Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File:                     Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier:          9IHpcp0N0vuzg9yQ3yjh3psqE6wquRTqQclipX9EoiY=
Subject key identifier:   38:29:AE:69:1C:86:F2:E6:DF:AB:A9:DA:AA:49:98:C5:D0:00:80:C2
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer:       /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial:       01962FAB7F100843A7EC748DAC6881143C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number:          0A95
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
                          2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 3TAcaoMReshifF4o1TiMXiexPawyNAKwH3CPkYKpxUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:10:08:43:a7:ec:74:8d:ac:68:81:14:3c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=3829ae691c86f2e6dfaba9daaa4998c5d00080c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:66:a6:fe:f6:18:f7:fa:83:02:e6:1d:f0:ca:
                    e3:e8:df:21:1f:95:68:6d:d3:35:77:e8:1d:ac:e7:
                    01:6e:d5:6b:69:f0:10:28:3e:17:58:0b:d7:3d:1c:
                    56:d0:09:b0:3e:c5:34:c4:58:44:2f:e4:2e:51:7a:
                    28:f5:63:0b:1e:02:ee:75:0b:93:2e:8b:fd:4a:9a:
                    24:8c:fc:f2:54:57:3a:51:44:ab:c2:f1:d4:ab:86:
                    45:b4:33:da:94:c2:e7:14:31:36:2f:69:22:12:4a:
                    dc:f8:74:f6:71:13:63:f8:e4:cc:48:f9:38:a1:a9:
                    37:a6:bb:c9:37:77:c6:64:ee:ca:f8:01:9c:23:2a:
                    ee:2f:5d:fb:a8:32:9a:c8:00:67:c9:2a:9c:56:a0:
                    6e:0d:17:5c:4c:8a:c0:0e:b3:4c:20:71:f1:8a:18:
                    a2:3d:2f:6c:23:a2:28:b6:9e:5c:0a:4b:b9:34:29:
                    76:a6:2c:b6:e6:be:ad:02:8c:3b:a0:65:d1:5a:20:
                    08:bb:cc:14:96:dc:ae:e6:9c:d5:73:af:e1:84:6b:
                    e0:2d:14:8d:a1:f1:7b:12:74:3d:4b:9d:87:8d:f2:
                    cd:af:28:26:7f:39:42:71:79:c0:24:12:e3:7e:07:
                    81:9b:d6:3a:3f:4d:0d:0e:45:dc:01:44:94:fd:cc:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:AE:69:1C:86:F2:E6:DF:AB:A9:DA:AA:49:98:C5:D0:00:80:C2
            X509v3 Authority Key Identifier:
                keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e8:ed:96:e2:79:1a:d9:21:50:90:1d:ad:de:d3:dc:e6:c8:
         17:b1:90:46:e0:a9:70:d1:c9:4a:f3:66:6c:03:1b:f8:f1:27:
         24:80:86:60:a0:13:fb:bb:cf:15:8b:25:91:d4:b5:10:ca:8a:
         aa:09:49:d9:26:a2:06:e8:7f:00:d1:76:6f:d5:5a:8b:d6:5e:
         df:9c:25:f8:ba:f1:34:ca:3d:f5:53:87:e7:c5:43:0c:54:e5:
         90:19:5f:d6:87:ec:f5:0b:81:b5:c6:27:d1:6c:69:09:bb:01:
         24:db:7e:c2:fe:07:f3:57:58:76:2a:de:7e:fe:ce:d2:64:d8:
         b4:18:ea:7a:c1:3e:c4:81:b0:99:12:c3:5b:a3:50:b8:4b:c7:
         07:6c:2a:77:af:76:23:f4:7a:47:19:c9:ee:5a:db:a8:b4:b9:
         64:30:42:fd:ae:1e:6e:12:c7:6d:f8:8d:53:63:b1:3b:f5:dd:
         df:73:92:d4:16:a2:15:12:7b:0a:5b:f5:cb:56:c2:82:38:a2:
         3b:8b:21:4f:66:52:8f:c8:46:d9:49:6f:b5:d8:26:a3:d5:86:
         ca:8e:57:18:8b:27:f3:57:c6:09:d4:97:db:2f:31:c9:42:65:
         52:65:11:29:61:8f:4e:0a:fb:51:e1:ef:7c:df:fc:7e:b3:83:
         ca:96:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----