Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File:                     cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier:          nsB8TY4Wq9Ck8LsDh/B1NxnHOEcrD6co9y3PX7T+nF0=
Subject key identifier:   8D:D0:A3:83:BE:90:E3:1F:50:FE:E2:2F:8F:A5:F9:FE:FA:B9:B3:63
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer:       /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial:       01962F744ED16190C3B76306887F306D84DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
                          2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: 808SC2BzDa+s6ZhTTiD+Lqrphyr8dSF/9dUhipNwjQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:d1:61:90:c3:b7:63:06:88:7f:30:6d:84:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=8dd0a383be90e31f50fee22f8fa5f9fefab9b363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:a7:7d:c5:12:d6:7d:73:72:ce:d6:78:4e:
                    fd:2f:98:69:e3:5f:2f:61:3b:ef:00:b6:5a:bb:62:
                    53:5d:db:ef:ec:0c:32:3c:7e:a3:ba:58:54:9d:c9:
                    88:7e:16:6a:68:b1:47:fa:b3:00:6c:e3:95:87:ea:
                    1c:95:f4:47:85:8a:98:d7:c6:42:e9:69:c1:ea:2d:
                    36:0d:7c:4e:44:15:49:f2:58:e0:ff:1a:85:2a:1c:
                    35:c9:ed:22:99:12:93:3b:e7:9b:09:80:8d:cd:ef:
                    b8:a6:f3:6c:f9:f8:c1:06:46:a5:14:42:28:13:03:
                    92:e0:7c:4c:08:34:2c:f5:d7:d4:2d:c7:1b:cf:83:
                    0a:0a:83:3c:dd:0d:27:1b:12:f3:c8:c8:4c:7d:e6:
                    3c:01:d2:5a:9d:f0:95:5b:c5:f5:24:65:25:c6:84:
                    df:b7:12:69:0b:cb:be:99:36:10:21:75:01:60:6f:
                    f3:92:a9:89:8c:bf:ed:29:c8:5f:57:57:95:6b:26:
                    ac:cb:84:aa:5a:51:9f:1c:8f:f0:0d:e8:4f:a2:2a:
                    69:99:3e:20:2a:59:9c:74:bb:40:ed:92:0f:9f:1b:
                    88:c6:61:64:ed:7f:3e:bd:ab:2a:49:80:bd:60:e6:
                    a5:39:81:7d:2d:17:74:d7:28:03:15:08:54:11:5f:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:A3:83:BE:90:E3:1F:50:FE:E2:2F:8F:A5:F9:FE:FA:B9:B3:63
            X509v3 Authority Key Identifier:
                keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:06:a9:cf:a5:22:1c:42:77:7e:03:19:aa:c5:57:41:f9:
         93:3a:d5:e0:24:d0:5d:3b:f1:70:b0:89:1a:e5:31:5a:3e:3b:
         88:a1:c9:f1:f8:f7:08:07:69:9b:cd:ba:c0:4f:49:d3:8b:9c:
         3d:19:3c:50:32:f5:37:e8:7f:e1:60:ab:87:43:b2:71:de:9e:
         29:74:a3:95:a5:68:54:74:bd:58:5a:b5:11:18:00:78:e7:2b:
         8d:1b:ec:b9:f0:be:a5:56:f5:b7:0d:53:16:40:46:fc:30:44:
         51:33:69:dc:d1:6f:76:6f:cf:6f:01:4e:61:cb:22:78:e3:d1:
         fc:66:94:4a:35:ed:15:8b:a0:d4:7b:0d:f8:55:8a:a3:2b:6d:
         8f:2b:4c:35:58:e3:bf:a3:12:d3:7c:52:55:2d:2f:e5:0b:bc:
         b5:ca:27:92:f6:ff:76:7e:80:17:50:95:28:02:d1:71:b8:a6:
         53:c9:76:ad:2b:db:92:94:9f:e9:ba:ca:39:54:8e:17:3a:42:
         17:48:f7:79:f3:d8:56:b6:de:07:92:ad:b5:a9:de:a1:a2:8b:
         81:6d:c1:73:74:d0:6e:28:d3:0d:80:71:90:1d:97:60:ad:96:
         43:b6:a8:d7:e0:a0:92:6c:27:c5:a4:7e:23:e2:7d:5f:ab:5a:
         52:dd:12:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----