Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File:                     01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier:          W6KDKV4m72slEXd73tFbqJhCOUpFJjt1yjN4VQb4fT8=
Subject key identifier:   61:CA:9B:31:4A:ED:08:C6:E2:D0:0B:34:42:C5:B8:B4:A4:1B:02:FD
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer:       /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial:       01962E2B0CCA7E3342F85E17C10B168259A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number:          122F
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: XQXkjfzJboF2d4FOYRpBGva7A37qCwamJL4YGnSmPgk=)
                          2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
                          3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:ca:7e:33:42:f8:5e:17:c1:0b:16:82:59:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=61ca9b314aed08c6e2d00b3442c5b8b4a41b02fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:30:5c:27:6b:cd:7c:53:12:59:61:3e:cd:
                    08:04:64:29:11:af:09:7b:ae:ac:f3:f1:c7:5d:70:
                    5a:12:54:39:80:6e:6d:49:89:e6:1a:49:bb:54:fc:
                    1d:a1:73:8e:ed:bc:cb:82:02:ff:04:30:e0:79:32:
                    9c:6e:2a:2b:ca:aa:b0:3e:f7:38:87:37:12:a5:07:
                    f2:91:97:bb:75:46:08:bf:cb:c2:6f:ee:52:ba:f6:
                    14:68:2c:65:38:16:a2:01:97:43:86:db:62:bf:cf:
                    9c:a9:7f:13:2a:4c:c4:ca:2e:c8:05:40:36:52:b9:
                    a0:b8:d4:1f:ab:7a:63:63:e3:bb:4f:d5:4f:23:74:
                    65:c6:54:2b:b8:ea:a6:67:e7:d0:13:04:fa:6b:e1:
                    3b:df:89:3f:3f:6c:b8:93:c2:9a:8d:82:34:fe:25:
                    1b:2d:79:4e:7b:d1:8c:a1:64:0e:b3:75:2f:09:2d:
                    57:3a:a5:ca:15:5f:85:88:f2:e5:56:a6:a8:74:b1:
                    04:7d:e9:40:2e:2b:91:7e:f8:df:4c:2a:c4:53:47:
                    13:72:eb:03:b9:9d:70:0e:cf:43:94:c5:19:20:1f:
                    7c:94:61:23:0f:26:83:88:70:7d:56:b0:2f:6f:11:
                    be:a8:34:1f:19:d4:49:b4:81:8f:6a:b3:32:98:e6:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:9B:31:4A:ED:08:C6:E2:D0:0B:34:42:C5:B8:B4:A4:1B:02:FD
            X509v3 Authority Key Identifier:
                keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:92:e1:1b:96:9c:c0:9f:83:32:e9:42:0b:e8:9c:03:f4:c7:
         b7:6b:3e:cf:ec:53:d8:77:24:f9:89:bf:60:60:71:03:5a:7c:
         20:15:35:d4:02:3a:6d:ae:9a:f5:5c:c2:38:69:a4:3b:77:57:
         ed:4f:93:2e:57:4c:0f:3c:66:5f:e5:4e:46:63:dc:9f:e9:bc:
         f8:da:3c:1f:ac:9d:72:1c:0a:b0:06:9d:4d:5e:b6:74:03:bf:
         f0:69:d4:bb:6c:fc:83:e9:9e:40:06:ed:27:0c:9e:b5:86:13:
         c9:51:f0:2f:d4:98:7b:8f:34:f3:6f:a5:4c:aa:c0:63:b9:01:
         33:e9:f7:66:de:e4:c5:34:5b:7f:b6:77:31:eb:18:bc:ad:14:
         3b:94:ee:67:39:08:f0:d6:18:ed:d7:f1:4c:80:11:bb:7c:89:
         18:78:57:bd:16:9e:2a:8f:87:46:05:29:88:00:d0:4f:a4:23:
         7c:d4:43:59:26:61:69:bd:cc:6c:5e:11:b2:46:e4:72:a1:f5:
         6b:61:ed:01:66:b8:71:8b:40:09:b2:40:e7:1a:dc:3e:34:ed:
         ee:0c:e1:39:27:fb:3a:0d:45:48:49:18:66:e9:57:db:47:45:
         f3:96:58:36:50:34:2e:5b:05:8d:bc:f9:72:16:7f:37:06:90:
         89:48:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----