Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File:                     qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier:          ahppF+6YeFonQ7eZPUJHklKhN0tvzBzg+aDYbKGvmHo=
Subject key identifier:   11:C6:1F:FD:5D:58:F5:47:0B:F1:3A:13:A5:F4:6F:8E:34:55:F6:A9
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer:       /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial:       01962DF3BAB634390636CB4897658A7AE7FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number:          122C
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: Jx0heV1SYcMxvBjcFezhDDIx2CIkE8e0gotVZcrvUoM=)
                          2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:b6:34:39:06:36:cb:48:97:65:8a:7a:e7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=11c61ffd5d58f5470bf13a13a5f46f8e3455f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:e9:8f:da:74:a5:0b:e6:bd:9d:2e:41:94:
                    2b:06:be:ce:63:23:af:bc:c5:79:2e:fd:2f:64:53:
                    c9:af:3a:d3:db:7e:37:66:a2:4d:8b:3e:b1:62:79:
                    b2:23:c4:53:31:55:49:26:17:fd:ed:f7:45:2b:01:
                    74:32:0e:af:ef:42:57:3c:e1:0a:41:6c:13:58:b0:
                    67:f4:b7:6b:20:08:b2:47:1b:1e:c7:54:84:61:8d:
                    49:79:ef:b2:4b:96:16:4e:ab:16:4a:ec:42:68:cb:
                    cd:a9:f3:9a:29:67:c5:b9:0a:52:e7:26:8a:3f:c1:
                    69:ad:9e:bf:0a:14:99:26:ef:8b:c9:f7:8b:34:f0:
                    e8:15:d8:06:4f:39:da:44:e0:28:f9:38:63:b1:c1:
                    ca:f7:64:fc:3f:1d:bf:b0:01:5a:71:20:09:c1:8c:
                    44:2c:1a:83:26:28:23:51:1d:6b:ce:5b:8e:23:14:
                    94:0e:3a:2e:9a:28:03:eb:ac:21:0f:9f:42:0c:7e:
                    fe:24:79:aa:20:d2:c3:00:e9:2d:aa:5a:ae:68:2b:
                    ee:86:01:32:20:dd:66:38:33:fb:8f:32:d7:58:62:
                    e6:6c:73:d0:2f:1c:93:51:2d:89:9f:2e:72:ad:05:
                    8d:bf:b8:bc:d2:83:e5:2c:32:1d:24:e3:a1:2f:5d:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:1F:FD:5D:58:F5:47:0B:F1:3A:13:A5:F4:6F:8E:34:55:F6:A9
            X509v3 Authority Key Identifier:
                keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:90:f1:af:29:af:b7:7f:27:d4:e3:87:bd:e1:cc:b1:8d:5c:
         49:15:b3:ec:96:d6:4a:e1:62:90:b0:b3:ea:d3:5c:c6:2d:e4:
         74:ca:ad:52:2a:78:66:42:21:17:c3:cc:6e:a6:94:ca:4d:20:
         c0:1f:87:f0:3d:4a:1f:5e:6b:2d:96:20:07:f0:a6:8a:58:83:
         fd:86:8e:15:db:01:ad:fb:83:54:67:72:54:91:09:ac:63:e2:
         31:0e:03:b0:71:f9:1f:a1:64:36:0f:ac:fc:b8:7f:81:a6:91:
         df:1c:5c:cf:6e:26:83:15:43:b6:6e:b1:d7:de:be:f7:56:d2:
         7f:39:de:39:e7:3f:5a:d4:35:95:32:11:7b:60:73:20:c8:31:
         47:ae:e2:d8:e5:f4:b2:fa:18:20:85:ec:e3:71:32:07:4d:d7:
         ee:53:96:1c:1b:00:03:a8:b7:23:39:aa:34:53:64:cb:a6:b5:
         e0:56:66:c1:2d:03:ce:cd:fa:8b:a4:fc:23:b2:6d:cb:df:e0:
         a3:a6:cd:64:b8:7b:19:0c:60:a0:e7:29:4b:b1:ae:0f:e8:b2:
         50:c5:b2:33:fc:9f:8d:ac:e6:ea:aa:f0:2a:46:b1:d7:9d:59:
         4e:a6:49:38:84:1a:92:35:bd:65:24:1b:14:d6:d0:23:6c:79:
         3e:b4:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----