Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File:                     aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier:          6+knBRq3cYSu6Vya9iuPyXoigWk3nK4qU2UJWITgULo=
Subject key identifier:   B0:46:1A:0D:BF:35:EF:8B:F6:96:2D:D2:D3:F6:42:04:94:91:D0:60
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer:       /CN=690a263249847cf97344742213644f929beaa997
Certificate serial:       01962E98C7956A3F6BF401A038EEB55F70C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number:          0749
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
                          2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: i42CJNiJM7kr5qNC4h2BB3EvgHKyH0yoBhjlAemQIqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:95:6a:3f:6b:f4:01:a0:38:ee:b5:5f:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690a263249847cf97344742213644f929beaa997
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=b0461a0dbf35ef8bf6962dd2d3f642049491d060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:76:d6:e3:37:84:0f:30:2e:87:01:dd:f3:
                    77:df:b2:00:31:75:54:5a:c1:f8:fe:8e:54:40:43:
                    35:aa:c0:02:88:d8:3a:ca:e8:9a:87:f5:0e:55:dd:
                    3f:64:f4:8c:02:67:53:b5:87:e4:c2:6d:52:59:d0:
                    6a:be:be:e7:77:8d:2e:e1:41:fd:26:88:77:5f:a2:
                    15:59:dd:54:a6:5b:5a:a7:d3:3c:35:78:27:d3:5d:
                    ae:39:8c:c8:93:b9:b6:ea:82:60:e7:47:20:15:69:
                    86:e7:28:33:5b:df:03:9a:cc:1b:68:1b:41:ca:1b:
                    99:71:0c:fd:2a:6e:90:96:78:85:3f:ca:5d:66:db:
                    3c:e5:0e:70:d6:19:f6:de:1a:c8:46:94:7d:f6:e7:
                    a3:28:83:12:a2:35:73:79:48:a9:ec:07:94:68:01:
                    87:d7:06:d8:02:a0:39:c6:34:cb:4e:6d:aa:14:54:
                    ac:2c:3f:5d:ef:37:d2:23:d0:36:6d:c6:82:7b:ca:
                    14:6a:b1:d4:1d:9e:f4:51:87:d3:ca:39:58:0c:b1:
                    23:6c:a8:6d:c2:4d:b9:58:18:45:c8:36:ce:37:57:
                    bf:c5:fa:0d:c4:19:37:76:37:54:4e:2c:30:7a:1f:
                    73:8d:b6:e6:b6:b0:39:0b:5c:cd:99:a8:6a:be:7f:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:1A:0D:BF:35:EF:8B:F6:96:2D:D2:D3:F6:42:04:94:91:D0:60
            X509v3 Authority Key Identifier:
                keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:64:c7:fa:2b:20:a6:71:bc:2d:cf:74:17:f8:89:57:57:e8:
         9f:9d:c3:ad:78:e9:1f:3d:6b:df:b3:33:90:b5:b3:97:af:5b:
         dc:ad:66:a1:bd:0a:bb:c9:f0:94:3b:c8:40:5d:e9:a4:8f:fa:
         56:e9:35:11:ec:67:1f:e1:ad:3c:64:25:1a:ad:75:1e:01:c8:
         39:d9:c2:91:58:0b:08:38:b2:68:c9:a5:44:29:22:60:51:ff:
         ce:25:e4:ad:f7:ba:f0:90:89:97:ae:a1:ef:4d:6a:35:c6:ef:
         bf:e1:3d:06:58:cb:a7:5e:4c:43:04:5c:f0:5f:96:9d:a7:b2:
         1e:b5:52:04:44:68:3b:f0:b2:1c:10:3a:84:bb:08:02:7a:d2:
         67:47:ba:ee:b9:8c:da:d6:8c:bf:b1:b2:3a:38:7c:ca:81:71:
         17:2c:2f:27:20:e3:5a:0c:0e:2a:51:98:26:ae:86:79:59:eb:
         a6:fb:f7:e1:b0:33:87:4d:35:67:7d:14:0e:9b:07:2e:4a:3f:
         c6:cc:cc:70:00:23:13:e5:63:de:35:2d:b9:79:f5:47:77:3d:
         cb:4d:8c:99:78:60:d3:ee:90:fe:69:8f:b2:63:5b:74:1b:2c:
         cb:7a:5a:3d:39:a7:b2:60:46:4c:60:98:65:3c:c3:34:b5:e7:
         89:dd:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----