Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          krYKK08ZkcA2v2gwydXuUtigkG+aIK9GUymnG4LOsvM=
Subject key identifier:   00:7C:DC:97:C4:7A:8D:7A:E9:4F:FA:58:39:CB:20:06:06:E2:AE:B0
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       01962F065E274A9A61A65AD6646A6493FC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          0F63
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
                          2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
                          3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
                          4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: 88nnMRKCJil/TwyO+oxcSmb5o0vLTnvJrEvS2gxcIk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:27:4a:9a:61:a6:5a:d6:64:6a:64:93:fc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=007cdc97c47a8d7ae94ffa5839cb200606e2aeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:92:7e:29:6d:ff:fc:dd:6e:9b:9d:3f:19:
                    e8:08:23:3b:e7:5b:4b:f2:ba:5f:bd:c6:4b:6a:57:
                    3a:30:07:26:db:e9:08:6e:df:6b:36:c1:45:37:42:
                    f9:4d:28:f0:d8:54:d7:75:77:89:a1:2f:37:63:0b:
                    96:21:0d:a6:ee:ab:d1:bf:2a:77:17:5c:bf:92:49:
                    3f:4a:b7:e5:91:e3:30:df:99:50:df:b2:a7:07:76:
                    a2:8d:22:82:46:a3:ab:43:e0:30:4c:13:04:33:ac:
                    3a:94:72:fa:82:f7:19:50:b4:a9:c0:93:91:16:2d:
                    92:4a:09:11:9a:7d:fc:9a:18:6e:23:1e:48:a6:05:
                    62:6a:39:e5:ed:16:c9:e0:a6:ed:d5:21:d6:c5:2b:
                    f3:4d:82:4f:3f:77:2f:d4:17:bd:b5:4f:20:a1:87:
                    47:f9:e9:80:64:37:c3:a1:36:7a:b7:36:6a:a3:63:
                    43:19:0c:9a:ad:1a:ef:d4:e2:b7:e0:b6:ec:5b:9d:
                    8f:3f:e8:b1:01:aa:96:6d:9c:1c:64:e6:5c:15:e0:
                    11:c9:bc:a7:b7:99:4b:bf:91:5a:59:cd:80:be:84:
                    fb:0d:71:93:0a:9f:94:d7:3f:6e:39:27:c0:39:af:
                    8e:bc:0e:46:22:16:ad:fa:0e:03:8c:dc:2d:3d:7b:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:DC:97:C4:7A:8D:7A:E9:4F:FA:58:39:CB:20:06:06:E2:AE:B0
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:57:c3:08:f4:78:f4:f9:a6:b3:91:56:7e:e5:bb:ad:4b:5f:
         52:69:a1:02:25:3d:24:b5:dc:b9:b8:4b:21:c8:18:23:cf:40:
         73:92:15:0f:5d:70:85:92:61:d2:db:f9:ba:41:64:4a:28:09:
         da:90:86:5a:7c:12:e5:49:22:e6:71:70:d6:ed:d0:a5:89:ef:
         4d:64:b4:64:d6:25:bd:a3:77:2d:7d:78:75:13:0c:5f:c4:9f:
         48:1e:69:35:5c:61:d6:68:67:b6:1e:fb:19:87:b0:10:df:5e:
         9f:8c:37:52:05:3d:14:86:8f:d5:50:4b:30:24:28:c9:9c:d9:
         b5:94:29:76:60:b3:ff:ec:62:91:e4:0d:d5:0b:45:db:25:12:
         84:9b:6d:fc:40:88:af:0d:6f:e1:9c:24:02:a7:46:d3:18:29:
         97:c5:e3:12:eb:fc:0f:e7:8b:fd:45:81:03:2a:da:16:57:09:
         42:e9:36:4e:34:e6:62:e3:07:bb:72:e7:c1:1b:1c:fb:92:e7:
         a0:79:2e:6b:b0:71:ea:79:01:04:ee:b6:39:7e:72:38:35:4a:
         53:62:f1:26:7e:dc:50:5d:f5:b6:b7:ae:56:79:16:70:1e:88:
         63:63:49:ca:9f:f3:2b:fd:e0:dc:2b:a3:e7:08:6a:0b:f1:07:
         03:93:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----