Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File:                     Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier:          1oqER59SnQftzaQ3IjEZdPYnybPCgZYQCWC5p+yO+14=
Subject key identifier:   91:81:5F:8F:BC:6B:93:79:FC:8F:FC:E6:B8:B5:D8:27:57:C5:77:EA
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer:       /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial:       01962F3DA2E7A3E4199A019A88B16B5DEED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number:          1446
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 5sMxgmIczAQ4fn8JJ0_j3DrMjS0.roa (hash: VTfvZnzv8Q2Rd2Q6njhUyXmObqB+4ygm6Iue4TDP3ic=)
                          2: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: mYCX/jly1hvdbJnJU8OfeqVp19gAh0n98kAb9H+Gr2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:e7:a3:e4:19:9a:01:9a:88:b1:6b:5d:ee:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=91815f8fbc6b9379fc8ffce6b8b5d82757c577ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:84:47:94:3e:dc:e0:09:f9:61:1b:4b:0e:
                    62:81:77:4a:ba:26:79:db:b3:c2:ec:bc:9d:77:05:
                    cf:61:ef:c1:d2:ca:80:c3:44:27:f2:75:a1:29:c1:
                    ea:86:43:00:b7:6d:0d:84:9b:fd:c6:cb:94:4c:db:
                    41:31:d3:00:e9:4d:9b:64:8b:be:42:36:5e:04:1a:
                    dc:f8:89:e5:6c:9d:ce:ee:08:a7:9e:bc:e4:89:3b:
                    9e:6b:41:8e:99:07:4c:a5:2b:ef:4e:3a:b6:97:d8:
                    60:79:d5:be:1a:7a:38:07:82:2a:ca:62:05:d0:3a:
                    6b:bd:85:e1:99:5c:e4:f5:06:d9:10:ef:60:4a:b7:
                    1d:ac:c4:60:60:72:c5:b3:49:bb:b1:c5:e7:ca:b2:
                    0e:0e:15:0d:4d:31:39:a4:83:77:70:2e:07:14:4e:
                    81:84:7f:75:2e:9a:8b:38:ad:5d:f7:7c:c6:11:4f:
                    7d:5b:65:a6:93:31:5d:5e:af:92:9c:23:8b:05:45:
                    0d:46:41:9f:96:fa:16:b9:b8:d9:71:30:5e:61:b0:
                    c0:a7:05:48:8e:30:83:bb:b2:33:26:a8:1e:95:c5:
                    b2:5c:56:39:09:29:8a:42:96:74:73:f2:58:46:a4:
                    65:5b:75:c7:15:d9:74:d7:db:3c:d4:e8:0a:a8:96:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:81:5F:8F:BC:6B:93:79:FC:8F:FC:E6:B8:B5:D8:27:57:C5:77:EA
            X509v3 Authority Key Identifier:
                keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5d:73:63:64:a6:c5:a5:cd:08:1c:29:77:76:c0:80:a6:ee:
         b7:dc:1a:9b:59:19:3c:97:32:ae:0d:cb:ca:0d:ec:d3:05:f1:
         5e:b3:e9:02:e6:77:a1:4a:3b:d1:d5:99:b0:0b:b6:7e:ff:37:
         30:8e:af:71:bd:70:2f:2a:b7:a8:80:22:51:0c:d7:23:b1:9a:
         86:2b:36:92:8e:86:3b:c7:8d:e9:79:af:b1:66:71:a2:ed:32:
         7c:58:39:a1:52:56:98:0c:98:61:40:fc:24:d3:9b:bc:12:76:
         80:94:a3:d5:be:f9:e0:a3:dd:85:98:21:04:eb:03:dc:4b:46:
         c8:ba:93:80:77:0d:6f:ad:d5:17:10:fa:23:ff:22:9e:d3:31:
         54:5f:2c:fd:7c:6f:83:8e:4e:c0:97:57:a5:9c:b3:18:ac:88:
         2e:e2:cf:fd:ac:9a:f1:58:c2:04:90:bb:61:e2:a5:e1:74:e3:
         8c:de:b7:75:2e:a4:5b:06:15:91:d5:fa:1f:69:4b:bd:e8:94:
         40:72:35:7f:54:0e:1e:66:8b:b5:93:35:06:75:40:9c:88:7c:
         26:86:a5:25:70:de:a5:97:a3:e5:ff:a4:58:d6:48:c8:35:51:
         6f:8f:14:0f:1d:ea:e2:bb:74:6d:8e:fe:c9:6d:65:08:01:7b:
         a8:01:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----