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=b3114f758d468cff75ebbcd3fc1d0c334670151b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:2d:29:4b:ae:a8:bf:7d:90:35:d7:53:03:
                    53:1a:ec:02:6a:93:85:1d:4c:01:f4:fe:8b:22:f2:
                    5a:e4:55:7d:7d:d0:61:a8:15:ae:84:5b:bc:43:51:
                    89:42:57:2e:8d:13:23:87:5f:a0:a6:d8:3c:a1:3f:
                    19:02:5c:e0:ac:2c:44:43:ba:68:84:ed:75:b7:9f:
                    b8:6f:13:5b:de:1d:c4:c2:f8:1c:ef:99:1f:44:f9:
                    bb:0c:2e:40:0f:63:77:ce:93:d8:0c:89:46:da:5f:
                    6d:a6:02:f3:13:86:5d:a5:eb:2b:f7:95:35:9a:d2:
                    7e:0f:e6:d2:b3:3d:5e:ab:c7:b4:54:4e:d4:1a:d5:
                    32:5b:9e:78:cd:36:89:b6:42:6a:30:1c:14:61:dc:
                    55:3e:e9:0b:e7:48:64:93:3a:88:98:e7:ec:26:9f:
                    db:90:c4:f1:5a:73:b3:1c:a5:7b:47:45:68:92:bc:
                    f9:96:2b:4b:7c:5b:43:63:5e:8e:a6:de:24:cf:aa:
                    a0:18:c4:32:89:dd:df:8a:6d:27:20:f1:1f:59:a4:
                    cc:9c:3b:42:e7:68:b4:98:2a:3f:77:47:ea:49:fb:
                    28:3e:cb:cd:20:74:e3:9d:be:24:c8:4d:9a:ec:2e:
                    7b:d4:95:2f:4e:b8:21:bd:60:ac:bb:be:c0:f5:73:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:4F:75:8D:46:8C:FF:75:EB:BC:D3:FC:1D:0C:33:46:70:15:1B
            X509v3 Authority Key Identifier:
                keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:97:1a:ac:64:55:0c:2d:05:d9:5e:31:f0:2e:7a:6a:7b:cc:
         22:86:b5:47:46:45:c8:d1:b5:f8:4f:6c:e8:25:88:05:08:ca:
         c8:20:7f:ee:ec:c3:ff:57:4e:4f:7f:0c:90:c2:0e:13:ce:a0:
         2a:fa:83:fa:3e:12:a5:ea:57:fe:64:9c:31:5a:4d:b7:3a:28:
         36:e0:45:2e:bc:ce:f1:6d:a0:d5:c3:5e:42:13:8c:c5:1c:ec:
         68:48:4c:91:cd:b6:7f:d9:c1:e1:f8:41:5c:af:92:30:3b:47:
         dd:eb:ef:8c:32:2b:83:85:53:d1:16:6f:19:b5:40:f5:7b:3e:
         60:2b:ab:35:1b:dd:c4:1f:38:9e:61:27:55:09:d4:25:8d:d5:
         0a:32:b8:17:42:f7:5d:b8:8e:27:10:cb:99:66:a1:60:6b:5a:
         f8:45:ab:bb:a5:34:c5:e6:23:b4:e5:4b:ef:c8:a6:8b:f0:99:
         b7:c2:83:f5:d9:3a:4c:0d:85:74:ef:2d:27:31:0d:e1:ab:49:
         7a:50:ab:e6:26:4f:2c:fb:c6:dd:5b:99:5f:7a:4c:e8:15:80:
         b0:f6:d3:ec:65:d7:93:23:12:67:03:e2:61:61:85:3d:cc:86:
         4e:6a:cc:ad:94:48:7b:94:1e:16:3f:60:0f:34:d1:33:69:2e:
         1e:4a:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----