Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
File:                     qoCTNU5WWsSDilH0fSdpdpxmlE4.mft (raw, json)
Hash identifier:          c6PKHdhYDJwOKwjgl09h/8R5Fvn/IL0r67uYntMTDtc=
Subject key identifier:   82:53:53:76:89:9B:B3:83:DA:3F:7F:4F:8F:9F:E1:2F:58:40:5F:38
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Certificate issuer:       /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial:       01962F3D4955BD8B6F69BEA06A369386F76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
Manifest number:          0C13
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa (hash: 3SdpbSxYjCjCYkTQyy2TBjnfRY/eKE3ltVUJz5yw6+M=)
                          2: qoCTNU5WWsSDilH0fSdpdpxmlE4.crl (hash: 6ZoeFNZGRS25kBoLH78qY2Au67dRtE1fxbPHIWCCHaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:55:bd:8b:6f:69:be:a0:6a:36:93:86:f7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=82535376899bb383da3f7f4f8f9fe12f58405f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:ac:93:b4:a4:e0:a0:3a:b8:39:91:12:fd:
                    31:e6:f2:0e:89:e9:d9:16:ab:f9:19:30:4c:17:ff:
                    2e:ef:95:46:ba:db:e1:be:49:92:21:41:3b:d7:1f:
                    a0:5f:c2:33:cd:84:96:21:ea:f2:79:8d:9b:70:ef:
                    61:e7:91:45:0a:4b:4f:08:9b:35:35:58:7f:4d:9b:
                    ce:1e:79:28:b5:7e:93:db:77:bf:5a:34:4f:c3:fe:
                    9d:c7:63:e2:5a:26:f6:1b:bb:25:f7:00:23:51:37:
                    18:7f:9b:a7:8d:c6:b4:3e:70:e5:12:37:ab:cf:19:
                    f2:41:17:92:41:2e:db:a7:f5:05:ac:19:59:df:47:
                    19:ce:bc:e6:ba:76:97:25:48:63:6d:91:6e:14:8a:
                    a9:4b:fa:6c:af:a8:81:ef:49:a1:da:58:11:ad:1a:
                    61:5a:2d:61:99:74:36:91:b7:71:67:e0:bc:1b:44:
                    43:ca:a8:10:b7:77:ec:b3:a5:95:41:48:72:73:50:
                    f4:2d:90:5f:33:43:ca:55:55:92:f9:c3:62:d4:09:
                    88:38:cb:fa:6e:b7:9d:9c:04:b2:f0:97:4b:59:88:
                    d9:68:3a:5d:86:af:02:6c:2b:38:2c:9f:a1:46:bb:
                    59:c5:34:c8:65:bb:f1:16:9a:66:bd:b4:25:f0:f8:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:53:76:89:9B:B3:83:DA:3F:7F:4F:8F:9F:E1:2F:58:40:5F:38
            X509v3 Authority Key Identifier:
                keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:fa:5e:6e:a5:2c:be:d9:9a:42:e1:f6:18:aa:e5:8d:1f:
         c8:d1:60:69:b3:de:b9:4b:75:b6:b5:c8:cb:2a:bf:0b:1a:92:
         88:85:8e:ab:37:6e:3b:eb:51:1c:cd:2a:33:3d:7b:41:c3:e3:
         e5:ef:2d:1e:8f:25:1a:be:b4:42:3e:3d:5c:d6:2c:75:22:42:
         ca:21:ab:90:9f:b2:82:b6:72:69:8c:1a:ba:4f:f4:15:dc:77:
         1c:6d:11:dd:83:93:3a:5b:18:84:9b:2b:1e:d7:38:ce:51:85:
         53:c0:35:d0:cc:ee:4f:46:d6:f2:2f:1f:d7:d0:5d:e3:0a:76:
         e1:fd:f1:fa:23:4e:57:9d:ad:c0:37:d0:67:79:b3:00:ba:0f:
         73:28:d1:9f:2d:f4:b7:e8:80:e5:bc:fd:4d:58:0e:39:15:e5:
         65:58:a4:b2:a5:fc:01:ee:f0:19:98:dd:68:b7:fa:c6:8d:20:
         ce:a1:7e:e9:c6:75:78:7a:f7:6d:e7:c0:e5:e0:0b:dc:1b:e6:
         77:fe:25:a0:07:8d:d5:a4:2a:06:a5:0a:0f:88:9c:ff:49:45:
         d2:c5:4f:35:13:b6:12:9b:4a:ff:2b:78:87:e9:cc:dc:51:e0:
         9d:cc:8a:a1:b9:c4:ad:9f:01:37:d8:45:f0:cb:f1:6e:6c:be:
         c6:1e:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----