Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
File:                     dqIj-utMXd95nTyiqWDAbB1tHZY.mft (raw, json)
Hash identifier:          ic/3wdDgdvFpqZ89KEORIyhvp9CAv52tI48HTU8P9MI=
Subject key identifier:   25:53:9C:06:1E:6E:54:E3:33:52:EA:01:94:3B:A6:23:92:A7:EF:A3
Authority key identifier: 76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
Certificate issuer:       /CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Certificate serial:       01962FAB0961D9CD834508FDC284897DFA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
Manifest number:          0A99
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: dqIj-utMXd95nTyiqWDAbB1tHZY.crl (hash: CHIPBaxKwmqZVY1RWoV3VnEKRE+uqJZviypBqq+sJTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:09:61:d9:cd:83:45:08:fd:c2:84:89:7d:fa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=25539c061e6e54e33352ea01943ba62392a7efa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:0c:95:6c:c2:94:41:14:37:71:e5:60:f9:
                    6d:c8:66:6b:89:23:ed:80:0d:3d:88:9b:e5:c4:98:
                    e8:87:70:de:3f:34:63:99:29:8e:aa:be:71:56:d5:
                    e3:49:81:81:6f:0c:75:ce:8d:89:62:06:a7:52:71:
                    55:96:e5:f3:fa:4e:95:19:3c:f7:a5:60:ef:23:f5:
                    60:94:3a:fa:5c:12:30:9c:e2:29:28:68:89:af:ea:
                    bc:56:25:20:d3:e4:9d:e2:f3:04:03:ac:af:c3:13:
                    a3:5e:ab:44:93:c5:29:7d:a6:14:ba:0e:92:5c:68:
                    07:d9:d5:5b:ce:65:2d:53:b9:16:0a:a9:70:12:fa:
                    90:16:1f:31:d4:01:76:d2:7d:66:17:37:a2:a4:d0:
                    1c:22:3f:61:c6:f2:f6:ba:9c:7c:a9:a8:39:e2:1c:
                    b8:2d:e4:0f:01:49:09:61:2c:4f:35:25:36:fa:aa:
                    88:8e:8c:ca:ea:58:72:9c:23:eb:cc:9d:66:e8:be:
                    3f:e8:d5:90:df:2b:59:7f:3a:a7:37:8a:74:bd:90:
                    d5:6f:fd:6e:32:83:ec:9e:e3:7c:ae:c5:c6:15:70:
                    b5:4f:9e:55:fd:e8:3c:28:b9:a4:76:a2:7d:7e:d2:
                    3a:7a:f9:be:0e:92:43:41:35:91:2f:fe:61:c2:d2:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:9C:06:1E:6E:54:E3:33:52:EA:01:94:3B:A6:23:92:A7:EF:A3
            X509v3 Authority Key Identifier:
                keyid:76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:a8:c1:0b:08:97:95:d1:42:e0:61:d7:f8:f7:b9:dd:13:
         fa:66:7c:1c:21:e1:4e:d7:fa:0f:44:f0:f3:6b:62:d6:6f:5f:
         de:bb:4e:0b:d0:7f:f5:d3:16:95:a2:ae:ac:2c:05:80:4b:b7:
         1d:b2:e6:e2:63:1d:42:82:c6:24:b1:67:08:78:23:fa:8e:40:
         d0:9b:ae:4b:75:9c:28:1a:6f:a0:42:44:36:72:1c:f8:85:48:
         ac:20:1d:ec:e2:30:52:ee:cd:1e:08:db:41:8f:8d:ee:cc:eb:
         3f:e4:8d:ba:b6:92:54:6e:68:1c:cd:7c:cb:77:19:69:88:80:
         ba:7a:a5:75:6f:d6:5d:c1:46:e6:f3:1e:60:b6:9f:e9:28:c3:
         ca:59:5b:f8:5f:cf:3a:59:bd:dd:22:ca:2c:e0:88:11:45:3b:
         7e:6d:c3:b4:ec:72:14:a5:d2:d2:ac:8b:6a:81:e3:31:b3:5b:
         3c:90:c4:6c:1c:02:ad:d8:93:a4:bf:47:02:c2:8f:0d:cd:35:
         01:2e:af:da:aa:d3:10:36:d3:77:bc:ad:bb:58:31:35:e5:c8:
         44:9f:1c:b4:a6:50:a5:cb:89:57:85:c2:dd:d9:22:04:81:0d:
         9d:3e:fb:bf:cc:b6:9c:88:30:df:9f:fb:69:8a:dd:24:c8:b5:
         fe:54:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----