Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          9PiDHidDcpp0HOJekUGGDGnD/961koHvIwMu8xLsf6Q=
Subject key identifier:   A1:42:D3:C3:21:DD:03:FB:7F:C0:2B:0E:F9:F5:CF:15:12:2D:44:72
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       01962E61A4C2F254FF4780A831E408847569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          069A
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: xKbRshQ1BV9S9Js6oI1f9Tgc6PAzYixslak/5v2ThDI=)
                          2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:c2:f2:54:ff:47:80:a8:31:e4:08:84:75:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=a142d3c321dd03fb7fc02b0ef9f5cf15122d4472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:39:61:cd:35:35:34:92:56:2e:8c:8e:82:
                    46:32:09:f2:47:0b:79:36:23:41:84:8d:69:3b:32:
                    80:13:2e:05:fe:c1:1b:ee:9b:f4:54:af:f8:28:c9:
                    20:0a:eb:47:3d:e4:6a:71:4c:d4:33:71:57:7b:84:
                    fd:7f:43:ac:b2:97:4c:a6:de:40:c1:94:e8:fa:89:
                    04:98:c9:08:03:95:14:4a:7c:1d:7d:4f:1a:2c:b6:
                    f6:1b:a7:c0:86:aa:c4:88:13:84:1a:60:60:5b:ca:
                    6a:6c:ac:67:8e:76:2c:6e:d3:be:6c:62:e3:a2:ac:
                    f5:fd:03:2a:a7:25:90:bc:3b:b5:de:a0:ca:dd:b2:
                    12:7e:ad:7b:29:bd:de:2f:2a:69:91:db:48:5c:07:
                    f0:2c:6a:59:3c:10:cb:38:0c:6c:47:78:66:35:14:
                    2b:6b:5e:b3:bb:7c:05:bd:fa:ce:7e:5c:f5:bd:f5:
                    fe:7a:5b:e1:cb:7b:e4:e2:90:f1:74:46:a4:ed:03:
                    74:f4:a8:1a:05:ef:09:76:25:55:0b:75:fb:02:fa:
                    ea:a0:1f:92:4a:2c:a8:33:d8:74:2d:97:fa:a2:b3:
                    55:f8:5c:06:e9:76:29:97:ef:45:be:1f:74:6d:ad:
                    19:a7:39:df:bb:31:96:13:05:d2:12:a9:17:86:14:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:42:D3:C3:21:DD:03:FB:7F:C0:2B:0E:F9:F5:CF:15:12:2D:44:72
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:a1:e7:bf:f2:f5:33:17:86:82:0a:f7:2a:8d:29:93:17:
         98:76:f2:66:8a:1c:d6:0b:d2:8e:49:65:83:ec:d8:5d:82:5a:
         a8:67:1a:3c:3b:94:d9:b5:b3:f9:df:2e:6e:ad:b4:8f:85:28:
         d5:8b:b7:d1:b8:aa:58:01:29:39:84:66:2c:25:f9:72:74:a6:
         a2:fb:a4:75:a5:7c:58:3a:2e:94:f0:a6:1d:97:16:95:bd:3c:
         3b:28:a3:ab:9d:22:de:6b:9b:4b:91:21:64:8a:4c:48:b2:ea:
         9d:ac:da:d3:70:3b:aa:f4:33:ff:a3:df:65:70:aa:38:3e:c4:
         48:19:1a:8e:c3:05:64:c6:e1:ca:eb:f0:26:d7:5c:e0:04:90:
         54:cf:54:25:58:05:40:64:2d:09:05:5d:46:d9:6d:2e:dc:2e:
         c1:9d:43:24:e7:2e:ab:42:44:83:30:dd:e7:b8:d2:5e:1e:fc:
         b2:87:86:73:28:56:30:f1:1d:f4:d3:cc:75:fa:db:e7:46:22:
         07:67:0a:6b:da:bc:d6:be:14:86:31:5d:b3:b6:e0:bf:f2:d5:
         ae:a0:04:ab:cb:3c:99:fb:87:05:52:49:47:93:0d:01:cf:e1:
         cc:5d:df:c7:55:4c:76:aa:c8:45:39:1d:d3:81:64:f3:c3:eb:
         5f:89:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----