Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
File:                     qqthEeAEwqBE8Wi40oJzz2dE86g.mft (raw, json)
Hash identifier:          P28/Z+dxU6W+8a265FCa9O1nzAuYrun1FR9X5Faa62M=
Subject key identifier:   09:CA:4D:1F:B4:4A:17:B0:D4:A7:27:A6:C8:69:55:C9:ED:B0:06:E2
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Certificate issuer:       /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial:       01962E99385FDBF946B47DBCD31BBD289568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 6QrRaQgEDEW94ibCtl94XG-cNo8.roa (hash: gVo0FFoXqD/aGsK6YPk59eIbOT2OP162DfbC2dzkqj4=)
                          2: 7urOT0b2zyplaSV17VCTc3I9rtw.roa (hash: Yw1VoqRmvMFMVO6l5Uy0jZGfW7yUlUJdkk+jB/3e9sA=)
                          3: 8yCq7gWrNtSGUAwhbKMYXo5sVuM.roa (hash: 490w7F1y4o1yoJe8DWbaKwN62Kay5Tc/NkagYt79lV4=)
                          4: OtjJmI6Ls9Kg1YxzkMEdEkmTt7I.roa (hash: /6BLR+AdUGXWQBTgTfTbrGkLKrcJvvynFVuSv1BHLUo=)
                          5: lKv2UXEAuZ3pVmPri_cgjqsjuH8.roa (hash: 21YjP9sGrHMd/UxygO+uZmaIfIlwivtYQxl8y+y2Ni4=)
                          6: orOsP0rs2ff7STwYpI2t2_50MTo.roa (hash: o5pPTCCPZuPMBRMWmMSYExhsj/8nITrHMx5Um0qrkAo=)
                          7: qqthEeAEwqBE8Wi40oJzz2dE86g.crl (hash: YRnSa81FIEk0MRNQ9aKzgl+vd0HPrl58hpdVpHkamQE=)
                          8: v3pVfUjy4X_Jk5Ymo8xwhRDG6ho.roa (hash: WvXW8cKBuenjm6GrqbAc1s5MZXRWgg4MxpYkVeSUO6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:38:5f:db:f9:46:b4:7d:bc:d3:1b:bd:28:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=09ca4d1fb44a17b0d4a727a6c86955c9edb006e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f2:e8:68:dd:10:fb:10:3d:6e:c7:3b:eb:f2:
                    13:72:f0:3b:64:cf:0d:6c:9f:09:6d:11:69:75:ed:
                    1c:c7:68:88:f1:34:c6:63:e5:e0:25:63:32:85:7e:
                    c1:d2:75:54:00:7b:a1:bd:3e:6d:15:f0:bc:39:43:
                    44:2a:80:e3:ce:82:f3:07:e1:a6:74:58:3c:46:41:
                    94:20:05:e0:18:2a:bd:c4:15:7c:3a:d9:86:10:3b:
                    53:97:50:95:61:20:60:38:39:3b:6e:69:d0:3a:8e:
                    e2:6b:9e:e1:fc:7c:80:6b:2e:26:b0:58:1c:c7:74:
                    ad:0e:04:89:96:d0:e4:31:15:a4:2b:95:79:60:d6:
                    1b:34:bc:93:01:c4:dd:8e:00:30:26:e5:13:22:61:
                    f7:df:21:60:2d:3a:d9:e4:5f:87:47:18:4b:4d:1b:
                    a1:99:f0:37:e5:de:b0:41:65:50:20:b0:7a:f8:cf:
                    5d:2a:2e:62:24:70:95:d3:59:1a:69:17:ac:1b:ce:
                    e9:1c:c4:d7:80:d4:87:59:f6:aa:6e:6d:89:98:65:
                    51:f9:26:d2:20:c3:de:c1:df:f5:70:e7:d7:35:ed:
                    49:bd:4f:31:32:f6:af:b6:c1:2a:77:ed:70:b9:7b:
                    90:1a:d4:0f:5b:97:9c:3c:e0:07:3d:2c:03:16:92:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CA:4D:1F:B4:4A:17:B0:D4:A7:27:A6:C8:69:55:C9:ED:B0:06:E2
            X509v3 Authority Key Identifier:
                keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:2e:74:ba:58:ba:0d:78:96:e3:c7:18:bb:1b:34:b5:95:
         3b:ba:c9:b1:2f:67:2b:19:34:47:0b:17:22:a3:4e:0b:4d:e9:
         91:69:5e:ef:da:97:25:73:80:d9:2d:01:37:61:d3:89:cd:1c:
         8d:ae:c7:7f:f7:d3:9c:76:c1:6e:23:58:1a:67:39:c6:ef:05:
         62:17:3b:aa:e1:d5:5f:54:ec:b0:16:9e:0d:de:4b:fa:c0:04:
         cc:ff:b5:e9:e6:81:c0:65:0f:eb:f4:ae:c7:73:bd:b3:7f:58:
         e9:59:f0:04:b6:16:8a:0f:83:ee:d8:cd:92:7a:b6:cb:c5:ef:
         6c:83:de:c3:18:87:8d:b3:91:39:32:e5:8d:9e:02:5d:41:d8:
         c5:6b:70:a3:99:e2:39:b8:79:98:56:0d:41:62:a9:c4:77:94:
         c9:08:c6:3d:e7:29:7d:dd:ec:9b:85:b6:d5:39:b6:a4:73:23:
         31:07:b5:4e:d0:dd:40:be:4e:72:0a:7a:36:06:59:10:20:47:
         08:d6:b1:9e:9b:c0:4b:90:7a:18:6a:0a:a9:89:ff:d2:1a:ae:
         01:e3:71:e3:c5:38:fa:07:b3:c5:34:1a:d6:ef:d9:c1:65:ef:
         18:02:3f:bf:66:c3:63:5b:1f:5d:19:ea:ac:27:9c:5b:70:d1:
         2a:6a:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----