Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          PP/7ecm1g9gWBvtD2Kzqx8B2AuKDdUyJansoEym0XZ4=
Subject key identifier:   B7:C2:78:4E:24:E3:52:E5:43:2C:A9:C7:88:D5:0F:54:FE:38:3B:CE
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       01962E61910444E1DCA8752657201A3FE480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: 7HPsOwhEGlZORSTBMq68Zid6V8o/aGwVaoGZwNeiIhg=)
                          2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:04:44:e1:dc:a8:75:26:57:20:1a:3f:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=b7c2784e24e352e5432ca9c788d50f54fe383bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:80:22:f3:3e:75:ab:96:b8:84:a2:89:72:
                    d8:b8:ff:12:52:1d:c4:35:47:c2:69:ee:06:8f:5f:
                    87:3c:5e:97:b7:99:4e:90:fd:70:9b:15:c2:b0:13:
                    99:cb:63:2a:04:33:e8:b6:47:bb:82:a2:cd:d1:59:
                    33:66:78:0a:29:09:60:03:0b:5a:52:e1:6d:d8:41:
                    17:c9:37:02:c1:40:b6:6e:1b:ec:8b:4c:71:76:1a:
                    9a:c1:e8:bb:36:c3:d2:a7:7f:74:a6:82:d0:cb:3f:
                    de:98:f4:15:13:f8:8e:c8:c3:30:f8:2f:ed:41:d5:
                    ad:b8:49:6e:cf:02:8f:66:6f:07:e0:03:5b:2e:c2:
                    53:33:22:39:1e:6b:da:32:d6:47:e8:74:3c:5b:bc:
                    43:d5:96:c9:e6:25:3d:4a:cb:b3:6e:84:7f:38:32:
                    69:0b:08:02:42:4a:0c:4e:90:60:36:38:b9:c6:9e:
                    81:47:12:fc:7e:2d:c8:f9:e9:92:e3:eb:37:34:78:
                    fa:2f:2b:20:74:d8:69:de:28:ba:0f:05:c1:d8:35:
                    59:f4:29:ce:43:a3:5a:5d:a5:47:cd:44:76:91:9f:
                    e6:3a:0a:8c:52:14:dd:bd:9e:cf:92:36:aa:d0:5f:
                    0e:cc:63:b7:7a:99:c5:81:0e:f0:96:78:1d:22:a6:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C2:78:4E:24:E3:52:E5:43:2C:A9:C7:88:D5:0F:54:FE:38:3B:CE
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:96:60:11:3c:1d:27:24:0a:6d:d1:54:db:6c:ad:1a:dc:
         f8:dc:9b:e7:c8:0b:22:8e:6e:c1:0d:7a:1e:af:29:40:4e:45:
         d1:f1:31:1f:9a:c6:ea:90:6d:9b:77:80:e0:93:9b:1f:56:d1:
         a0:ef:4f:fe:b5:84:b0:2c:69:e7:ef:33:78:67:ce:3d:83:e5:
         0d:94:bc:ce:96:73:d0:c2:7b:06:9d:04:03:e6:7a:da:6c:f2:
         27:a0:e8:f9:1b:8a:ad:2f:1a:96:55:89:94:ae:bf:2e:fc:0a:
         38:5c:01:0b:42:b7:93:e4:ed:89:39:6b:26:5c:30:80:76:96:
         22:bd:fa:42:46:4b:c0:f6:3c:28:36:d9:5e:b1:b5:cb:70:db:
         06:3a:77:ec:d1:cf:7b:d9:63:0a:4c:59:42:49:e8:ec:52:19:
         7d:86:17:c9:4d:38:e5:d7:36:bc:e5:02:5f:d4:65:53:26:55:
         5e:24:d8:04:03:28:c6:80:16:71:f1:bd:fe:d2:17:b9:27:da:
         33:dd:4b:1b:82:9c:bf:7b:b0:f1:a4:92:2b:83:4b:ef:06:d6:
         8d:9e:e1:68:77:d6:1f:9c:a5:25:cf:46:1d:51:41:34:c5:48:
         8a:e4:fc:c9:17:2c:d1:7b:00:93:4b:2b:8c:d8:86:d5:04:d6:
         35:f8:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----