Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          FDcBIBssyFEo+sxoYE0FSYRM2vTzmpPJsdlmxHiYfhw=
Subject key identifier:   5D:A0:4E:54:C8:98:7E:F3:FF:45:DA:69:D9:86:BA:F3:F6:88:18:F6
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       01962F3D2E321FFB6A643C2BF8DB9C6921BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          02F5
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: nqwaxgukgF8Xq9/XSnbzS4A0qNDg2rOkehZLUdqXy/U=)
                          2: JNEydf2lKXnao8GrKqno19jXP6w.roa (hash: +0xX0M+yF7B+qU3xPS7RZz2tcDVRNPquvsVNbfH8B2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:32:1f:fb:6a:64:3c:2b:f8:db:9c:69:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=5da04e54c8987ef3ff45da69d986baf3f68818f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:35:57:1a:22:25:a8:07:d1:96:e9:45:6d:
                    4a:3f:15:dc:55:85:d2:a5:45:38:ce:0c:87:8f:d7:
                    60:13:89:c0:fd:f7:44:3c:05:e0:5f:9c:90:5a:a7:
                    6c:00:21:57:ec:8d:1a:d5:18:f2:6a:57:72:52:77:
                    8c:4b:a1:c4:76:43:0b:6c:7c:e9:fa:69:28:d2:b5:
                    41:0f:ee:0b:dd:60:9c:f3:c3:ca:b3:8e:da:fd:9f:
                    37:3a:8b:84:1e:c8:53:20:1f:65:a5:cd:f8:16:95:
                    05:11:bf:5e:f6:2c:e2:2a:e0:b6:e2:30:2f:e9:6a:
                    c1:04:dd:0b:6b:53:74:12:38:70:f4:af:a7:4d:6e:
                    85:f5:b7:2b:c0:1d:d2:7d:11:44:ac:4c:b9:a7:b7:
                    d7:42:d4:56:34:2b:4d:72:2b:4f:56:43:c0:6d:4a:
                    59:77:c6:0e:4a:08:e8:92:81:c1:d6:7a:ab:7e:7f:
                    70:fb:c3:31:f1:b8:81:98:f8:5c:ad:ef:36:7a:0a:
                    ef:e4:78:02:5a:5c:94:5e:bc:5c:3c:b2:b1:35:6e:
                    e4:57:27:36:50:97:f4:cd:78:d0:58:96:c5:7b:b2:
                    71:69:09:4d:5d:20:35:f2:c6:93:c5:02:b4:04:71:
                    90:b0:bd:d2:3e:c1:b6:55:a2:15:99:35:ef:b0:a3:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:4E:54:C8:98:7E:F3:FF:45:DA:69:D9:86:BA:F3:F6:88:18:F6
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:d9:8c:d6:88:69:0a:be:46:c0:94:bc:4b:57:ef:bf:8a:
         01:fc:f1:a8:98:c3:92:3e:8a:8b:1c:92:a1:ca:e4:73:de:a7:
         82:e0:61:66:3c:e7:94:91:7d:5b:e2:c9:6c:f2:34:c4:84:53:
         9b:38:8d:c7:18:88:3d:10:88:6f:64:ed:25:73:eb:06:d7:e4:
         3c:5d:77:54:a0:fd:11:7b:7b:5a:c2:b2:4b:31:ec:e9:82:25:
         84:77:bc:c9:85:38:06:37:c9:07:a9:a6:8f:a6:e9:0b:a5:11:
         77:f4:b2:c4:cf:e7:cb:2a:72:b3:5e:eb:cf:ba:46:95:5c:e0:
         a6:0d:98:ca:37:ab:c0:28:f4:1f:26:95:a3:83:23:89:05:f6:
         e9:40:48:4c:72:d2:f8:89:50:f6:6e:2f:36:dd:a0:d1:2a:98:
         ee:a2:56:86:55:f2:a5:1d:ee:e5:74:6c:8c:93:3f:75:e5:49:
         65:41:6e:bd:86:32:67:af:b8:3b:a0:cc:68:45:9c:87:e0:1c:
         e7:8a:86:6a:4c:b8:ba:6c:02:45:13:cc:ef:3a:2f:06:3f:67:
         13:a5:0a:be:69:72:76:eb:96:ca:bc:57:ff:59:43:54:12:60:
         c0:b2:c4:04:00:51:42:c8:e4:a0:c7:87:cc:15:9e:64:92:5b:
         45:2b:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----