Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File:                     qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier:          MViO7sEaUUL86RQGLKOiShQtrtkZOx06dtRJuG5sxKM=
Subject key identifier:   D5:03:1B:95:18:A3:22:AF:9D:A7:04:12:2B:B5:7D:D5:21:25:A6:4A
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer:       /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial:       01962F3D7CC77BE9150092F80F60BB5D6940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number:          0A07
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
                          2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
                          3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: Ku8P5nnhPpd+b/aYLBusVMsWQ7a2or9Q1GG5l9Yk1T4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:c7:7b:e9:15:00:92:f8:0f:60:bb:5d:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=d5031b9518a322af9da704122bb57dd52125a64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:06:1e:a3:03:78:ee:b4:b7:9e:a1:cd:9c:
                    96:6c:4f:11:8d:74:3f:fc:25:e7:1c:04:44:28:38:
                    dd:67:15:34:05:f2:55:5d:79:99:3b:8d:4a:fa:cc:
                    ee:25:1a:9f:96:06:05:2a:11:34:9a:a9:ac:bd:e7:
                    11:9c:fd:12:6f:9e:08:c3:bd:a8:c7:43:1d:3b:73:
                    4f:ff:da:c3:21:29:93:0b:8d:0c:b5:a7:f1:2c:13:
                    cb:aa:85:cb:f9:53:ad:8e:30:57:1f:dc:1e:03:81:
                    de:a3:77:63:18:fc:63:fe:0c:df:42:d1:21:6c:46:
                    7e:e7:5e:ef:ca:9c:f2:f9:e4:6e:ac:1e:41:bd:a9:
                    85:fe:2b:70:4f:1f:0c:2a:49:e1:f4:67:32:8b:0e:
                    50:6d:4a:90:b1:1e:5a:39:5d:1a:ed:c5:44:68:9f:
                    4a:2c:65:29:a0:97:99:63:ca:09:07:ad:09:72:02:
                    fa:fc:a7:32:4c:b7:ad:14:07:ef:76:70:ed:b5:e4:
                    6f:df:f9:2f:1f:f1:33:a1:5c:8f:68:67:8c:8a:19:
                    04:98:0b:08:f3:5d:84:d3:f6:05:ba:a1:2a:99:02:
                    a3:a9:1b:8a:97:29:59:3d:2b:b5:8f:92:bd:38:03:
                    b3:84:f0:15:19:d2:c1:99:0c:eb:ad:61:fa:c7:4f:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:1B:95:18:A3:22:AF:9D:A7:04:12:2B:B5:7D:D5:21:25:A6:4A
            X509v3 Authority Key Identifier:
                keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7a:6b:37:1b:b4:a0:6f:06:c5:72:f1:34:35:36:c7:c3:aa:
         c9:96:bd:27:f2:6a:9f:e9:f6:99:38:d4:64:e1:50:1c:ca:58:
         e1:25:03:7d:6b:4a:7d:fd:e4:cd:07:57:f4:bc:f9:1c:e3:6b:
         3a:43:a3:80:a0:c2:8a:55:2f:72:e4:ca:05:e9:18:c5:fc:8c:
         0d:34:19:1b:52:a2:e5:cb:69:01:52:13:df:de:0c:e6:2d:a9:
         59:dc:88:2c:9d:d3:cb:4a:92:b1:2c:0d:9b:2f:5c:b9:ae:be:
         9f:8a:4f:f9:43:ec:09:63:90:a7:95:7a:a8:f7:a9:70:c3:cc:
         c8:3b:36:cb:46:b8:42:02:37:f8:9e:78:9e:79:c0:c5:ce:13:
         e9:35:5b:f4:3f:22:83:e0:61:af:2c:86:ff:0d:e6:79:c6:6d:
         ee:95:47:a2:41:ec:40:57:b1:99:53:73:d5:73:a7:a2:6a:f2:
         06:92:70:87:8d:7c:ec:45:5f:61:6f:18:4c:0d:99:ae:15:b2:
         b0:ac:6f:54:31:38:82:7a:5c:0a:f8:36:e7:b2:a1:33:b8:4f:
         74:8c:54:e9:33:a1:8c:17:c2:6e:f2:cf:32:ec:97:dc:17:66:
         e2:9a:da:e5:7c:35:9d:a0:0d:df:7c:1d:70:12:3b:ba:da:19:
         da:68:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----