Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File:                     qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier:          t+COycGfq+4nV3Au/USd6MvkZtZmAVdkhSxhJxNRDlI=
Subject key identifier:   AA:41:AB:F8:42:E3:8F:78:25:C9:C3:85:03:56:31:A3:24:7E:83:E2
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer:       /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial:       01962E619F0C18F87A749A4B1CB5106D1EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
                          2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
                          3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: FeRji/ZZ+Eo5a2hz/fJnAxlfVd3/dVT0nl4Z7DB6Ock=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9f:0c:18:f8:7a:74:9a:4b:1c:b5:10:6d:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=aa41abf842e38f7825c9c385035631a3247e83e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:d7:04:1a:6e:0c:20:b9:71:4b:a4:bf:64:
                    8a:79:82:43:8a:e6:2a:c0:25:8a:23:3d:d2:b4:24:
                    cd:c2:b9:b5:01:a2:ca:d6:d9:27:9b:c8:c4:d0:f9:
                    fb:50:57:fb:6e:a6:9d:94:b3:bf:20:d5:42:24:0f:
                    a9:a9:82:ae:4a:77:73:05:45:fa:8f:9d:53:36:52:
                    5a:01:9a:4a:9d:65:5e:cc:71:e8:cb:cc:e9:c2:be:
                    c7:49:5e:e1:bc:92:25:1e:4f:de:e7:9d:12:26:12:
                    fd:e2:17:35:64:f8:8f:d8:8a:7b:fd:bd:50:0c:f0:
                    ab:c8:6d:9a:aa:d9:99:55:52:04:63:57:3e:c6:a6:
                    5a:41:2d:ed:3b:eb:d3:db:c7:c6:af:55:74:c3:69:
                    8f:0e:5a:4e:ff:fd:df:18:d9:32:25:68:56:74:5c:
                    11:aa:d4:d9:cf:59:05:2a:13:d1:58:e4:a1:5d:55:
                    d9:15:d4:40:89:bb:d8:06:fb:88:1d:95:60:95:c5:
                    18:d8:d1:7b:dd:b6:15:dd:98:7b:bc:58:79:87:ac:
                    d6:5a:0c:6a:27:fb:fc:8b:29:5f:7f:16:2c:23:c7:
                    27:bf:ad:0a:6b:5f:68:f0:76:48:59:1e:57:f8:69:
                    99:5d:44:20:64:92:e7:a5:0e:4c:b0:4e:4f:03:88:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:AB:F8:42:E3:8F:78:25:C9:C3:85:03:56:31:A3:24:7E:83:E2
            X509v3 Authority Key Identifier:
                keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:21:01:0b:12:df:0e:0b:4a:10:3a:fa:18:36:00:5e:22:e7:
         aa:75:93:2b:5a:45:05:15:02:b0:40:ad:1c:67:36:e0:23:47:
         05:45:32:62:82:b6:66:02:cd:e6:24:65:11:b9:a0:d7:a2:db:
         22:7c:57:be:2c:d4:56:66:29:65:03:cd:d6:e1:48:06:9a:30:
         86:66:33:d2:a5:5b:b2:db:c4:94:71:6d:ac:38:a6:4f:04:9d:
         f4:df:27:05:52:a4:76:df:07:b9:8d:cd:14:7b:06:3e:49:90:
         b7:24:19:3d:3d:a0:f5:b5:ae:ab:f5:ee:63:01:e8:6c:2d:2c:
         e0:23:7f:c1:00:16:2a:56:bd:50:67:6a:f7:05:0f:75:7b:bb:
         82:ab:3b:76:d1:b2:3a:84:b8:a9:ad:6b:8e:88:4b:7b:c2:2f:
         5c:02:7a:d3:15:ed:49:df:a8:47:f1:e6:01:73:53:95:66:b6:
         13:0e:de:eb:78:98:56:f9:05:76:a8:cd:b9:75:40:9a:b0:02:
         9a:52:ba:9e:7a:3c:fb:dc:c0:64:97:70:42:7d:30:2f:0c:0e:
         ce:28:7f:6f:f5:fb:3e:8a:c5:7e:f6:eb:a5:4d:fa:c9:a2:5b:
         d2:d8:c2:2c:2f:9d:00:52:22:c6:09:4b:0e:dd:38:a5:2a:1d:
         c0:ea:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----