Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          Dc46XpobfNIxqlPngoVLf0I6mrbXn+G+dF4Qa9fxE9A=
Subject key identifier:   56:88:28:36:D0:62:A1:86:15:A2:CB:03:A0:D7:27:C4:BD:85:C5:7C
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       01962F74C5B4136702E9EFF863C46C14E6B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          08F9
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: h2C/AVkdP2z3QLJkHoqWzUzYQu8m3E/wkHBgFsLN3ic=)
                          2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:b4:13:67:02:e9:ef:f8:63:c4:6c:14:e6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=56882836d062a18615a2cb03a0d727c4bd85c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:43:c9:ab:26:c9:f7:0c:47:e6:c1:44:dc:
                    d3:a8:25:92:dc:dd:fa:af:04:08:96:6a:13:ab:2f:
                    28:7c:76:aa:e9:d4:8b:19:ba:6a:c8:10:c7:19:cc:
                    8d:a6:b0:de:3e:17:5e:02:3e:6a:0a:39:1b:dc:81:
                    2b:29:48:ea:66:d3:f4:84:c7:af:de:52:8a:2c:d7:
                    2c:c5:33:77:59:8d:bc:bb:d8:d3:c5:73:f0:2a:7c:
                    db:60:1e:43:dc:9a:c0:a3:7a:8c:9e:0b:d1:03:71:
                    26:b6:a1:be:54:4b:73:bc:7f:af:04:8c:ba:31:14:
                    f1:9a:02:49:71:72:97:7f:39:55:93:ad:80:69:18:
                    b5:a0:6b:ec:ff:74:0d:c2:21:94:e9:1f:e2:41:81:
                    69:ad:a8:21:13:0f:0d:bf:a5:49:7f:57:c8:01:f4:
                    a6:0c:91:cb:1a:10:b5:13:dc:f1:9a:bb:b9:a8:b5:
                    bf:0c:49:69:89:d7:ad:1d:83:d3:89:ed:98:c5:d0:
                    61:6b:fd:e9:77:da:32:3d:47:50:d9:9d:63:43:76:
                    a6:ba:09:57:1f:94:6d:b0:86:83:69:0e:05:fe:0d:
                    c3:ff:32:04:46:de:95:bd:e1:c5:26:05:de:0c:23:
                    9a:1b:cb:bf:6a:8d:3f:df:4c:f8:77:2b:22:98:3b:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:28:36:D0:62:A1:86:15:A2:CB:03:A0:D7:27:C4:BD:85:C5:7C
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:04:a5:83:a7:00:74:e3:83:72:33:c4:7f:6d:19:8b:07:
         1b:e9:72:49:8f:37:fd:7e:f3:38:01:61:60:aa:db:c8:ca:26:
         21:fb:93:8b:3a:52:a2:ee:90:76:1b:49:a1:2e:e5:db:bc:0c:
         d1:f8:65:2c:65:06:a8:36:bf:34:f2:3a:9f:67:5f:8f:11:2d:
         e2:ba:9f:d0:83:cc:23:a6:04:6d:31:59:c6:ed:3a:75:0f:19:
         8f:f3:e9:77:11:6b:8f:58:59:c7:70:5d:b0:a2:76:89:b3:93:
         55:f5:f4:ca:ff:e6:69:4c:23:a2:14:08:ec:74:85:35:98:68:
         92:d4:3a:07:15:bd:3f:32:40:6e:26:87:5d:e4:67:d1:8c:a3:
         92:ce:84:ff:d3:ff:00:9d:0b:55:47:6d:a3:60:ba:5c:92:e7:
         21:fe:ac:8e:15:38:5f:a7:4c:fe:e1:e0:a6:09:15:fe:6b:b5:
         cc:a0:2c:2c:4b:b0:fe:0b:17:a0:a8:6b:58:44:4a:48:da:08:
         f2:ca:44:c4:e9:57:2a:0f:45:47:0a:3d:bb:94:19:a1:c8:c8:
         0c:4a:a7:b0:88:98:7c:d2:ab:ee:b8:bc:52:e3:11:12:bc:73:
         e9:04:6a:8d:14:75:25:46:1c:02:21:06:b6:5d:54:b5:e3:11:
         93:0b:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----