Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          x/Js3E37mczN4BAuciTIkac1u7T1TxQxGaojXC/aEQI=
Subject key identifier:   0C:D0:21:D1:00:A7:AE:DF:7A:56:EC:54:85:19:A1:1B:A7:E7:7F:C8
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       01962E98896C39909227383C2404AD2F4DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          1451
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
                          2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: 6K0My2BDbXbNzP+YGkpIKeBjEwykNlC3/6sedpcNmqM=)
                          3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
                          4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:6c:39:90:92:27:38:3c:24:04:ad:2f:4d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=0cd021d100a7aedf7a56ec548519a11ba7e77fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:81:e1:ac:7c:7d:11:16:cb:6f:2f:4d:12:
                    08:08:1d:7f:f1:8e:38:86:44:5c:fb:4c:01:35:47:
                    e1:86:dd:ab:81:ba:14:ae:f6:a6:f2:0e:de:b7:fc:
                    38:24:64:a1:f4:d3:4d:5e:77:b5:98:eb:43:72:ed:
                    09:da:43:5f:be:be:b8:7d:30:b9:00:34:06:f8:40:
                    49:d0:61:c6:df:a8:69:23:e6:4a:fc:51:32:3f:32:
                    dd:5c:f7:64:e6:b7:6b:e5:39:44:57:0d:76:88:9f:
                    a9:76:2a:9c:43:d6:38:a1:cb:52:8b:41:4f:0a:e6:
                    98:f4:b4:7a:f9:3c:17:86:16:4b:93:dc:2e:5d:c4:
                    9c:1f:4c:59:55:32:d3:91:90:4a:3a:31:11:02:26:
                    42:91:28:d5:a1:56:40:b6:13:2d:fb:67:a6:99:76:
                    7d:61:a5:f5:75:11:06:c1:0b:09:e0:4b:e7:24:44:
                    13:a2:f7:e0:0f:38:f8:bd:e6:50:de:f7:9a:c2:e7:
                    48:b3:bb:fe:32:99:f3:91:88:a1:3a:0c:1f:a8:d2:
                    03:7b:f2:e9:b0:f6:f6:24:06:48:bc:fb:3d:84:73:
                    b1:23:b1:57:75:de:51:86:e9:2c:5c:18:42:7d:82:
                    b9:87:84:74:1d:3d:3e:62:57:bc:9b:be:65:4b:72:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:21:D1:00:A7:AE:DF:7A:56:EC:54:85:19:A1:1B:A7:E7:7F:C8
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:7b:e1:77:39:43:c0:f7:0b:a2:a1:db:41:bc:4a:d3:01:
         a8:08:ac:c2:ba:56:4c:e4:06:f9:b2:b1:85:52:a9:31:a4:9d:
         18:62:a6:c1:aa:ca:ca:84:46:fa:e0:bc:36:b2:83:34:98:70:
         d5:70:d4:cc:d1:7d:7f:f1:ba:df:d9:2e:36:e4:61:b3:3a:a3:
         7a:90:af:ec:c2:39:85:e4:dd:ee:0b:42:45:83:6a:6c:09:26:
         3d:79:bb:22:93:62:29:75:e1:b9:b4:db:43:5b:8f:ac:44:86:
         1c:86:34:54:6f:7e:62:ca:73:cc:3b:45:b8:76:7f:7c:88:a1:
         85:b2:dd:39:94:14:1e:7c:97:23:9c:b6:64:f5:fe:a4:35:a4:
         0a:41:e9:83:90:be:43:92:f6:4a:33:fc:96:8c:43:89:c3:ed:
         9d:6e:39:4d:cd:1f:ea:92:a7:7c:dd:c2:57:e0:df:de:b2:da:
         97:ea:72:e1:23:7d:e6:e6:3a:4c:b0:ed:b0:16:2c:f4:15:bc:
         ef:95:78:be:5d:2b:4a:ed:fe:9c:47:44:f3:b3:5f:46:4b:90:
         76:f5:3f:42:dd:37:8b:7b:62:95:87:8a:f7:25:10:d9:50:34:
         06:f2:db:a1:cd:95:65:cf:25:d7:f2:f7:1c:3a:23:ba:be:90:
         63:50:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----