Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File:                     quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier:          1CQYv2DQm7MqWk4Nr6wZBPkaqDC/lTNseT9hDNCyrL8=
Subject key identifier:   04:39:29:0E:0F:E9:61:71:CE:88:FD:34:9E:93:0E:1D:2A:7E:33:71
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer:       /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial:       01962F7451E85AA20E6A506FA0D897089E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
                          2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: xCKX2kyI0uXSDORhcrlrwWeL/db+6jKQ6sKDmh+oRa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:51:e8:5a:a2:0e:6a:50:6f:a0:d8:97:08:9e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=0439290e0fe96171ce88fd349e930e1d2a7e3371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:91:53:e3:6f:e6:26:f1:90:66:a6:19:1f:c2:
                    11:82:ea:d1:ec:9f:98:34:5a:f7:b2:f7:0e:87:63:
                    b1:dd:33:93:0a:66:22:72:81:0b:07:27:d5:0d:59:
                    07:29:eb:a4:73:86:79:c0:4f:44:c3:64:7b:93:1e:
                    e3:53:02:96:0f:f9:6b:08:70:06:76:02:cf:3f:14:
                    cf:5f:b0:af:aa:13:3c:8d:14:c6:68:b8:1d:5d:4d:
                    9d:1b:b6:13:8d:3f:b8:8f:29:2d:e1:55:b5:b9:59:
                    24:89:d5:1c:c5:50:2b:e5:da:4c:5a:16:c5:26:57:
                    2e:de:0b:13:13:f5:01:61:92:77:6b:44:af:97:37:
                    31:3a:05:bb:78:1f:cd:27:30:e8:58:4f:5a:cf:85:
                    8f:cc:12:79:cf:32:69:a6:a0:f1:2e:6b:4a:ec:1b:
                    a8:64:54:99:94:c5:b7:e4:d4:57:6a:a7:f0:5a:56:
                    a5:2f:93:27:c7:74:d7:e6:7e:41:d5:e8:88:e9:a1:
                    a8:8e:9d:50:a0:09:cb:51:66:c3:a7:ba:32:56:9a:
                    df:61:71:6c:d1:e0:c5:87:1a:0b:3a:dd:70:c9:d9:
                    75:f0:bb:9d:42:24:b8:f2:86:4e:5c:8e:62:aa:5a:
                    57:a2:33:2d:04:80:23:81:92:42:5e:d1:eb:73:08:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:29:0E:0F:E9:61:71:CE:88:FD:34:9E:93:0E:1D:2A:7E:33:71
            X509v3 Authority Key Identifier:
                keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:2d:3f:32:20:da:c5:e9:a7:81:57:ff:71:36:f4:00:af:
         f0:f2:05:43:e8:19:74:1a:b5:10:aa:66:1d:ff:e5:60:77:83:
         b7:7c:71:dc:4b:73:eb:7a:3c:d3:51:36:45:ea:91:13:fb:3b:
         32:87:e8:55:a3:28:71:71:df:ff:00:fe:3b:fd:c1:be:f0:88:
         3e:e4:b8:bd:7b:cc:0e:4a:67:6c:f9:ca:1f:e1:74:51:8e:2a:
         20:69:07:9c:dd:ce:0e:46:b1:ec:7d:e2:a9:24:92:7c:98:91:
         8a:67:33:3e:01:23:96:02:7d:c3:1c:25:63:d5:6c:06:9c:8a:
         6c:e9:f8:38:97:e5:aa:09:26:9d:96:ee:18:93:d2:7f:2c:a1:
         32:ba:0c:03:36:29:a4:c2:0a:13:be:74:7c:fe:85:e9:c8:69:
         65:b2:1a:3c:97:6c:89:89:6d:a7:63:e9:e4:41:64:9e:56:e9:
         7f:7b:c1:35:b0:c8:02:00:8e:75:0b:53:7a:64:15:c3:01:80:
         cb:b1:d7:ab:9c:d9:2d:23:16:1c:0e:b4:10:58:f0:07:28:b7:
         6b:42:17:b5:59:7b:f5:df:01:02:68:2f:cc:e0:ab:c3:72:52:
         3a:d0:9e:f4:80:b0:ff:a4:3e:70:4c:70:52:0a:12:18:dd:0c:
         38:a4:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----