Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File:                     6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier:          1GUQ07goq1YaSYvJFY+AwjwxxwYDmtqdJ5JdtRbHvls=
Subject key identifier:   2E:DD:C4:3F:32:F1:48:D4:4C:47:EB:5B:C0:F7:E7:43:6D:55:9F:EC
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       01962DF3BDAC78FA957C45AEA51D8079B521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: 2eSwfiZ16lP7jK9UuJOnpStmJO7C2aQyJaZNrFS0Zfk=)
                          2: QkQP_fe9Qbaw_h7Gyszbo7ypS-0.roa (hash: RFUIAsDNjezppynlHDg3Yb1GDBSbUKtltRoi+VjSqN8=)
                          3: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (hash: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=)
                          4: m3gXujpVCrLpKlGaZZVKGdX7bVs.roa (hash: uZ4Pf6R3TRRDYB1bD3rWYxiLeW6EkMyazvCn4ZXP57Q=)
                          5: mlsN5JNowac1d7ZpQD1BZ-DZoyI.roa (hash: 18rSoxMsfSZRIEFe2Gj+h7BjnwCeSt199DHvViicRCg=)
                          6: pqacqNCldBSnhIBD0D7GqNdirRA.roa (hash: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=)
                          7: ql3I8l6cLh1Cnd-QRruZmhB8qY4.roa (hash: 0n2wtsItY6EXyYhZk/oculHNPoyTZ+0itali9el5fBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bd:ac:78:fa:95:7c:45:ae:a5:1d:80:79:b5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=2eddc43f32f148d44c47eb5bc0f7e7436d559fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:8c:f0:0e:70:00:87:4a:ba:c4:6b:b8:ad:
                    6e:87:f6:86:43:8e:b0:2c:ad:82:fd:cb:6d:0f:30:
                    e8:df:5a:f3:4c:f6:ac:84:ad:79:9a:7c:03:87:21:
                    45:7d:d1:dc:53:29:76:af:fc:a4:4a:c2:2a:4a:5c:
                    57:4c:4a:10:5b:a9:fe:03:44:a0:95:64:4a:0b:af:
                    4f:a6:08:54:96:d4:6e:8d:61:aa:1f:11:a8:7c:f2:
                    fc:d7:53:15:82:ea:74:e8:af:12:47:f9:cd:52:9f:
                    56:21:ab:e5:c5:2f:7b:d0:79:0e:3c:9a:a9:40:c8:
                    96:af:b8:1d:f5:c3:0c:b8:35:b5:9f:af:35:86:1c:
                    79:f0:68:8f:d3:dd:12:42:fd:1a:bb:2b:c8:1b:ae:
                    37:b4:94:0d:9f:4b:d9:37:27:0c:a2:f6:ba:00:39:
                    5a:8d:96:f8:55:21:51:f6:1f:c2:54:63:84:88:6a:
                    07:41:ce:31:25:7d:ba:cb:27:70:85:8c:9f:dc:40:
                    5d:74:94:cc:f1:85:6e:54:a5:9d:c2:4a:fa:e2:a3:
                    81:29:15:67:87:68:e8:b7:d5:e5:e9:5a:1a:2a:45:
                    5e:f6:a5:59:f2:45:2d:35:68:a2:bf:57:77:b2:ae:
                    a5:73:8e:b2:e6:80:b6:2e:28:bf:80:13:b1:a4:31:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:C4:3F:32:F1:48:D4:4C:47:EB:5B:C0:F7:E7:43:6D:55:9F:EC
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:52:3f:ee:e9:99:31:40:ee:da:15:2a:53:18:3c:e6:b8:
         38:5b:5c:0b:cf:1e:11:4d:e8:5a:a5:00:a8:8a:32:cd:31:48:
         aa:ab:95:b6:40:d5:64:ed:f0:2e:fa:f5:10:6e:49:75:b8:50:
         2b:4c:df:bb:90:a2:c8:35:c2:32:1c:7f:75:48:12:6e:da:95:
         f8:54:f6:45:71:9b:0d:52:b4:25:6e:da:c4:b1:58:af:91:c8:
         a4:eb:86:bc:88:d6:85:49:0d:0f:8e:10:7f:33:50:59:ad:04:
         c6:c7:4a:c8:2f:f4:6b:c0:52:9f:43:20:fd:47:ad:98:71:1c:
         a2:8c:94:ab:fb:df:78:a6:e6:b4:e4:50:c3:ed:09:0c:b4:fe:
         20:20:82:5a:34:a2:2e:70:54:b2:13:82:b5:12:27:d5:c5:62:
         24:fe:a0:f7:e6:17:8a:2b:34:c0:ee:2b:33:d6:bd:f3:16:51:
         79:de:c3:88:87:f9:0d:19:c9:23:19:46:a9:a3:95:cb:1c:fd:
         41:47:94:4a:34:71:fb:bb:a6:b1:f5:31:03:b7:c7:e3:74:52:
         60:ff:43:fe:7a:29:8f:37:68:77:75:31:b9:45:30:4d:42:77:
         6c:0d:90:9b:37:06:3c:d5:9f:a7:14:5f:19:13:af:3b:5c:b6:
         b1:4b:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----