Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File:                     qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier:          XEVkGLI2kPIUOvcjmYFf33k9zay42153EEBYRgmyTkM=
Subject key identifier:   13:54:E3:18:4D:4B:B0:46:14:2B:28:65:37:BF:A1:6E:4D:B3:9D:DC
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer:       /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial:       01962F06648B1483768B9A65361191B5B4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number:          07B8
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
                          2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: eXgxfxjjYBzNCiNsi519J8yL/Bwmc8/BXqAc/wiX8NA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:8b:14:83:76:8b:9a:65:36:11:91:b5:b4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=1354e3184d4bb046142b286537bfa16e4db39ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:c6:d7:6c:e3:a7:b7:cf:34:d5:70:78:4c:
                    58:a1:30:79:7b:f9:14:2d:7f:cf:fc:9e:e4:ea:7c:
                    a1:f1:89:79:9f:07:5c:f3:7c:8e:eb:35:d5:c5:c0:
                    9c:3d:73:6f:36:07:7f:57:09:01:dc:2d:3c:d0:7c:
                    65:89:9d:05:8a:cb:d2:02:11:1b:37:95:eb:77:3d:
                    ff:de:fc:77:ba:14:c9:42:46:77:18:6d:7b:e0:9d:
                    14:15:cb:22:c9:96:f9:e4:e0:b7:9a:9b:2e:89:c8:
                    76:06:6a:06:2c:e0:b1:13:1d:b6:ff:5a:1b:38:5b:
                    ba:ac:d7:d9:4b:e7:5f:ef:58:ea:08:09:81:ea:d8:
                    e3:56:ae:47:1c:36:c3:ec:bb:17:70:c5:5e:7e:b9:
                    e4:25:ee:ec:17:f5:d0:22:f3:38:b4:d3:b2:fb:5a:
                    a2:87:a1:17:41:ce:37:d3:f8:2a:e9:b9:d0:f3:87:
                    1f:5b:e4:7f:ff:b2:3b:f8:2d:68:52:b1:3c:07:20:
                    76:1d:6f:1f:da:a7:0d:07:ce:14:5d:bb:87:15:77:
                    b0:e3:46:d2:2b:63:89:6d:0d:b7:c1:1f:e5:29:7c:
                    b0:bf:ff:d5:3f:ca:cc:4d:c3:c4:a8:dc:80:d5:35:
                    a5:fa:8b:17:c4:62:64:5a:97:d7:88:de:c5:5a:79:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:54:E3:18:4D:4B:B0:46:14:2B:28:65:37:BF:A1:6E:4D:B3:9D:DC
            X509v3 Authority Key Identifier:
                keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:66:0a:b2:09:cc:63:2a:3c:d3:fe:76:66:dc:32:7d:d1:66:
         c0:45:5a:17:e1:2e:32:96:0b:33:b8:1c:fe:14:6c:3e:8e:d3:
         45:1d:34:01:cb:d7:23:75:f4:1c:11:fd:9b:dd:23:ea:f0:d4:
         90:25:4b:8f:a4:b2:b4:cf:28:4a:c2:af:4e:65:b4:d0:7c:5f:
         8f:c9:c3:a2:c6:93:09:4e:05:53:64:63:7f:6d:50:5b:95:62:
         37:44:d4:16:08:9e:26:01:51:5e:93:31:a0:1f:00:47:b9:ca:
         f1:98:c9:99:ff:de:27:20:95:62:9d:0e:17:8c:97:7c:a1:12:
         27:1b:01:06:32:9a:5c:24:d1:07:4b:37:46:eb:78:e7:1e:94:
         08:60:48:c6:b2:be:83:d9:06:ad:93:81:a4:85:2e:d8:1e:45:
         d1:81:5c:ce:94:97:92:1a:e6:fb:bc:21:6d:4b:c5:d0:dd:7c:
         c1:c1:b9:ea:48:4b:15:79:a7:fd:59:24:51:4a:b7:c1:aa:f8:
         72:a5:53:03:6d:32:b1:e7:df:cd:18:5f:f0:34:eb:4d:19:16:
         3c:16:76:1c:c1:61:fe:4c:82:d8:13:97:0b:3d:22:ce:83:fb:
         35:96:76:fe:3e:ff:99:ae:c2:25:a6:86:f2:94:52:bb:7e:75:
         ac:43:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----