Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File:                     KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier:          jlgZc76HpRSNA4tGcRfK21Nf5k4sqPwQDL+y7qcR9c8=
Subject key identifier:   DF:79:81:D5:49:22:DE:A8:9F:3D:8E:BA:9D:EA:D3:C6:A4:1D:1C:9C
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer:       /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial:       01962E2B2CCC6C90DC869AB6277D77C9495B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number:          10F9
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
                          2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: vyZfb+fM0qs9EO/FfBRo2s5bDdP2jvTsAsq1g/2K9Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2c:cc:6c:90:dc:86:9a:b6:27:7d:77:c9:49:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=df7981d54922dea89f3d8eba9dead3c6a41d1c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:98:18:e8:6b:11:0c:b1:34:3c:10:6c:d0:
                    7a:99:92:8d:8a:61:54:04:2e:90:d4:9a:a3:de:ff:
                    5a:9b:e6:50:fe:66:24:41:20:7c:20:07:2d:88:ea:
                    d8:ad:9d:a1:aa:cc:fb:3d:cd:f7:42:e0:49:b4:ee:
                    09:10:74:bd:c0:6b:89:1b:93:43:b9:cf:2d:db:e2:
                    fe:d8:37:25:db:07:cc:83:69:7b:5f:4b:69:a6:a8:
                    71:5c:8f:91:2d:40:a5:1a:dd:51:74:5f:6f:46:ce:
                    61:16:dc:01:ba:30:6a:ff:f3:5a:b4:7c:a8:e0:ec:
                    6f:f9:9f:85:38:d5:c2:b6:de:ab:06:31:86:43:f1:
                    0b:32:c4:f0:f2:d7:69:5d:b9:56:20:44:8a:9e:8a:
                    40:a0:86:fb:0d:10:4a:d3:7e:fb:0a:71:20:28:f7:
                    70:b8:19:00:62:44:9d:bc:c7:19:ad:26:57:d8:da:
                    87:c8:8b:1d:22:3d:af:08:0e:bf:13:01:39:fe:cf:
                    76:dd:e5:c7:d7:50:27:df:b8:ce:ee:06:19:97:da:
                    76:80:eb:01:3e:87:10:84:38:38:03:c8:a3:37:28:
                    fe:7c:20:06:c4:b1:fb:c8:b5:0c:03:39:81:12:f4:
                    5d:e1:71:78:3f:b2:ad:44:bf:eb:90:95:09:9b:85:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:79:81:D5:49:22:DE:A8:9F:3D:8E:BA:9D:EA:D3:C6:A4:1D:1C:9C
            X509v3 Authority Key Identifier:
                keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:5b:03:73:4d:ad:e5:cf:4f:dd:9a:82:c6:ab:27:dd:47:
         3c:41:30:04:e5:b3:02:00:d0:01:5d:1f:cc:34:c0:e9:5f:82:
         87:2e:14:77:e2:a5:12:74:3f:fc:0c:d4:74:6f:9c:06:0a:ed:
         23:04:ab:f4:c5:29:f7:d3:4e:d9:09:46:50:83:41:03:83:af:
         1a:4b:93:56:a9:49:2c:b6:9e:91:c7:8b:cb:20:41:39:0a:50:
         68:c8:c5:4b:a7:bc:f9:fa:44:d1:36:2f:68:37:98:8c:bc:2e:
         93:1c:da:b3:85:8b:45:80:0c:ad:21:fc:b4:47:ed:e3:50:db:
         99:69:68:7d:ea:6f:04:e1:e5:31:02:85:15:87:c1:f1:e2:7b:
         10:0b:e6:ba:ed:c2:97:7f:e0:e7:fb:33:3c:c2:bf:68:97:99:
         74:26:41:d1:63:67:91:b4:5b:4c:9f:b9:e5:c0:0f:e5:5a:9b:
         65:ae:09:e5:f9:99:83:4f:93:94:7e:5c:4a:d2:1a:49:e0:57:
         5f:59:61:0b:d2:13:b0:9e:94:41:dd:e4:95:ff:d5:b3:4c:9c:
         97:d8:96:a0:75:73:4a:7e:08:ba:84:df:4c:37:82:34:5d:d2:
         c3:97:21:45:5b:d1:d7:1c:ad:7b:19:4d:74:26:f0:f0:4c:78:
         e9:70:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----