Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File:                     qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier:          XhtGSGPzIcSqHQopONsQBbJLM5iuhQkNSlxEp0T3wow=
Subject key identifier:   B5:7B:5B:24:99:E9:4C:D0:DB:A2:67:60:36:7D:E9:AB:94:86:B7:8B
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer:       /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial:       01962E98B844DFABDBA9CDF7C02B957F585E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=)
                          2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: DgHDiuILloh/PZZ3NLM9N3MZD/6uuU+vEGhxlxK+cTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:44:df:ab:db:a9:cd:f7:c0:2b:95:7f:58:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=b57b5b2499e94cd0dba26760367de9ab9486b78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:44:9d:60:28:69:b7:7d:c7:3e:05:05:06:
                    f1:29:09:47:fb:d5:e1:ad:2a:35:59:0b:19:04:ad:
                    72:45:3e:01:55:9d:67:99:c0:ca:3d:ac:08:5a:a8:
                    62:09:cc:3d:ac:46:51:b0:85:d0:dd:eb:68:29:2f:
                    1b:ae:b8:08:d2:6d:6d:97:54:8f:8c:47:89:38:8e:
                    cf:80:1f:6d:6f:f0:a0:eb:08:41:cd:15:cc:4f:47:
                    7b:83:29:d6:03:b0:c6:aa:03:1a:28:f9:0e:70:68:
                    6d:11:b1:7f:e6:59:57:ce:bf:4c:af:ac:18:97:65:
                    e9:19:ec:ef:30:43:b9:fe:4d:bc:49:b7:1e:d3:66:
                    32:20:ec:f8:bd:35:48:aa:b7:58:31:ca:a7:7a:5a:
                    74:b0:e9:2e:70:fa:47:70:4a:27:e7:35:8c:8f:0e:
                    09:5c:ea:33:9e:e0:fe:e4:1e:15:bc:99:2f:90:c4:
                    54:cc:ba:e4:48:38:da:98:b5:a6:90:6b:61:c8:8e:
                    82:bd:85:de:33:62:3f:6f:ae:57:20:68:73:8e:86:
                    64:85:35:5a:2b:d7:8e:04:b4:fd:e2:19:78:ce:a1:
                    60:7c:50:1a:d3:a6:95:a2:02:9c:23:87:f6:73:d0:
                    a8:ba:ec:8d:68:51:7c:ee:ff:e7:2f:d9:71:a3:59:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:5B:24:99:E9:4C:D0:DB:A2:67:60:36:7D:E9:AB:94:86:B7:8B
            X509v3 Authority Key Identifier:
                keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b6:34:c3:53:e5:51:df:91:b2:4a:5e:c4:dd:db:bd:53:76:
         99:d0:e3:5c:de:a5:4e:10:60:d9:6e:3f:6f:ea:e0:80:29:88:
         3d:c8:97:bd:77:0a:f5:19:fb:e1:cf:93:7d:30:04:ba:53:eb:
         55:8e:e2:4c:c0:1e:34:ef:9a:58:09:15:7c:8d:38:cd:60:fb:
         46:24:13:19:91:7e:e3:7a:bc:61:11:d4:4c:38:f1:f6:76:98:
         64:d9:3b:e0:f6:14:09:68:3b:82:30:62:fe:bc:43:fd:99:be:
         09:59:9c:54:9f:b5:b8:44:0a:53:02:75:e7:6d:b8:e5:5a:3b:
         71:22:00:d5:5d:04:98:59:ab:18:da:33:91:29:f0:5d:f5:f2:
         41:e0:f9:d3:b6:e2:92:78:36:37:40:94:64:fd:45:eb:47:ab:
         74:4d:79:d4:73:d9:19:ad:bb:77:67:ac:88:87:52:2e:82:f3:
         b3:58:2b:76:37:f7:30:dc:bb:c9:23:d6:6d:52:ec:06:a4:df:
         93:2b:5c:ea:d9:7a:76:79:ea:4b:37:07:f2:e4:79:fb:73:15:
         51:27:ad:81:a3:85:eb:6b:c1:75:d4:e5:b4:07:14:6d:32:bd:
         f3:4b:11:8e:42:f6:2f:e8:a8:3f:28:4f:e7:b8:73:b2:fd:ac:
         76:26:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----