Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File:                     qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier:          YBBRfxAbhlsqEwvUjpLmX8R+ou3qiO0EXb9lMTqlhho=
Subject key identifier:   11:C2:6D:E3:D1:C1:F3:AA:E9:72:CC:6A:1F:95:E8:D5:C8:08:15:C9
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer:       /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial:       01962ECF9D4E5E47334C4750CF758B1DECE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number:          12B3
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
                          2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: 5noLCpjbhCCYC1Y1UXFkXUFlE5hjcfhkaVaZZXRJOXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:4e:5e:47:33:4c:47:50:cf:75:8b:1d:ec:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=11c26de3d1c1f3aae972cc6a1f95e8d5c80815c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:60:8c:08:67:af:db:85:fb:e8:26:65:d4:
                    61:bd:b3:68:1a:8b:f2:e4:e6:cd:f2:b3:62:e1:94:
                    b3:5c:47:a4:3c:6e:ea:bd:f1:97:88:be:84:5f:40:
                    ce:a5:9f:06:9d:3b:a0:f9:16:d4:26:84:64:91:ac:
                    0c:52:5f:1c:23:94:e1:7d:9a:a1:97:dc:dd:52:d8:
                    1c:f4:ec:6f:69:b9:5a:a0:6d:67:6a:be:a7:b7:b8:
                    67:a8:c9:da:67:74:7d:33:cc:59:d3:d1:db:e1:23:
                    96:d2:98:02:25:70:75:60:31:31:8f:f8:01:91:1c:
                    32:f8:7a:aa:6c:68:b5:6f:ea:a9:21:94:f4:2a:9c:
                    be:ec:50:d3:af:a8:6a:0a:8f:f6:56:dd:2a:11:49:
                    f1:28:9a:bd:bd:02:69:e4:49:d4:1c:c3:82:19:d3:
                    cf:95:ea:e1:cb:4b:ef:81:9c:87:cc:88:f2:d1:f4:
                    e1:a9:30:97:fb:d3:47:10:32:58:fd:52:5d:06:4b:
                    41:da:bc:ba:56:78:b7:74:64:8e:6b:d0:03:89:83:
                    65:3e:50:64:76:28:0c:75:c8:d5:36:5f:7d:8d:5d:
                    5e:08:f2:a3:86:a1:63:46:fd:88:82:04:0a:ae:74:
                    a4:7e:f8:45:d1:4f:91:d7:5b:3a:93:5a:9a:9a:d0:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C2:6D:E3:D1:C1:F3:AA:E9:72:CC:6A:1F:95:E8:D5:C8:08:15:C9
            X509v3 Authority Key Identifier:
                keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:be:94:fd:a0:81:51:16:d6:9e:22:0c:dd:fb:70:30:da:
         a5:05:e6:fb:1d:7d:4e:ce:ce:1f:e9:f1:ff:b1:85:1a:36:be:
         b6:d8:8a:d7:67:3d:d4:c4:ee:dc:69:dc:9e:b9:17:4a:97:bb:
         bf:90:48:d9:fd:2c:b4:c1:8f:8a:dc:ce:a9:ee:6b:88:5c:97:
         c9:ba:13:69:a9:b4:98:9b:09:92:70:7a:03:ec:f1:99:cf:b2:
         52:15:b0:f1:87:67:d7:f2:d3:a5:4c:e6:54:f2:44:56:6e:bf:
         04:f0:d2:ab:f0:d5:f4:9f:87:be:b1:86:6e:71:5d:e9:2f:84:
         d2:0d:64:17:4b:13:25:32:10:01:0f:ae:cf:99:44:5f:2b:5c:
         63:27:d2:00:d5:9a:f7:aa:55:3f:d7:f8:c5:5c:31:9a:00:13:
         72:64:41:eb:f1:fa:0f:28:0e:47:f6:5d:cc:ff:0b:b3:79:f2:
         08:af:27:2d:81:60:51:8d:2e:ad:4d:77:42:e4:f0:53:a8:f1:
         89:ff:86:fa:9e:dc:e4:6e:9e:27:cf:59:3a:54:a9:11:1f:36:
         f3:7f:07:8b:52:ab:5f:3b:e8:16:2d:fb:02:7c:3e:24:f4:8c:
         f8:63:ae:23:e0:c3:24:8d:b9:96:54:1a:19:f6:91:33:9b:64:
         fe:73:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----