Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          H1jvmiPI8Nurm915x6WChpzu5mkjMTOFKd/LqZdk7c8=
Subject key identifier:   C5:33:BB:13:CB:98:D6:DC:81:49:D4:90:C7:EB:2E:87:25:81:CA:5C
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       01962FAB45D1F9FDA65CCFA122A302B28DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          065D
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: lTYrqfFsEucs+h4xoWgXLjxUIeQ6tyQGJhT0avpzgPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:45:d1:f9:fd:a6:5c:cf:a1:22:a3:02:b2:8d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=c533bb13cb98d6dc8149d490c7eb2e872581ca5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:17:d4:87:9b:84:15:81:f0:e3:ab:d4:3f:
                    9b:d1:39:af:ab:c2:a2:af:45:76:30:47:fd:16:39:
                    98:b4:38:58:37:2d:1e:d3:64:7b:cb:a8:7c:cb:c7:
                    04:7a:05:29:df:c4:94:07:c2:de:ce:c3:b6:37:42:
                    10:44:8d:ff:56:85:28:60:7a:0b:36:70:2b:d5:61:
                    c0:42:39:6f:7d:ed:f2:75:96:66:3e:c9:29:98:45:
                    58:c5:6e:34:9c:60:52:ee:8c:51:50:5c:43:e5:40:
                    79:35:8e:75:64:9b:49:cc:59:a0:82:8d:fc:f4:5b:
                    52:b4:aa:34:13:3e:31:f4:5c:e5:3c:08:32:b3:03:
                    6b:56:96:d3:e3:aa:d5:16:16:f3:04:c1:fc:55:ec:
                    e4:80:f6:21:64:08:87:77:b2:ba:68:24:4e:39:8c:
                    14:d5:e5:2f:a8:fb:78:36:65:5b:94:f8:2f:57:de:
                    d1:73:e5:7a:6e:d7:b1:03:61:bc:79:71:16:df:ea:
                    60:31:4c:49:1a:3c:2e:6b:c4:ab:b7:c2:b0:ce:02:
                    fc:99:04:6a:fd:81:d0:b8:35:ff:48:d6:d9:13:a9:
                    63:78:07:cf:53:0f:37:dc:3c:7a:58:85:10:e0:28:
                    a4:2c:4d:81:88:e6:04:37:09:c4:09:59:3e:da:db:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:33:BB:13:CB:98:D6:DC:81:49:D4:90:C7:EB:2E:87:25:81:CA:5C
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f3:a6:e1:3f:17:bf:e4:cc:a4:93:7e:fa:0b:ac:f7:5f:df:
         e6:21:21:5d:03:ed:35:81:86:4b:3c:3a:37:3b:78:ba:b1:7a:
         d0:6a:b6:8a:da:86:4d:38:c6:ab:91:26:25:67:53:2b:71:41:
         59:5b:cd:c5:c8:d8:1a:c9:ce:28:9c:14:b9:98:f3:5b:92:74:
         b2:f2:50:6b:3b:f9:4c:25:f6:19:6c:b2:a2:46:d9:f6:f2:4d:
         24:ef:8e:49:9a:58:c6:8c:83:ef:85:ac:62:3b:98:dc:c3:67:
         5c:8b:61:8f:91:31:dc:97:43:17:9f:f6:4f:c5:e0:ec:a8:6a:
         a2:4a:f0:da:d5:53:f1:e8:ba:29:72:60:28:ff:f8:7b:af:32:
         cb:a2:f0:cc:47:db:df:6d:0d:f8:ba:7d:1f:7c:7d:c3:b5:41:
         f7:e1:03:b3:65:d8:2b:1d:01:37:98:09:7f:aa:b9:dc:27:8d:
         aa:2d:94:f0:62:a6:e3:3c:0e:63:36:c5:6c:88:73:e4:49:c2:
         8f:2e:3a:6d:0c:58:22:77:83:d4:2e:5c:50:1b:d5:5c:bc:ad:
         66:7f:8e:1e:77:4a:db:37:46:d3:00:f1:10:bb:04:46:aa:44:
         ac:10:3d:96:56:ed:1a:6c:1e:a7:d0:02:95:71:c0:fc:d6:34:
         d9:ee:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----