Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File:                     qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier:          Lon+3FCSE2f582tSLmTbe7OWYMQrkYKILRFvFcCF0Ic=
Subject key identifier:   7B:F3:FB:9B:70:E5:A3:F7:77:A0:9E:A0:92:74:F3:D5:B0:E8:13:61
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer:       /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial:       01962F3DCCFE806276AAB4BD43A7896C7D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
                          2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: GVYxiJSzFXXrMc3O8qsD1rVica1E8fwp9wqEum/AFGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:fe:80:62:76:aa:b4:bd:43:a7:89:6c:7d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=7bf3fb9b70e5a3f777a09ea09274f3d5b0e81361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:ef:cd:40:85:22:8d:7e:4e:b5:41:66:a5:
                    3f:76:f5:9a:f0:16:0a:82:38:46:bb:12:c5:3f:2d:
                    2f:23:3d:73:9e:f0:25:90:4f:e3:52:f4:f4:f9:b6:
                    c6:00:b1:d0:a2:6f:75:7b:13:be:b6:cf:21:2d:5c:
                    eb:99:e0:eb:66:48:88:45:76:f8:42:19:d8:95:d4:
                    f5:6c:d7:ae:b6:da:ab:df:b4:d4:d8:56:2f:ff:cd:
                    94:8d:78:86:99:64:0f:b4:45:1f:c8:a0:ae:23:93:
                    f6:89:cf:f1:8c:70:f3:d5:2f:e4:18:1d:0d:1d:80:
                    b2:be:d6:8a:66:bd:be:3d:a3:e7:e6:19:ed:ce:31:
                    52:0f:ee:cc:f9:b8:2c:f3:39:48:ca:e4:32:9b:b7:
                    34:a5:74:05:92:c3:a3:cf:5e:98:1d:12:ce:1a:13:
                    95:4d:ea:af:88:fa:33:cb:98:33:0d:76:67:0f:20:
                    85:28:82:f9:65:ba:75:ba:80:b6:1e:78:4a:77:ee:
                    49:28:f8:af:43:68:bb:22:6e:78:d3:44:8e:e6:52:
                    08:e6:67:75:83:aa:35:28:1f:e5:95:ba:89:69:c7:
                    99:cf:32:c3:93:5f:d6:84:66:27:f2:a0:3e:9b:06:
                    a6:8f:c3:2f:a5:f0:34:7a:71:66:06:bf:d4:1a:81:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:FB:9B:70:E5:A3:F7:77:A0:9E:A0:92:74:F3:D5:B0:E8:13:61
            X509v3 Authority Key Identifier:
                keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:df:be:a7:0d:6f:48:65:b8:ce:2d:af:c5:83:9b:74:8c:67:
         de:2c:e3:b5:9d:dc:76:9a:6b:92:87:b2:82:33:ce:62:49:3a:
         16:f9:ad:57:1a:e3:d7:9f:9e:d8:da:91:a0:fe:f8:db:62:7d:
         d7:fe:d3:4b:f9:88:83:c7:c6:f9:97:32:fa:89:bb:05:f1:1f:
         b9:af:b7:86:13:5b:d1:4b:50:ca:b0:9a:80:00:f0:69:ce:7f:
         a3:f2:d2:1a:6e:4d:fa:a7:32:10:92:aa:ec:59:04:08:e6:57:
         20:cf:87:48:87:fa:2f:ee:09:94:0c:73:ad:2b:67:37:18:44:
         1d:e0:10:c6:9a:5e:2b:0b:9f:cb:03:7d:23:98:19:e7:78:a0:
         11:65:06:16:1e:b4:0b:b4:0a:a8:21:08:b6:e5:a4:33:07:df:
         fd:b0:64:4c:32:6b:f9:36:a8:41:79:85:11:20:ac:52:2e:ba:
         37:00:ee:38:7a:3f:4e:cd:e0:0d:ab:76:e9:45:84:43:90:96:
         6a:f9:1e:1d:ca:c5:eb:e8:37:d5:56:9d:f0:c5:59:5a:ce:27:
         94:68:00:b7:aa:43:84:40:19:cd:e5:70:ad:f2:16:f3:5d:3b:
         11:49:89:49:ce:c6:a2:c1:f9:d1:8e:72:f2:c7:ca:f0:e2:3f:
         8c:ae:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----