Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json)
Hash identifier:          UkiUzGC0vinDHitWGUkzooKQAy72Nu1hu3AMnlwxwro=
Subject key identifier:   C6:BA:F5:95:C5:1D:0E:FA:C0:7E:05:23:01:71:53:D5:76:21:A8:45
Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Certificate issuer:       /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
Certificate serial:       01962F0702EF08B07A362F2B51E38054C970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
Manifest number:          052B
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: hnNizGmD5_kLKz6dLya2VuA4UIw.roa (hash: jIIE53bnDtwqS2dFWJrfKRkElyY5vTQ/kFSnuPVB9e8=)
                          2: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: vhntmFaT1YZRxhsBlf2nJMyh3e/g09FErKJYWxTki9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:02:ef:08:b0:7a:36:2f:2b:51:e3:80:54:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=c6baf595c51d0efac07e0523017153d57621a845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:a4:21:de:56:99:a8:3b:ba:44:c2:4c:9c:
                    7a:46:cc:e8:60:c0:1d:b9:1a:d6:0a:6e:f4:59:28:
                    59:77:3a:ca:cf:37:d5:da:f5:28:a1:7a:a0:ee:d7:
                    28:f7:81:23:68:80:87:f9:00:09:b3:1a:4d:1f:7c:
                    9c:e4:9d:6f:55:7b:c5:a9:47:e8:3d:ef:42:ad:81:
                    20:57:51:44:0d:3f:8e:2a:35:81:1c:3f:ad:2f:ed:
                    b4:3c:02:eb:ea:cc:20:b5:40:5a:65:31:fd:15:23:
                    31:16:d3:08:3a:13:4e:c6:72:d1:bb:0a:db:c8:c3:
                    82:93:1b:4c:de:14:d5:2c:a1:9f:08:f8:11:a4:b7:
                    9b:66:56:2b:a1:0f:1d:6b:60:f6:c0:b4:2d:9f:fe:
                    38:ab:20:9f:32:32:93:97:35:f2:6b:44:c8:15:51:
                    de:b5:da:c8:9d:2d:7e:59:09:29:6d:bb:09:6a:d3:
                    e2:43:ca:90:cd:88:2e:15:20:c8:eb:57:6e:15:12:
                    42:f8:c7:0e:34:f9:b8:49:87:61:2d:cf:48:76:54:
                    fa:57:41:33:79:71:79:4e:da:7c:0e:28:14:e0:ef:
                    e9:18:25:b2:6a:c2:65:81:ac:63:fe:f2:5c:6c:a7:
                    bf:32:f0:be:80:b0:f6:b0:d6:62:a2:c2:a8:cf:e8:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:F5:95:C5:1D:0E:FA:C0:7E:05:23:01:71:53:D5:76:21:A8:45
            X509v3 Authority Key Identifier:
                keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:77:bb:93:10:83:6d:35:b8:48:a4:fc:b1:42:ef:b0:a4:47:
         20:59:1c:2b:da:35:fd:d4:1e:49:5e:5b:c1:8e:3f:d4:20:82:
         7a:4d:89:a5:3c:98:7f:b5:68:ad:ce:ed:36:09:95:b9:ad:c8:
         db:f8:d0:ad:45:d4:66:88:5d:2f:f8:3b:68:dc:33:3e:9e:08:
         47:cf:82:2c:05:f8:f4:d2:0e:f2:90:67:69:e4:65:05:02:c8:
         53:2f:23:dd:b1:db:f7:32:a9:ed:1d:cc:e0:52:86:e9:01:b7:
         83:3c:3d:cb:3d:e5:1a:29:f1:d9:f9:d1:53:9a:12:a3:fb:6f:
         d2:4c:f5:3d:b9:b1:f0:6b:d0:e5:18:86:cd:1b:25:bb:77:32:
         f6:1f:02:fd:98:5c:b7:3e:39:a5:4f:4c:18:3d:36:cd:5c:0d:
         91:68:3f:5f:b5:d1:30:61:a7:14:7a:39:29:b3:85:59:f9:fb:
         91:0e:89:5c:a7:14:cd:df:b4:98:57:90:b4:27:63:2a:6d:ed:
         11:67:60:f6:14:26:87:5a:42:69:b2:58:42:af:da:46:c3:a3:
         3f:49:39:ca:a0:d0:ba:1f:6c:7b:31:8d:ac:d5:d8:c4:90:cf:
         c0:79:e1:53:4b:40:e5:7a:23:f5:0f:66:58:93:70:46:3d:b2:
         1a:bf:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----