Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File:                     qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier:          pD18/s5c27VntdoQ3u0FRFld79lkbXDt8m6HczVjFTY=
Subject key identifier:   53:38:B6:01:07:00:83:7D:9A:F6:5D:89:C9:59:23:94:0F:D8:B5:CF
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer:       /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial:       01962E98E56711A1811F658E32715F9ED92D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number:          0BFB
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
                          2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: c7VrTfupJ3+/sQkXKI95ergFwmPbve7M11SNIBfkWGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e5:67:11:a1:81:1f:65:8e:32:71:5f:9e:d9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=5338b6010700837d9af65d89c95923940fd8b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:8b:98:28:b6:d9:9b:d5:86:86:51:6f:0e:
                    7a:5d:3d:ec:78:94:67:42:f2:70:65:dc:7c:fd:56:
                    bd:cb:92:1a:0b:5b:54:d4:0c:89:fd:c7:42:72:80:
                    95:2e:9c:13:ac:7d:5b:22:a1:9d:d2:20:ca:22:84:
                    6a:41:76:d2:a2:11:a7:a3:63:b4:73:f6:51:15:04:
                    3a:62:55:cf:4d:23:58:8d:1e:00:85:82:08:b8:01:
                    c4:c2:68:79:33:3b:7f:d1:49:52:b7:65:50:4a:67:
                    d3:b3:7f:97:5c:91:e1:98:88:b2:54:0f:9a:1c:f0:
                    7d:ce:a2:57:91:22:9e:80:c1:79:d7:6d:29:40:69:
                    de:53:57:46:dc:52:39:ea:4c:26:c4:d9:54:e7:d9:
                    31:5f:15:cf:3a:d1:5e:a8:e9:86:76:3d:a3:9c:20:
                    32:55:7b:27:61:0e:11:f7:e3:c4:8a:80:63:83:06:
                    0f:86:b8:52:81:72:ab:08:1d:b8:6b:51:a7:67:20:
                    a5:2f:88:3c:98:e0:ec:9b:df:69:a7:2a:3f:75:51:
                    9e:3f:f5:d0:51:65:44:c3:41:69:91:09:4c:52:99:
                    90:07:e5:b5:a2:7a:2c:d6:0a:07:f2:b3:a1:61:9e:
                    3b:f8:5d:d5:eb:e1:99:99:c8:f3:50:19:d5:7e:b9:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:B6:01:07:00:83:7D:9A:F6:5D:89:C9:59:23:94:0F:D8:B5:CF
            X509v3 Authority Key Identifier:
                keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:76:33:05:99:7e:d4:73:8a:90:21:4e:cf:37:45:3c:d0:1c:
         84:25:3c:10:77:24:a7:0f:9c:4b:50:ee:d0:47:21:91:0d:0e:
         a9:82:b0:93:19:2d:d6:41:cb:19:bd:1e:20:08:c6:ef:97:0d:
         2f:ea:c7:82:bb:fa:c2:e0:69:68:6e:a7:96:df:12:43:b4:9c:
         33:f2:1b:94:ae:44:26:d0:ee:35:17:38:71:67:2d:e5:c7:46:
         b0:c8:70:dd:61:2d:8e:d0:24:3f:02:a2:97:d1:e2:bf:f0:76:
         d6:14:0b:ee:76:67:36:9f:3b:36:ec:07:bb:24:52:97:3a:9b:
         7f:38:f2:2f:ba:9c:07:78:ac:2a:d3:5b:1d:ad:30:1f:75:e3:
         87:c8:c5:c3:8e:f3:34:09:d3:93:7d:8a:78:dc:f5:c7:9f:d2:
         04:72:d5:a3:59:ac:e4:5e:14:90:62:b7:7e:57:f8:8c:f7:c9:
         bf:90:b3:5d:1e:64:08:fa:0e:20:e6:9f:e8:1c:40:fd:99:c4:
         b1:da:7a:a2:1e:ab:28:3f:05:43:e7:0d:3e:3b:f9:ab:aa:96:
         0a:02:ba:c6:31:92:8d:18:c3:3c:6b:69:7c:4a:0b:56:e5:70:
         83:f0:ad:64:ba:d1:3f:d7:d2:6e:a3:0c:d4:1c:ed:a7:bf:72:
         81:7c:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----