Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File:                     tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier:          247yLgjaN3Yk6xBK5/FWxZQRFac6x2LWOg9tkvapGIo=
Subject key identifier:   AA:95:D9:ED:B2:45:81:C4:FF:9A:23:E8:A3:F0:6D:76:78:C5:F6:62
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer:       /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial:       01962F74F47B72FE9B710EFD28954A904C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: m+6MrB8IJlESCHoVuTj0WIRMyyF+IYJWRBvt6M6u8Bg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f4:7b:72:fe:9b:71:0e:fd:28:95:4a:90:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=aa95d9edb24581c4ff9a23e8a3f06d7678c5f662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:ca:13:1a:45:7e:88:2e:45:71:33:df:19:
                    4b:75:d3:cc:55:1b:8d:86:5c:fe:51:f5:33:db:51:
                    25:61:33:ca:a3:b2:b2:1e:ce:67:1f:b6:8a:e3:ae:
                    b4:53:4d:5b:61:3b:53:ac:27:87:82:d6:b6:79:57:
                    ff:79:25:75:07:c7:f1:ad:40:05:d5:b1:38:dc:fc:
                    0b:68:e1:a4:7c:63:34:70:07:dd:da:53:c5:8f:7a:
                    90:9b:3e:bc:8e:88:90:f0:cd:78:57:b5:81:ae:9c:
                    09:87:6d:21:40:7e:1f:a2:dd:cc:8d:b2:4d:f1:29:
                    72:2f:ad:10:3d:cf:69:07:b5:a4:8e:70:f3:29:d5:
                    7a:11:57:67:37:cd:e3:30:7e:11:82:31:eb:39:4f:
                    3f:bc:db:b2:11:e4:c9:ee:3f:56:60:f0:c6:0b:24:
                    75:20:44:25:85:70:f0:19:58:35:65:f2:8d:dc:d1:
                    b4:19:f8:cb:b6:46:5e:c8:56:05:cc:85:84:16:36:
                    6c:df:2c:52:ab:e9:76:42:9b:ca:b0:72:f4:95:c1:
                    90:e2:fa:ed:af:3b:a8:27:e3:02:5d:ff:b9:e4:af:
                    c1:2c:cd:69:c5:63:80:eb:f7:2e:b4:bc:13:cd:ee:
                    51:c9:a9:f0:46:13:0f:48:69:1d:78:9c:14:71:bb:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:95:D9:ED:B2:45:81:C4:FF:9A:23:E8:A3:F0:6D:76:78:C5:F6:62
            X509v3 Authority Key Identifier:
                keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:16:e5:61:7a:ca:bf:f5:ec:2f:c2:34:7c:56:47:2b:d4:
         f7:0b:31:f7:2f:c5:f3:d0:30:2c:cb:cf:4e:3d:2e:c7:fc:e6:
         c2:f1:73:63:0e:cd:15:e3:e0:48:97:2b:00:43:a3:54:42:f4:
         e7:86:95:d6:59:1e:6e:a8:da:be:b1:46:8e:0f:c2:9f:97:75:
         99:af:6a:d1:7c:a6:63:cd:17:86:b8:ae:35:d3:ec:83:af:ba:
         e2:bb:3d:cc:3a:ce:d7:69:4c:ca:c0:15:c1:cb:6f:e0:33:33:
         f8:a2:e4:17:88:2f:29:b7:ce:2d:fd:e1:51:86:1b:69:19:c6:
         45:50:8e:b3:56:3a:b6:32:d5:c4:f0:59:7e:48:5b:db:ff:7e:
         2a:ff:0e:58:49:8e:ad:52:e1:8d:db:e6:2c:00:e6:8f:6d:8e:
         10:dd:34:8d:c9:9b:e2:0f:b7:9d:bc:a9:63:4b:8d:f6:2c:35:
         79:0f:7a:eb:24:d0:e6:9c:17:17:9d:9e:a6:f3:fb:b7:b9:0d:
         e5:54:83:bf:d6:b5:37:a8:d4:be:da:f2:00:dd:10:8e:d0:3e:
         e2:23:43:2a:cc:b4:5e:4e:f1:8f:49:07:fd:f8:a5:08:8f:fa:
         f6:9c:e9:61:84:c3:0a:06:03:74:b6:07:9a:b5:7f:58:55:7f:
         0a:68:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----