Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          W3GAmu6gTGGYPiPre8AIOrb+jfrQiK0x3TPSXSM4tSU=
Subject key identifier:   68:37:38:B7:03:AD:85:82:44:E0:83:4D:C3:91:85:87:90:5E:10:F5
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       01962E98718EBC206F9E6684A44A92E31773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: AjynKAvgKOF/PcZLeVz7ypN3xkik8Wu1OjYEqAWbMlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:8e:bc:20:6f:9e:66:84:a4:4a:92:e3:17:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=683738b703ad858244e0834dc3918587905e10f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:35:7d:e4:34:7a:5b:9f:54:83:fd:ad:91:
                    a8:20:4a:7a:62:0f:3f:60:f1:bb:ae:29:69:92:02:
                    06:0a:2e:b2:58:0c:2c:97:d4:c4:e4:f2:15:a6:98:
                    fc:71:b3:e3:9f:c6:3c:23:0d:7c:f9:f3:cb:0b:28:
                    14:f6:e5:8a:c4:b3:af:7a:b1:f7:b5:d5:3f:d9:48:
                    39:57:07:78:0d:25:fa:38:26:88:af:04:56:cd:62:
                    b2:2d:87:90:15:56:ee:86:5f:04:7e:75:47:22:04:
                    ec:cc:9f:f2:de:f3:92:3b:8c:af:14:92:a8:9b:29:
                    28:6c:fe:dc:a8:68:53:31:e2:7b:90:a9:1e:3b:69:
                    7f:37:2b:90:c9:90:58:15:b2:d6:59:d0:af:2e:52:
                    3b:f5:4f:dc:95:d1:58:63:34:d8:4b:bf:53:d1:8e:
                    92:0c:f0:a1:d6:27:f1:87:21:bf:7f:f7:61:35:1b:
                    88:5b:76:b9:ae:ad:46:e7:0b:1d:03:e5:ff:a6:da:
                    9a:5b:da:75:2d:7f:73:a4:b8:5b:03:1d:a5:86:c3:
                    d0:bc:da:27:ae:ff:24:d4:7e:17:f0:f2:8b:14:8d:
                    c5:04:67:a3:64:69:cb:60:76:06:bc:43:a2:f9:41:
                    d2:b8:a0:d7:20:7f:9c:74:8c:15:90:ff:2e:6c:d4:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:38:B7:03:AD:85:82:44:E0:83:4D:C3:91:85:87:90:5E:10:F5
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:30:9c:3e:c6:6c:23:d5:f2:84:38:6d:7f:87:3b:49:11:
         fc:e4:a5:46:76:0d:94:eb:cd:d9:eb:0f:cc:82:88:06:eb:6f:
         78:ca:8b:41:06:1c:dd:40:72:9a:98:8f:26:5c:92:e3:17:d8:
         e9:76:3c:92:b3:e9:ee:74:ca:c6:57:4a:5d:c9:8a:db:5f:63:
         ee:ad:24:51:5c:34:e5:7a:81:52:7d:0a:6c:3b:ed:b6:1a:ba:
         5a:24:6c:9d:f1:ee:80:d0:c4:9b:a7:00:fe:0e:a3:a1:2b:ce:
         10:0b:15:e8:55:f9:18:6e:8f:3b:34:80:88:04:8e:2c:97:e3:
         46:d2:a7:b0:0c:3e:29:3c:cc:d5:2b:ac:91:49:2c:f6:2c:5c:
         9e:dd:7d:1c:ce:37:71:ec:06:bf:bb:14:70:86:f4:8b:ce:30:
         de:cd:d2:1e:54:df:88:6a:52:5c:86:be:f9:1d:ce:a8:bc:06:
         f7:4b:49:d5:d9:50:fc:9d:11:6f:e4:a1:72:83:54:f6:2a:5e:
         94:45:57:40:39:5e:10:59:ee:98:7e:ee:a4:cd:16:86:34:e0:
         55:5a:89:93:9e:85:16:81:93:f4:1d:40:73:5a:76:53:60:97:
         05:14:08:9e:f6:13:f3:ff:15:da:58:61:ba:6f:45:31:72:1e:
         95:3b:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----