Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File:                     qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier:          ZIwHFvHoNI5Lr2lHGwpe4bu4LkXf0dBwX8DuAyvppCU=
Subject key identifier:   18:2C:F6:CD:1D:F7:12:D4:2D:37:1B:59:6E:D3:92:E4:6F:BD:78:AC
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer:       /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial:       01962FAB97287FC43E42ED8E139D54AA7F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
                          2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: R8ED8mg3KVREuX7HrL79EjnKnBLoGneRR4/Sknxd7Ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:97:28:7f:c4:3e:42:ed:8e:13:9d:54:aa:7f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=182cf6cd1df712d42d371b596ed392e46fbd78ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:17:b9:75:36:a9:f3:8f:74:2b:07:3c:41:
                    36:50:cf:dd:ce:bb:fa:9b:bc:4b:b2:41:0f:f7:7d:
                    b3:b2:53:ba:70:68:61:b8:cf:d9:b7:57:fc:bc:ee:
                    25:09:c7:24:63:f3:73:7d:79:b4:11:3f:84:29:bf:
                    55:5b:b2:5f:f5:e9:de:66:cf:35:65:13:15:95:b1:
                    2d:6c:17:75:c2:d4:ad:f0:db:07:49:e0:90:60:bd:
                    b2:25:45:99:a6:56:de:17:2b:eb:ab:2e:19:c7:66:
                    90:22:50:50:2c:ea:5f:ce:57:73:1f:9d:04:7a:d1:
                    a4:d7:c3:73:48:d5:90:76:37:49:93:58:50:c4:f0:
                    b5:8c:13:96:c5:fc:45:52:f5:53:85:c3:f4:b4:70:
                    f6:63:fb:b9:3c:a3:3f:fa:05:e4:77:c0:8f:c7:bc:
                    1c:60:98:de:77:e9:4d:b8:e4:56:dc:ad:6b:84:cb:
                    e7:b2:ff:9e:02:b2:91:3a:29:38:0d:65:9f:3f:60:
                    65:db:27:6e:5f:cb:16:d9:8b:85:bf:5b:32:29:70:
                    df:63:9f:57:3b:ee:2e:4f:03:b5:26:6f:77:b4:1b:
                    ad:92:6e:d3:a4:78:e6:18:70:03:d2:ba:09:5c:cb:
                    66:0e:a4:c0:d5:32:9b:3c:b8:ca:16:84:0d:56:02:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2C:F6:CD:1D:F7:12:D4:2D:37:1B:59:6E:D3:92:E4:6F:BD:78:AC
            X509v3 Authority Key Identifier:
                keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:26:47:b9:fd:fb:d3:be:2f:4b:ff:79:bc:68:78:ff:80:e8:
         7e:e9:11:34:11:7c:ae:df:bf:33:09:2a:9b:07:48:fc:c2:24:
         e1:de:3a:2c:ca:13:20:e7:5f:16:66:eb:03:c2:54:a7:4b:d2:
         25:74:1e:11:ac:41:ab:10:ca:81:53:ad:2d:d6:2f:36:4f:9a:
         66:14:cd:bc:6c:49:03:29:25:2b:2c:60:fe:5c:2d:32:3f:9c:
         f5:74:9f:44:ad:f3:2c:77:68:1f:0e:51:8d:d3:cd:d5:ae:9c:
         89:7c:a8:b4:0f:8e:9b:17:a0:4c:38:94:bf:b7:47:f8:ff:b4:
         2b:04:a9:bc:07:e6:04:91:c8:09:f3:75:91:b0:bf:7a:03:6b:
         16:9c:fb:2c:dc:8f:14:91:29:27:09:fa:4c:62:80:96:1f:da:
         27:30:81:0e:d2:47:93:39:8f:7a:6c:de:dc:fd:f0:64:1e:98:
         02:37:5b:2e:a4:c2:ce:cc:72:90:6b:a0:ad:6c:20:98:5d:16:
         ad:9f:68:a1:18:4c:e6:fc:85:68:d5:3a:81:0a:37:09:89:95:
         10:3c:f4:09:8f:18:34:4d:a7:3b:ab:26:cd:6d:4b:d0:7e:42:
         75:2c:81:d0:3b:71:e3:7f:6e:19:bc:58:9f:bd:19:17:6d:f5:
         d0:0b:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----