Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File:                     k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier:          4+GNW3kipmYwzEeyolv5BSV20DpIhk+JleGn3h/4abo=
Subject key identifier:   58:E6:F1:FC:43:6A:04:E4:5F:AD:59:97:C2:7B:13:E4:63:A6:76:8A
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer:       /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial:       01962F3DA111E5541DC9EC6BE9ABAFA526DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number:          03FB
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
                          2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: kHzdl3/fTiPpfjqBXWZ82gVW8sfz/V86uJ185DfIap8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:11:e5:54:1d:c9:ec:6b:e9:ab:af:a5:26:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=58e6f1fc436a04e45fad5997c27b13e463a6768a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:b3:a7:86:ba:a0:b9:0a:14:68:d8:8f:66:
                    d5:5d:89:6e:39:96:8a:a9:ee:0a:df:90:09:82:6f:
                    7f:29:37:48:03:f9:6a:d6:50:4d:12:a3:5f:e3:fe:
                    76:eb:7b:c5:5d:bb:d3:ab:b5:56:81:2e:1d:42:fa:
                    57:95:75:ae:99:a3:79:97:1b:c6:e2:26:bb:be:7c:
                    6c:a7:07:ef:ee:b2:93:2f:f5:c9:30:47:2c:c3:41:
                    f4:17:36:aa:f5:18:b5:7f:80:4f:c7:ea:7e:a3:13:
                    56:4a:c9:8b:48:8b:81:eb:bb:9b:7e:8a:a9:0a:bf:
                    e5:a2:78:98:e3:e1:01:63:8f:60:e0:b4:45:59:16:
                    52:f7:4b:eb:1d:e3:a0:4f:90:75:e9:34:8d:5a:82:
                    fa:23:c9:d3:19:cf:ee:fa:8a:1b:39:38:41:33:58:
                    99:f2:2e:d0:a5:3b:10:73:5c:54:36:bf:59:6a:0c:
                    84:8c:52:9f:ea:17:60:78:ab:6e:47:72:68:58:95:
                    c9:b7:1c:b5:cc:d4:78:59:da:ae:b1:5e:fb:a2:82:
                    a2:f1:1c:57:23:78:fb:bd:54:ff:3c:12:7e:eb:05:
                    43:c7:04:a5:d7:c5:ed:da:99:c8:2d:47:69:9a:bc:
                    1b:ff:d9:2a:9d:5d:b6:50:ef:25:25:da:be:d0:5b:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:F1:FC:43:6A:04:E4:5F:AD:59:97:C2:7B:13:E4:63:A6:76:8A
            X509v3 Authority Key Identifier:
                keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:2c:18:0f:ea:73:a6:3a:65:95:10:d2:7c:44:fc:4c:c2:
         50:18:98:80:07:51:53:2a:91:c1:91:bb:eb:4e:bf:ec:14:de:
         a3:1c:30:8d:da:88:32:8f:b0:7e:f1:40:b4:c0:a3:e6:33:f5:
         7c:9d:11:1e:f3:2e:86:84:d2:b3:93:bc:4b:39:67:56:b1:39:
         0f:36:bb:1f:75:2e:62:db:6f:9b:42:b1:4b:af:fe:7a:5f:94:
         37:3a:f2:b5:69:17:be:bc:a0:7a:f4:ae:8d:48:a4:63:ea:2a:
         40:4f:cb:de:3f:0b:8b:dc:b7:9a:2b:ef:cf:2e:15:f7:cc:89:
         4a:4b:6d:35:a0:dd:e0:73:5d:6c:81:b0:a2:0a:47:25:54:e3:
         2e:0b:19:e2:1c:63:bd:e9:2f:92:6c:db:0e:0f:eb:18:35:ff:
         72:6b:56:3a:4c:e3:b8:66:3b:9e:8d:09:43:e4:16:22:36:20:
         c0:6b:8f:1f:61:6b:84:b6:40:99:5a:d6:3e:63:88:2b:ef:a4:
         48:c1:e3:fa:d0:9d:d7:95:d0:24:16:c9:1f:c0:a9:11:0b:52:
         1a:3a:51:6d:86:3a:72:79:b5:fa:b0:a0:ac:c4:10:5b:8e:d0:
         77:14:6c:41:d7:6f:a4:58:09:41:53:89:b3:92:cd:80:e0:fc:
         26:ce:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----