Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File:                     qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier:          DH1c4oWrYksPsH8ZpxfL9KMB4iYdbdN9X2+xE2UYfbc=
Subject key identifier:   06:9D:A6:87:59:06:F1:CE:E3:F1:03:B4:8B:15:B9:4A:86:41:6C:9A
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer:       /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial:       01962DF3F8A87B40E048AD1593D7970E9640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
                          2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: R2kZ8HbVCHiJRSnSjhA4FBPhANeH0ZyLSMi59VQbTng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f8:a8:7b:40:e0:48:ad:15:93:d7:97:0e:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=069da6875906f1cee3f103b48b15b94a86416c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:d2:79:c4:ba:d7:05:2c:24:5b:1f:9f:8c:
                    bd:a7:92:4a:f1:d6:a3:1b:96:e6:76:82:14:fd:88:
                    74:ca:62:74:9d:4e:68:ee:e8:15:29:c7:31:9a:33:
                    3a:5f:8f:7c:92:51:1a:04:dd:68:e3:80:f2:09:06:
                    fc:c4:64:c0:c6:cb:a7:4c:95:f6:88:34:28:e1:97:
                    e1:68:62:9b:04:41:0b:66:d8:11:51:45:6c:e7:65:
                    8c:8d:96:a4:ec:97:58:34:4d:5c:65:2d:b8:f2:f8:
                    f7:25:6b:7d:8d:f5:32:9f:df:38:06:cd:e2:f1:1e:
                    f3:22:89:87:97:e1:8b:2d:37:06:52:7a:b5:d3:91:
                    72:19:5e:29:9a:9d:b7:b2:26:6c:f5:66:46:1c:b5:
                    4b:e3:6f:61:a8:46:e5:50:0e:57:ea:96:2a:de:4f:
                    df:eb:c2:be:6f:9b:7b:cf:98:83:8c:e9:0c:05:c5:
                    ca:e2:b3:c0:21:e5:78:fe:ba:b9:e5:78:a8:f1:d3:
                    67:18:8a:eb:93:05:d3:62:47:69:92:d8:c4:3b:c9:
                    da:e5:be:08:17:9e:e1:81:5b:53:89:60:02:81:de:
                    c1:08:f9:1e:0c:42:97:6d:8b:3c:d0:16:61:0c:ee:
                    5b:ed:9a:76:0a:ab:8d:39:20:35:80:ba:66:e1:92:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9D:A6:87:59:06:F1:CE:E3:F1:03:B4:8B:15:B9:4A:86:41:6C:9A
            X509v3 Authority Key Identifier:
                keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:9f:35:cb:80:dc:c7:dc:2e:f0:ca:dd:79:15:4e:b0:67:
         40:2a:1a:ed:bb:57:14:e5:44:fa:8f:c0:a7:dd:16:cb:14:dd:
         9b:e9:e8:73:6c:5d:f8:94:b5:2c:90:24:d4:60:f9:f6:68:a9:
         6d:d2:63:fc:0c:9e:04:52:f7:96:8a:d7:32:7e:07:f4:a2:51:
         c4:5d:4a:78:16:7a:ce:60:b4:35:34:e9:d6:3a:cd:42:ff:e5:
         9b:ca:59:09:58:52:d8:6e:7c:dc:43:93:da:4a:3d:5f:64:82:
         6f:72:0a:3f:b5:c9:54:06:be:4c:c4:c5:ea:bf:b9:b3:48:5d:
         c2:af:54:1d:8f:ed:8c:92:75:d8:6f:b3:08:6b:aa:94:8d:3e:
         ca:e5:fd:46:c8:74:d9:5a:f6:f3:6d:ad:3f:b3:2b:05:91:5e:
         5e:b8:6e:41:60:92:60:93:6a:fd:80:66:2e:6f:79:ab:d8:ab:
         d7:bd:b2:2b:d1:13:d9:9d:cb:89:4b:0a:5a:33:cc:19:f6:09:
         96:7f:48:2e:ed:67:8e:c3:d9:14:b7:1a:cf:63:63:0d:27:2e:
         94:bd:e6:2d:9d:44:aa:f8:18:f2:94:8e:9c:da:b6:c9:69:69:
         a1:a7:b5:9f:39:be:d1:23:f8:67:bf:8a:a9:eb:0b:d7:72:2a:
         b9:f0:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----