Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File:                     qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier:          URHZoYGCm9r+mevCWNYt/nojgGApbqp5sSXx68RMi0A=
Subject key identifier:   03:5E:BB:E9:07:59:7A:68:FF:67:71:64:8E:86:E2:F2:10:D9:B6:C1
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer:       /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial:       01962DF41DE5BA1E6B79E89E62E0195EB905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number:          0B3B
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: VNd90Fl0tWahsmhhQvhoAAT8f5U.roa (hash: U+zi8hpH0S9lksZLxaBLhZX/Hg0tdOzYwVmTSHbyaHY=)
                          2: oPUfgQs_gRyUUqFixo17ClnZdws.roa (hash: BRanyzZIskjVzme1gyyyKAnXC2WxzE9xAlEA/GqswiQ=)
                          3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: QVL2wUoyEnWsmPGPykvj5XnGORZU2okvPIdOF7+J+mA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:e5:ba:1e:6b:79:e8:9e:62:e0:19:5e:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=035ebbe907597a68ff6771648e86e2f210d9b6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:db:b4:15:2e:1e:b6:0c:f2:ab:ab:33:c4:
                    48:6e:1e:22:63:9d:65:31:e2:42:bc:ff:4d:ba:f2:
                    1a:ed:1e:24:2c:8e:8a:3f:7c:3a:bf:d8:60:7c:a8:
                    35:76:05:12:c7:d9:bd:e8:35:33:7f:7f:42:e1:00:
                    e8:1c:65:02:33:92:89:00:ee:81:62:24:74:5d:34:
                    a9:eb:30:a1:03:02:52:81:f2:31:b3:7e:02:2b:d8:
                    96:b0:21:4b:e0:fc:00:0d:93:f7:ff:8a:8a:02:ce:
                    dd:dd:03:57:90:d1:e5:99:11:e3:0b:01:38:97:54:
                    1c:be:96:f9:02:89:64:94:b1:62:84:34:de:45:ff:
                    ba:55:79:df:a6:32:ec:43:3e:8c:ac:a1:e2:aa:fa:
                    c9:f6:29:24:83:5a:37:6c:97:6d:0c:3f:fc:f3:40:
                    f3:1c:b4:b8:23:74:6f:87:02:1c:17:59:2d:2c:1a:
                    c1:07:70:1d:a2:88:4f:d2:5a:43:05:56:1f:6a:e2:
                    b8:7d:c7:20:a8:d2:6d:86:6b:dd:71:fb:00:01:1e:
                    d4:23:18:bf:0d:4e:f8:d9:5b:73:15:49:b7:56:d7:
                    69:f2:8f:97:fc:66:5a:21:80:63:b6:cd:5b:f9:bf:
                    2e:58:be:c8:68:bd:a9:5d:72:64:0b:de:43:bb:38:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:BB:E9:07:59:7A:68:FF:67:71:64:8E:86:E2:F2:10:D9:B6:C1
            X509v3 Authority Key Identifier:
                keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:db:4b:12:d0:4c:18:83:ab:07:6d:8a:89:73:ad:77:fb:
         e2:fa:bd:55:ed:7c:3a:12:e2:51:94:b8:6c:3b:8d:7d:ac:2f:
         1b:d6:fb:99:3d:d2:cf:e7:5e:9f:a8:92:ba:f9:8a:75:ac:37:
         24:1b:5f:69:ef:a0:e9:80:6b:4b:4e:b4:a2:ac:ae:87:24:89:
         a6:5a:e1:fa:30:34:f2:55:f8:95:24:53:96:b5:4b:42:75:15:
         86:51:f9:6f:0b:c1:8a:3c:7b:5c:d8:e3:b5:c4:e8:fd:23:11:
         4f:31:ae:d0:62:de:c5:6e:8f:37:c0:8f:7e:0f:74:81:94:98:
         57:ae:9d:02:1a:31:63:07:8f:8a:0d:57:4a:63:6c:38:45:5a:
         99:cf:e9:0d:bb:d7:f4:78:07:21:51:cd:4c:9b:a8:7f:87:a3:
         a5:b8:7b:65:0b:29:1a:96:47:a2:23:6a:cc:c5:0d:40:07:c9:
         38:8a:02:4f:f9:3c:8a:82:81:38:45:98:bd:3b:e9:39:af:82:
         1e:f5:60:b7:90:a7:e0:a9:64:33:a0:bb:32:5e:d7:38:1f:4c:
         42:d5:32:eb:46:9e:9a:a3:35:11:29:3e:16:0c:3c:f9:be:41:
         92:b3:4e:36:25:70:16:e9:54:41:65:77:79:f9:a5:78:fe:e5:
         1e:da:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----