Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File:                     KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier:          HdMn9wRiCkx65YMvuaB/PqFwjg+1NrYBD0oMTEMCLmo=
Subject key identifier:   85:00:3F:23:DC:26:B2:F7:05:5B:F7:E4:FE:63:D8:0A:B1:AB:C3:5A
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer:       /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial:       01962E2B11F243CA52E0FDA2902D565E6CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number:          077D
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: saDmF4IQegTYfsI2h81YFPAX+FkzPBxTZJ+YqPHAVYI=)
                          2: cNLYAjPMpLbcGOrpCslyUiLMP34.roa (hash: JmHm3+B47TlFvMWFE2W9uNvIfC/wvizwOPaVYVDTxDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:11:f2:43:ca:52:e0:fd:a2:90:2d:56:5e:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=85003f23dc26b2f7055bf7e4fe63d80ab1abc35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:07:df:41:9c:f0:11:8a:85:f1:c9:3b:86:
                    21:71:f8:9b:62:07:ae:e7:a6:60:eb:c3:8a:8c:b3:
                    f3:b3:7e:b1:35:2a:97:d6:02:38:41:74:41:87:d1:
                    f6:c9:9f:af:d1:89:b6:60:96:5e:f1:34:0d:4d:9c:
                    c9:8c:f3:8d:3d:2a:b9:e6:f1:5e:52:5f:91:09:34:
                    6c:9b:7f:66:2d:a9:08:15:e7:74:56:e9:24:49:49:
                    37:f1:a6:cd:de:3e:89:17:06:e2:6e:f2:c8:79:7e:
                    b8:42:1f:f8:2e:bd:15:4c:83:a0:e3:55:65:1f:07:
                    9a:d1:83:a9:7e:b4:0a:92:29:8c:33:fd:57:fc:7d:
                    88:32:82:ee:7a:7c:33:f1:b5:8a:96:0d:6a:3b:9c:
                    e4:56:77:92:6b:bd:51:b9:fe:37:dc:e0:70:db:cb:
                    70:05:46:69:21:f9:ce:f6:ff:0e:f4:40:6d:25:e8:
                    a4:d9:82:66:0b:d2:a9:9e:9c:ca:d1:8c:08:79:61:
                    5b:df:37:62:ae:43:88:b1:65:1a:0c:89:b9:1d:f1:
                    b3:b2:8e:9c:0a:e3:39:fc:35:a4:ac:2f:b3:4d:f2:
                    69:d3:d2:c7:d9:65:f4:46:64:8b:db:ef:6d:df:d8:
                    fb:a4:7f:0e:aa:6a:4f:3b:ac:09:ea:f9:22:e5:6f:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:3F:23:DC:26:B2:F7:05:5B:F7:E4:FE:63:D8:0A:B1:AB:C3:5A
            X509v3 Authority Key Identifier:
                keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:65:4a:18:60:5d:8d:12:2a:32:92:bc:59:a4:94:21:7d:4b:
         02:64:8d:37:0e:d8:49:71:01:70:e0:4b:23:99:91:90:a3:05:
         2c:38:df:a5:c0:ac:25:35:53:fd:55:7f:15:c6:1f:df:c4:58:
         ef:d7:26:bf:0f:71:a0:82:f3:80:be:05:2f:2f:02:e0:27:48:
         1b:45:be:e4:ae:6b:54:7d:a5:c9:86:db:04:d2:6b:ee:9e:41:
         76:43:5b:82:f8:cf:79:1e:85:ba:42:f5:7a:9f:b5:1c:c7:c7:
         da:90:21:09:e8:ff:f4:59:2f:13:31:63:d1:0a:ab:0f:6b:81:
         76:d7:40:b3:bc:75:5f:9d:19:59:de:f9:7c:0f:dc:55:0b:99:
         b9:6a:10:d5:d9:19:cb:84:83:a7:ee:5e:be:31:14:5c:a2:14:
         13:23:6c:6d:9a:0f:c0:2e:48:dd:13:7b:5e:47:b6:49:05:19:
         2d:6e:00:b8:ee:7e:85:af:ab:86:53:35:51:05:1d:85:f0:8c:
         56:6e:30:a6:c1:f5:4f:5a:07:df:0c:68:46:9a:e5:43:72:ac:
         86:8e:9d:8c:93:92:d9:9b:72:14:fd:c6:8e:33:23:55:c9:4a:
         5c:51:2e:fc:54:20:f1:d2:db:30:c1:b0:fe:3f:4d:4f:c1:1f:
         26:b3:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----