Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File:                     1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier:          LUySJgWnGV2KNO0VEa1xQFbhCu8nV+Hx4RLqsN/YGfI=
Subject key identifier:   3C:72:C9:DF:A6:33:7D:BC:04:B9:22:79:6C:50:9B:2E:CF:1D:7D:2B
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer:       /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial:       01962E2ADC0F9B173F033CB0C7644C5A5177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: AvH7bK+yuzso7ZZH6HoR9e8sJEhHyed6m1FruhSv54I=)
                          2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:0f:9b:17:3f:03:3c:b0:c7:64:4c:5a:51:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=3c72c9dfa6337dbc04b922796c509b2ecf1d7d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:d1:06:4b:2e:70:fc:a6:7b:8c:8c:6d:1f:
                    a3:d1:d2:ec:cc:8d:06:fd:4b:28:07:3b:23:86:b2:
                    7c:71:c6:23:84:84:41:c4:54:ad:69:a0:e1:d1:37:
                    d2:bf:8d:2a:5f:37:53:ca:16:ed:c4:43:2e:2c:a8:
                    15:d7:92:bc:15:77:29:61:60:1a:3f:46:55:5c:fe:
                    08:98:53:99:58:f1:dd:d6:f4:2a:29:14:e3:f1:94:
                    7e:c4:33:0a:99:6d:f3:41:6e:a7:b9:ba:c8:b8:ae:
                    1f:c0:ed:43:37:3f:87:cd:b8:b4:96:61:17:2b:d2:
                    14:a6:aa:42:35:46:32:3a:cb:3f:71:a2:65:ab:9f:
                    a0:4b:a1:68:e0:c3:7a:f1:df:82:db:0a:9d:0d:9f:
                    84:c0:e9:8e:63:91:84:77:f9:a7:e1:f0:a7:ec:f9:
                    4f:c3:64:ce:23:85:9b:94:cb:29:0a:c0:e1:d4:06:
                    8d:fd:e9:f7:ac:b9:e0:f8:fc:75:be:54:ec:82:fb:
                    db:53:24:70:94:79:74:77:45:2c:1d:35:b7:8e:47:
                    cb:6c:75:b1:c2:a1:17:cb:9c:1d:6d:1e:9a:12:d8:
                    47:01:78:f9:aa:45:05:f8:1f:25:69:72:8e:7d:b1:
                    a3:38:de:4b:0c:48:3f:6c:86:5b:6a:c4:9c:46:51:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:C9:DF:A6:33:7D:BC:04:B9:22:79:6C:50:9B:2E:CF:1D:7D:2B
            X509v3 Authority Key Identifier:
                keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:96:17:c5:66:d4:db:96:aa:cd:e9:2d:ab:1c:ac:d7:6f:4e:
         f3:8c:9f:dd:97:81:98:e0:ed:05:3c:aa:42:53:5b:bb:2e:85:
         b7:f4:fb:d1:18:a3:d9:18:7f:26:aa:5a:c4:6e:c9:f4:80:59:
         9a:b3:6e:b6:06:54:46:9b:9c:6b:79:e9:4d:d3:15:42:9f:38:
         da:2b:db:08:8d:75:95:c6:f3:02:a9:9e:86:0e:92:6e:26:7b:
         25:ff:54:03:bf:11:36:1d:af:d8:72:ea:95:38:94:51:69:6d:
         ac:b4:4b:93:d4:ef:9f:3b:95:58:cc:64:6c:c4:ee:ec:e1:7a:
         d3:ab:b7:ae:03:d8:7b:d3:03:f0:e6:cd:fe:c0:08:1a:3d:2b:
         67:97:52:b6:77:c5:ca:82:c2:9f:68:68:8f:b4:5a:14:f6:8c:
         d1:01:e4:73:8c:51:9c:d4:fd:e2:18:ac:24:7e:22:8a:93:74:
         70:01:58:03:96:84:81:2e:5c:c2:da:0a:7a:96:f2:b7:21:8d:
         c1:62:ba:02:c8:9a:6a:8d:74:36:b0:90:3e:51:ca:b2:c9:05:
         16:40:e8:9e:e7:d7:20:39:69:39:94:1e:7b:29:ed:e8:68:20:
         07:4f:da:29:04:69:98:2c:0a:08:56:84:a4:d6:ee:b2:de:69:
         b9:2c:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----