Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File:                     qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier:          sywKhpryVJK11xovn1SiYSjU203Ly5hasDlcoSUNiKw=
Subject key identifier:   6D:F8:45:D7:D9:75:E0:71:C1:2E:59:48:7E:6A:F8:13:68:F6:05:61
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       01962E99BD5991508BA6BF7F3D69437B923A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
                          2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: q2vPKHo0CqnlR9Lb1wAjIPMsTNNHusEZDpdTXGTaKZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bd:59:91:50:8b:a6:bf:7f:3d:69:43:7b:92:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=6df845d7d975e071c12e59487e6af81368f60561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:2a:4b:22:eb:8a:11:61:85:37:5b:14:31:
                    26:e6:dc:7b:ef:3b:8d:68:6d:1f:5b:37:36:45:82:
                    98:0d:68:09:c7:3e:b8:ba:18:6a:85:f3:8a:57:4f:
                    0f:8e:0c:a1:6c:03:6a:03:cf:c7:16:22:d7:90:aa:
                    9e:24:9f:6f:18:fd:25:c5:ff:c0:f0:2c:b7:3f:c6:
                    16:02:c0:3a:2f:df:46:0b:3d:65:57:d3:85:be:3d:
                    9f:82:45:90:2a:5f:ef:16:cf:86:81:03:46:84:18:
                    a5:0a:c0:a5:a5:fb:ea:51:cb:36:5d:74:62:33:97:
                    24:41:bd:4d:61:3f:2d:cb:93:0d:83:3b:f1:be:ae:
                    0d:dc:1c:30:09:42:8b:bc:38:20:66:61:d9:88:e6:
                    3d:0f:2c:ff:90:d6:d5:2e:91:19:ab:50:c8:2f:b5:
                    1a:88:0e:cd:0a:c8:bf:79:79:39:67:b2:08:d7:fc:
                    34:05:43:6b:99:f3:73:48:92:6d:b3:43:d6:8c:46:
                    a3:d5:58:cf:ce:16:9f:40:0e:bd:1e:a8:a1:6f:f0:
                    85:68:9c:a4:a9:7d:65:13:13:e0:4c:58:43:cc:dd:
                    66:46:21:0b:a4:17:f4:70:2c:aa:48:a3:a5:d6:fe:
                    cb:1b:2a:2a:cc:3d:3e:e7:9e:d6:2a:f1:24:ef:40:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F8:45:D7:D9:75:E0:71:C1:2E:59:48:7E:6A:F8:13:68:F6:05:61
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ed:e1:a9:67:24:f3:d6:69:a7:12:26:05:c1:1b:d1:e8:92:
         b9:02:31:44:c9:81:a8:0b:4f:13:28:a8:20:cc:da:15:78:66:
         88:88:79:ca:d7:ec:35:6a:66:06:aa:ef:b4:ed:b1:7f:dc:f2:
         5e:78:15:6e:d2:68:4d:38:df:0d:60:2e:c3:f2:74:dd:3c:da:
         c4:7f:75:63:30:19:c7:6f:34:1b:59:2a:77:fa:40:6a:12:0f:
         c3:bf:aa:7a:26:cd:89:04:23:4c:fa:88:6e:23:bb:2b:bc:5b:
         f4:ca:7b:cd:76:6e:af:63:37:28:18:92:22:99:d2:64:55:e0:
         e0:70:04:b7:79:25:19:3c:be:2a:77:23:a6:aa:89:71:45:40:
         5f:75:75:9e:a1:95:40:0f:47:cd:f6:22:ad:98:98:72:d1:38:
         0b:94:f2:1d:a9:8b:11:c6:4c:a5:19:99:83:1f:39:48:f0:4f:
         68:21:52:94:62:47:22:ba:67:06:6a:9c:c7:f8:34:f6:9e:e1:
         a9:76:18:23:24:18:6d:7a:95:ff:62:76:b9:06:48:8a:b1:99:
         5f:b7:2c:fe:ea:72:e6:83:79:1a:c1:40:0a:91:a3:aa:8d:49:
         ee:ff:c7:08:a5:26:0f:ab:5e:f6:5a:37:ee:b1:fd:0d:c4:e6:
         1c:e7:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----