Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File:                     qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier:          y7vrc4IsG8zNCODv3J3nwbmW6VyOUrxmTroN4vUE9U4=
Subject key identifier:   8B:65:28:6C:4D:C1:A1:85:0A:13:5F:CB:1C:7F:CB:CE:54:3D:A6:59
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer:       /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial:       01962DF3F885C965911A1C697DAF04FA51EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number:          07C6
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: ExBhBcWEql+T2Qm0Vg598CQw8DdzDpqH2aoB1worrWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f8:85:c9:65:91:1a:1c:69:7d:af:04:fa:51:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=8b65286c4dc1a1850a135fcb1c7fcbce543da659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:33:a1:a8:25:55:15:59:c1:4f:26:7f:66:
                    44:3d:16:57:0c:be:84:f5:9c:46:a3:09:9f:d4:0e:
                    b5:59:13:d4:80:cc:8b:17:dc:c0:dc:cb:06:9d:d3:
                    a0:28:a8:71:34:ec:08:84:e2:9c:79:a4:6e:f3:9e:
                    a5:43:8e:f5:33:69:1f:fc:83:66:08:31:15:f1:6e:
                    d2:c7:3d:5a:67:bc:af:e8:2e:88:74:db:7b:35:1a:
                    b4:52:1d:cc:3d:7f:ec:8e:1b:b7:44:6c:21:ee:da:
                    48:63:81:ab:3b:35:86:1d:b4:1b:0d:e7:e8:a2:74:
                    47:42:07:d1:2f:ce:4d:36:36:d5:7f:8e:88:fa:92:
                    37:32:61:91:d9:f7:bf:90:f4:36:ec:cc:d2:c8:4b:
                    68:ea:86:d6:98:9a:25:e4:bb:00:bf:44:17:cf:66:
                    bd:48:b6:c2:95:d3:b2:a2:fa:fc:d5:38:23:ff:67:
                    ba:ac:e4:15:79:1c:bf:a7:13:73:2e:26:c0:6e:e5:
                    b4:23:ab:aa:04:00:c0:ce:bb:24:90:da:9c:95:6d:
                    2e:f0:0d:d1:1b:f8:94:fc:d2:eb:fb:ef:c0:f6:8e:
                    af:51:be:01:a6:30:41:81:64:b0:aa:22:fa:2b:de:
                    32:36:1f:27:e7:08:9a:90:b5:89:c2:29:09:ef:47:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:28:6C:4D:C1:A1:85:0A:13:5F:CB:1C:7F:CB:CE:54:3D:A6:59
            X509v3 Authority Key Identifier:
                keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:8b:17:c6:72:6a:88:fe:e1:0d:a9:3f:f0:4d:45:14:c1:
         74:37:b9:42:3c:b5:4a:ae:3a:ab:3b:a7:2d:83:86:6a:39:38:
         b7:14:f9:6c:a9:18:15:bb:97:1e:ee:35:80:89:d4:3d:38:b8:
         69:3d:0e:cb:f4:ac:b7:13:36:bb:2a:31:95:a8:ad:7e:15:03:
         17:3d:31:79:60:fd:5e:a3:e0:dc:19:24:12:b2:1e:cc:6b:95:
         0c:36:42:7c:c6:b4:8c:fa:db:a1:b0:b9:69:42:58:0d:02:56:
         c5:8f:28:ca:ae:76:6d:cc:e6:f9:75:68:25:d4:5f:f4:da:12:
         21:38:f9:22:38:08:28:4c:f5:92:b8:6b:0f:b1:8e:bb:b1:2c:
         71:51:3d:4c:58:c2:3e:46:5d:39:6c:7f:5a:a1:42:0a:8b:51:
         21:d5:91:aa:35:ab:e1:21:0b:6c:dd:ef:24:50:f8:e5:3e:b8:
         60:38:61:f7:ff:6c:85:aa:f6:b9:e7:62:67:38:66:67:1a:e3:
         37:85:2f:57:84:70:d9:97:42:8e:e0:03:b8:fb:70:9c:70:8b:
         94:8f:d9:c1:33:4c:c3:90:00:a8:2d:11:3c:92:fe:9a:c9:cd:
         40:22:8c:f5:e3:54:da:54:88:a8:a3:c1:9b:23:84:84:d0:bd:
         5b:e2:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----