Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File:                     qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier:          /FWQ82777X4mbIY15pbxierfstnDwTCQzD0app+lARw=
Subject key identifier:   D2:12:08:E4:6F:73:83:CD:C7:E4:75:BE:7F:D1:C4:E8:46:41:BC:ED
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer:       /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial:       01962ECFA1E606E9FE3C5510AA0F721032EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (hash: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=)
                          2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: IjY8FmGoll4tKQ7u4BuS8qE3NypaSBiLAkAylvELmJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a1:e6:06:e9:fe:3c:55:10:aa:0f:72:10:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=d21208e46f7383cdc7e475be7fd1c4e84641bced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:c9:38:e7:9a:a7:41:5f:d8:c9:d9:cb:4a:
                    00:46:95:83:8a:3d:06:92:44:78:e0:61:24:99:58:
                    ac:d9:5a:ec:44:74:20:12:f1:72:bf:a3:92:51:7b:
                    c8:6c:e4:cb:4a:46:50:dd:ca:82:22:99:43:d7:c2:
                    d8:92:b5:bd:98:2b:69:62:bf:e9:ab:78:0a:81:db:
                    bf:65:28:fa:83:8f:e7:fa:ef:09:18:1d:29:42:e9:
                    bb:e5:ff:8c:6b:d3:5d:66:13:7d:71:82:97:e5:41:
                    ba:db:40:5e:9f:b1:3f:cb:c0:8d:22:48:1d:5e:c8:
                    e8:2b:a2:42:b7:f7:2d:07:b9:ce:e0:9c:7e:00:d5:
                    12:0f:5f:9d:18:3c:d9:43:d3:aa:a5:84:dc:45:2f:
                    11:33:8b:1a:a4:32:ef:40:67:80:88:4c:55:fb:4f:
                    6a:b9:4d:d2:82:a7:41:64:5e:fd:18:bf:5d:24:41:
                    33:78:b6:66:9a:2d:f5:67:a5:6a:b3:7e:3b:fd:a6:
                    3a:ad:89:3b:fd:8e:a0:c4:88:b9:58:e1:e2:f9:e9:
                    de:c1:9d:ae:18:69:9b:d8:0f:94:ff:e8:33:29:91:
                    e4:20:be:ae:1f:30:b7:e7:a1:28:90:90:4a:ea:29:
                    ac:9b:b0:ca:98:d8:7a:55:af:2a:37:c5:14:13:43:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:12:08:E4:6F:73:83:CD:C7:E4:75:BE:7F:D1:C4:E8:46:41:BC:ED
            X509v3 Authority Key Identifier:
                keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:45:08:2a:2e:c4:a9:31:c7:d0:16:62:85:69:14:03:d9:0c:
         01:b3:f2:88:c8:1b:1a:db:10:ed:73:14:8b:88:f9:79:b1:1e:
         42:86:1b:a5:0b:21:b1:72:d3:13:1e:15:67:07:a1:b6:2c:55:
         d6:0f:75:03:52:91:ee:8e:b7:51:61:e9:62:6c:b0:4a:80:17:
         e5:2a:70:10:ed:f3:bf:d9:c0:67:f5:f2:b1:8b:ac:3a:aa:8c:
         31:98:6a:5f:2f:82:a6:2a:cb:e4:a4:00:e6:22:d7:3b:e0:64:
         df:e6:35:1c:0b:f2:ca:08:4c:22:03:72:80:30:9d:01:5c:8f:
         be:e1:fc:e7:61:a4:28:e2:22:cb:c1:c3:ff:d7:51:02:48:61:
         80:16:5a:44:c5:eb:cd:bb:94:85:8c:e2:03:c7:de:51:75:e5:
         06:96:03:8c:ed:2a:0c:6f:24:70:b3:f2:b1:53:87:26:42:93:
         30:25:19:99:ee:a6:26:cc:d6:02:c7:af:96:12:85:dc:78:cd:
         80:9a:c1:7a:ff:f1:a9:78:ab:38:5f:61:ae:7b:44:23:ce:24:
         9d:c8:e4:27:ba:ff:70:38:42:56:8e:27:fe:2c:68:e8:7a:38:
         6b:d5:98:f6:6b:b3:8d:4a:aa:c1:49:d8:b6:84:81:50:bb:c4:
         1c:c5:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----