Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File:                     qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier:          1Hde/wX6cA//iSQtoYLADEpdlGL5jUl8iw/dkf/cdvE=
Subject key identifier:   F6:C3:51:F6:C9:AB:F1:21:B0:D6:06:38:43:46:9F:E0:D7:D7:12:15
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer:       /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial:       01962E98B3582526840EAE75E95ECF50AA97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number:          1423
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: mh2uwjmbdurUmywqkIagYxKKIM85QtpSfIitbP/7cvA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b3:58:25:26:84:0e:ae:75:e9:5e:cf:50:aa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=f6c351f6c9abf121b0d6063843469fe0d7d71215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:51:de:e3:77:3b:b2:e2:f2:8b:65:79:d5:
                    32:b0:b6:6c:19:5a:e5:2e:b1:48:19:95:7c:2e:8d:
                    2c:9b:17:be:37:86:bc:01:13:ac:68:4d:3b:55:b1:
                    1d:4d:8c:ee:3a:48:06:fd:fe:55:44:1a:26:d6:a4:
                    dc:ba:63:0b:12:b6:e4:04:fb:42:9e:71:ec:63:9f:
                    f9:cc:0b:61:32:03:b6:16:6f:5c:06:3d:38:6d:90:
                    79:17:44:9b:0d:9e:a5:48:22:7e:42:61:7f:98:4a:
                    fb:4f:0a:79:4c:79:b5:2f:9c:29:70:bc:45:11:e9:
                    7c:3f:b8:1a:68:47:93:fb:2f:a4:95:a7:7e:d0:39:
                    81:0e:73:b3:89:49:de:89:f3:e3:e4:af:bf:73:2b:
                    d2:a6:d5:2c:7f:63:42:1d:49:c9:d0:96:f8:9f:49:
                    11:a3:d0:e5:9e:d5:1a:7a:b0:43:29:b0:76:de:e1:
                    1b:30:ea:de:7d:96:39:28:8a:41:91:02:7e:4a:37:
                    27:76:7f:0e:e5:32:92:f5:67:9e:9f:e0:54:f8:35:
                    e1:04:89:44:0c:40:74:49:9e:7f:be:c0:97:87:0c:
                    8d:69:1c:7a:ba:9d:85:e2:99:bd:c7:c5:90:9c:c6:
                    dd:f6:2d:43:ae:06:8f:23:a0:a2:cb:65:37:21:3c:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:51:F6:C9:AB:F1:21:B0:D6:06:38:43:46:9F:E0:D7:D7:12:15
            X509v3 Authority Key Identifier:
                keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:58:de:e0:ac:f3:e9:be:b6:67:1f:e9:2f:ba:c9:e6:06:
         96:6a:ba:bb:96:3c:59:b3:a5:93:01:4a:70:d8:f0:fd:8f:84:
         12:19:aa:2e:ed:19:47:5c:ab:48:c3:fe:ed:fd:29:0c:3c:6d:
         2f:36:74:09:bd:28:93:6e:c7:be:d9:5e:36:c8:78:d8:48:34:
         bd:70:0b:ed:7b:73:ac:e5:12:89:8b:34:71:b6:8c:8c:b0:e8:
         b8:ca:b0:88:fb:65:26:01:89:fa:50:88:aa:f1:4d:39:5d:70:
         10:9b:13:63:11:ab:e5:1f:ba:a7:f5:bd:ed:c3:b1:a1:c0:59:
         74:e8:08:cb:78:ff:8e:ec:00:35:c8:8d:4c:99:94:be:cd:9d:
         df:db:53:9d:05:e9:01:cf:b1:51:46:fd:c9:b8:27:06:08:d2:
         a3:8e:06:7f:ce:7c:bf:5d:e5:df:ed:70:78:10:12:11:03:29:
         9f:34:42:0c:c6:ad:b2:fe:91:66:a0:95:29:61:80:75:bc:93:
         ae:d4:13:0a:ab:61:55:f9:9c:36:02:f9:f4:85:a3:a5:f4:f4:
         c2:0e:0c:3d:72:43:00:fd:64:87:50:0d:64:6b:d1:af:a9:b4:
         79:2b:c6:15:05:de:00:ef:b0:ae:f9:6e:32:70:a1:e5:90:4e:
         6f:da:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----