Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File:                     mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier:          goEXu1sg2axZo34x93RYHKaazcWjyujzmIPfTkor9hM=
Subject key identifier:   A3:07:0F:E1:30:24:36:EB:9D:54:52:8A:11:50:53:09:C6:1D:CE:38
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer:       /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial:       01962ECF633B8A5F0A4B0C45DA517582E472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number:          0EE3
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: qRtYVt06cdWrNJF8G6fS3q5UxjkshWSfJ4dQjn12UgA=)
                          2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:3b:8a:5f:0a:4b:0c:45:da:51:75:82:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=a3070fe1302436eb9d54528a11505309c61dce38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7c:22:8d:58:a9:a2:dd:d7:d8:7b:66:ee:b5:
                    58:8a:a4:d7:d6:13:e2:36:bb:f0:86:ab:84:a0:a7:
                    f1:2c:ce:e8:0f:29:ba:18:14:6a:8f:80:00:1b:9e:
                    b8:5d:f2:0c:22:a7:08:a4:47:93:e8:5d:37:05:77:
                    b3:ba:7f:4e:76:a9:93:0d:00:e2:1a:18:0a:7f:7b:
                    3f:f1:2f:40:f9:76:b5:37:bd:f5:b0:9e:6f:af:3a:
                    e8:c5:f2:c4:6e:7a:d4:cb:c8:07:11:79:ef:30:9b:
                    b5:8e:6d:57:81:4e:37:c6:0a:c8:51:0b:3d:87:d7:
                    35:b4:f7:7a:6c:d0:a5:0a:62:ea:e3:54:fd:cc:02:
                    30:c8:96:6c:2f:53:21:25:18:bd:36:e0:6b:95:ab:
                    64:6e:62:87:fa:14:92:6e:f4:e4:e7:07:db:36:61:
                    58:d7:25:d7:c2:78:8e:d7:0f:38:da:d6:2e:1a:8c:
                    2a:e4:bc:28:54:58:53:ff:f8:ef:f5:3a:df:40:86:
                    ea:3a:e8:d5:c8:a3:21:82:6c:2f:3e:2c:90:77:61:
                    d5:a1:32:35:44:29:3a:58:f5:62:1f:ff:3f:ff:0b:
                    de:0b:70:70:99:f3:56:05:95:83:24:f8:26:26:db:
                    d7:4d:54:98:1f:a9:f9:23:5f:4f:e2:ac:12:23:a2:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:0F:E1:30:24:36:EB:9D:54:52:8A:11:50:53:09:C6:1D:CE:38
            X509v3 Authority Key Identifier:
                keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:b8:f8:a8:89:50:94:73:07:8b:f9:4f:cc:87:27:9a:cc:
         04:89:a9:0f:d5:d3:a0:60:55:9f:09:cf:ab:83:2b:e3:46:86:
         27:c0:aa:15:14:e8:f9:86:ee:7e:15:77:1a:b5:91:7b:e6:b1:
         e5:05:e4:a3:b3:c8:c9:c4:cb:af:93:53:39:92:db:31:09:47:
         29:aa:df:46:de:5b:e1:d4:bf:1a:2e:a1:12:0e:a0:e4:d0:17:
         8d:a6:d8:74:fd:f7:b8:3d:26:ca:e2:0f:c0:be:00:9e:77:19:
         e6:97:b3:fd:bb:de:00:bb:e2:f5:8a:fb:ac:23:3a:14:ee:22:
         ae:13:3e:92:13:f0:0b:e6:69:4c:0c:19:5d:ed:7b:99:9e:2c:
         25:6a:9b:31:d5:8a:2a:f7:93:93:5f:73:57:f7:91:57:98:7b:
         f3:d6:46:1d:76:60:9d:69:ee:f5:51:b0:30:d2:ae:5a:d5:35:
         93:42:30:20:93:7c:fa:2f:8e:2e:b8:c0:d8:49:a2:fd:e0:43:
         cf:dc:f9:a9:76:1a:5a:31:58:7b:a4:bd:97:1c:39:76:d6:6f:
         bb:fc:78:7a:1e:62:3a:a5:34:5d:db:14:1f:dd:73:47:11:43:
         ba:82:bf:a2:68:77:90:b6:11:4a:63:9b:7a:94:3d:17:8a:a7:
         00:60:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----