Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File:                     qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier:          Jcynbgx3rkG+OKYT0s6GKMeu8KC80e5Nu5AbOm7HRy0=
Subject key identifier:   C7:B1:97:B9:7A:58:4A:FB:B0:D2:75:73:06:C8:7A:87:13:9F:C3:20
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer:       /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial:       01962DF40C4DD71A4149F0B017978C16DF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number:          08DA
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
                          2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: lWXi7mnfL79mUKxIntxsQmUKfPs7FD+vUw8VJrrTzFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:4d:d7:1a:41:49:f0:b0:17:97:8c:16:df:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=c7b197b97a584afbb0d2757306c87a87139fc320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:bd:24:f6:31:a9:c9:08:6c:f5:de:05:4b:
                    98:d0:ef:3f:e9:74:09:1e:19:cb:fe:f8:e2:2a:22:
                    57:db:8c:25:6f:15:8c:25:54:19:8d:f7:72:ea:c8:
                    7e:9d:88:e0:95:07:84:ce:31:1f:84:b7:66:1b:93:
                    ae:8e:07:53:ec:ee:9b:fe:bc:7c:7b:5e:ff:ac:8e:
                    5f:48:9b:7b:53:82:e8:13:f2:c2:80:1f:06:4b:8b:
                    9b:b7:48:9a:6f:04:41:b1:f5:32:e6:42:6a:46:2f:
                    8a:5b:fc:1a:f1:91:9e:57:cf:f5:0b:7f:98:27:2e:
                    e9:40:1e:87:48:a4:fd:ee:77:3d:77:22:f4:a7:d5:
                    dc:c7:19:c7:13:eb:72:f0:16:7d:ed:ed:48:ce:1f:
                    ee:36:21:82:4c:fd:06:ce:85:57:3c:4b:bd:a9:d6:
                    29:ab:84:d4:de:83:c3:fb:57:06:09:4b:62:eb:fa:
                    a1:71:0a:d4:78:98:64:98:0e:4b:1d:69:65:2f:e6:
                    da:ed:2d:b0:de:1e:18:03:b6:5c:18:d0:78:9f:39:
                    8a:7b:dc:ab:7a:e9:a3:1e:41:49:04:7c:9b:c7:d5:
                    86:0d:f9:98:f0:13:77:27:1f:76:ae:36:9d:08:45:
                    f8:ef:40:ae:62:a2:ce:c4:ca:1f:2a:29:75:30:51:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:97:B9:7A:58:4A:FB:B0:D2:75:73:06:C8:7A:87:13:9F:C3:20
            X509v3 Authority Key Identifier:
                keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:4d:08:9b:20:7a:a5:da:3f:8e:81:af:78:1b:eb:68:18:
         ca:fe:43:76:7d:9c:8b:1e:ab:02:3e:df:d2:b2:7a:dd:87:dd:
         e6:a2:67:22:55:8d:30:34:35:38:63:94:31:95:24:67:1d:7d:
         a0:b7:d2:7f:8f:75:82:eb:6d:8f:d2:51:c1:fa:50:b4:2e:99:
         e8:6d:3c:99:2f:74:23:70:7d:36:4b:a9:5d:ab:39:2d:2d:f1:
         e9:e2:64:4a:46:04:49:b8:24:a3:9d:54:6a:67:4c:00:13:61:
         ba:43:2b:b9:6d:51:ef:89:79:81:1b:cc:e4:92:ef:2e:bf:10:
         57:e3:c7:5e:23:fa:b2:dc:12:c7:d9:f5:59:b7:54:a8:94:ac:
         bd:c7:ff:d1:59:c5:11:bb:cf:98:27:0a:34:83:30:16:f8:d3:
         2c:79:cf:da:fd:9e:67:2a:ed:f0:be:bf:50:b4:11:9c:e2:a5:
         ea:ca:70:87:83:d9:8e:2d:43:7f:9e:7e:fc:7d:a7:3a:13:96:
         f6:1b:c9:46:01:03:cc:b1:f9:a1:e7:2b:4f:a0:f1:75:47:e0:
         9a:0e:af:ed:1c:2c:66:4d:5d:fe:7c:a5:1b:2f:d0:b4:df:08:
         30:af:aa:98:e9:00:59:68:56:d1:55:f9:a8:54:d0:a6:af:fe:
         82:ac:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----