Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File:                     qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier:          T++4OMl75nhkhspIN3Axt6f4zW8M+psD5YA6dJbyr3I=
Subject key identifier:   92:FC:AD:DA:38:09:AC:A4:E1:38:B1:41:B7:F1:58:3B:02:D6:9E:15
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer:       /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial:       01962F748E9E539C56FC839125DB63551A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number:          01E5
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: Lh_NKL7D2mWFyhzHGugt5SgY5Oo.roa (hash: DjvsQWCGurUIzxMM5VASKrLIiSf6rVM8+QHojBeXG6I=)
                          2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: jA1/hTVZ3Gzb5Q2RCT8UKoe59vjdKV6M6Ba9QfqIuUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:9e:53:9c:56:fc:83:91:25:db:63:55:1a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=92fcadda3809aca4e138b141b7f1583b02d69e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:8c:08:15:4c:1a:77:53:91:8e:b5:99:83:
                    0f:34:08:44:e5:85:2f:21:b8:76:73:bd:92:41:1c:
                    3f:90:2c:25:bc:e3:e6:03:42:b6:00:2a:db:9f:a7:
                    42:cb:30:f0:f8:a7:6d:59:3d:3d:9f:71:0e:38:46:
                    b9:e3:dd:f0:56:d5:74:94:c1:b7:3b:1b:cd:ca:6d:
                    27:ea:5b:c0:0d:8c:a3:44:ce:69:fb:cc:f4:10:1e:
                    57:eb:ee:b1:bb:af:5c:81:ba:ce:ad:5e:2e:2c:3f:
                    db:76:9f:72:e4:c8:50:29:7d:33:6f:be:02:ad:9a:
                    26:e7:5e:04:7d:2d:cf:34:5b:9c:a4:33:66:06:42:
                    2d:74:6e:ca:d7:c9:ca:c8:54:a7:7c:56:2c:d5:34:
                    16:bf:48:a6:85:14:e4:04:2f:9e:a6:7a:c8:6e:d3:
                    f4:a1:b0:85:ed:be:94:07:cb:f7:53:c0:10:96:de:
                    c5:ec:d9:71:32:7a:8c:f5:0f:3d:6d:b7:b7:93:0d:
                    58:b7:47:50:5c:d4:c6:bf:60:90:ce:e7:58:14:aa:
                    a6:3a:88:f3:e9:6f:c6:ad:81:57:d8:00:f3:2b:db:
                    1b:99:52:38:d8:b3:60:00:39:d8:01:bd:f6:5b:da:
                    3c:f1:70:d0:84:95:77:ee:2d:b9:36:5d:4d:8d:dd:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FC:AD:DA:38:09:AC:A4:E1:38:B1:41:B7:F1:58:3B:02:D6:9E:15
            X509v3 Authority Key Identifier:
                keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:fe:40:ad:ef:9d:07:ed:d1:59:43:c6:09:90:a1:29:0a:2b:
         44:a6:7c:d8:23:de:82:3f:21:19:4c:9d:12:c8:c6:cf:55:cb:
         07:05:a4:f3:63:0e:d1:e1:0d:7d:15:ad:ae:01:d2:f0:29:e1:
         73:e4:72:be:cf:8a:f9:ef:1d:f5:dd:f8:7b:49:a2:42:6b:a0:
         0e:00:2c:61:66:b1:f3:1a:0e:c3:d6:a5:53:15:12:84:82:84:
         88:64:c5:b3:4c:c2:72:42:2f:1b:68:4e:96:d7:48:6e:76:91:
         bf:1b:a4:10:d1:f8:04:91:4e:da:c9:61:54:84:f0:dc:14:5e:
         2c:44:e0:d3:10:99:a0:14:fc:23:fe:96:ab:ac:4f:f2:b6:62:
         6c:0e:50:3a:aa:30:80:55:12:05:ad:42:65:94:04:6b:07:e5:
         20:f5:8b:5e:f9:57:67:85:56:55:c7:93:9a:74:ef:53:43:70:
         31:f6:b6:dd:50:93:e7:48:19:68:ee:0f:1f:0d:40:6b:a9:51:
         cd:9e:b2:55:65:8c:06:fa:63:77:ca:bf:12:bb:33:ea:44:5f:
         cc:e6:7e:ca:5f:28:e8:25:09:6c:a8:47:73:15:90:7d:30:02:
         f5:06:ad:e0:ec:24:ef:ea:b8:d2:b8:15:ee:85:97:a7:13:3b:
         9c:95:40:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----