Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File:                     RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier:          LEg2VxgKA5tUcRaWm7xvrNS/ybOsjsDseRIJ3rV7RnY=
Subject key identifier:   9C:49:67:A7:73:73:9F:18:6D:C5:B2:6B:10:E1:E4:CF:0F:AE:94:12
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer:       /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial:       01962ECF72C4FAAE92B192741C7352D6F007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number:          0501
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: xCatv5Ts+p435c6LSF1AmZY2LkbTdoCEGqWVdjLI7o8=)
                          2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:c4:fa:ae:92:b1:92:74:1c:73:52:d6:f0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=9c4967a773739f186dc5b26b10e1e4cf0fae9412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:da:7a:49:31:b5:4a:02:f9:6e:cf:49:e8:
                    23:58:6b:e7:3a:67:e5:cc:a5:22:f8:fa:fb:42:ef:
                    b2:49:84:c6:2c:bb:68:ef:4e:fb:14:40:45:70:c4:
                    ff:e0:9e:63:06:05:a7:6f:c9:f1:46:56:3d:92:b1:
                    70:b5:0c:b4:6b:0a:a0:d8:1a:81:25:23:1b:69:97:
                    3b:d8:6b:6e:53:7b:8c:5a:f1:c3:bd:6c:2d:4a:e4:
                    20:4e:38:3d:b9:a8:77:bd:df:9b:54:e3:4f:11:47:
                    fa:4c:6f:11:88:94:1e:49:ec:8f:d1:5b:25:3e:a6:
                    bc:29:92:e0:c4:af:6f:fc:56:8a:43:f5:35:34:90:
                    8f:ce:49:56:2f:c3:30:42:7b:cf:fe:2f:12:cc:e7:
                    b8:2f:98:61:e2:7c:1d:88:1a:a5:d0:b8:a9:1c:c5:
                    1f:56:8f:93:c6:66:bc:6d:57:f8:f4:aa:9f:6a:3f:
                    1d:34:02:53:4d:c9:70:7f:a5:09:46:13:41:1d:36:
                    37:f8:12:ab:22:6e:2e:1b:33:ea:ee:ad:eb:f6:fd:
                    51:a1:51:6c:8b:e7:00:f3:d9:a9:72:95:a2:26:ad:
                    7b:7d:21:3b:e4:52:2b:65:fb:0a:35:f7:4c:bc:d4:
                    cc:cf:89:dc:cc:ba:4d:2f:ca:18:f0:7a:17:a0:11:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:67:A7:73:73:9F:18:6D:C5:B2:6B:10:E1:E4:CF:0F:AE:94:12
            X509v3 Authority Key Identifier:
                keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:43:41:7c:ba:f5:c5:34:8a:91:35:e5:ac:37:72:b5:57:
         81:46:2a:96:13:46:ab:2a:3c:d2:66:ce:0a:e2:1f:36:d1:48:
         17:e8:61:9e:bd:8b:43:53:48:7e:f5:ba:85:2b:48:77:d4:e6:
         30:c1:ff:06:70:ae:cf:3c:6a:88:bd:9c:c5:97:5d:5a:59:ad:
         93:b2:10:00:d7:13:c2:d9:5e:fc:19:40:0f:13:a1:e7:2a:86:
         2e:53:8b:af:b3:a4:bb:69:52:49:53:65:c9:61:79:0c:9d:31:
         cc:59:86:98:a3:b0:43:a0:48:bd:a8:4a:14:be:25:65:ad:bb:
         43:70:3c:d1:1e:4c:41:82:b1:af:52:65:98:c6:6a:b9:db:99:
         ad:bc:39:07:a4:78:39:2a:57:a7:c9:f5:2d:ff:54:30:ed:dd:
         16:8e:06:ba:80:7a:ab:a7:c1:87:7f:01:f4:e4:27:f8:76:d4:
         ae:ec:fe:8f:b0:6e:36:b7:fc:b4:55:77:62:2a:10:92:cb:1e:
         98:b8:a2:f0:f5:30:67:20:fb:a3:6d:4f:73:b9:17:ed:dc:03:
         42:8b:66:ff:cc:fa:17:6c:cb:ec:b1:ba:14:a8:97:28:30:3a:
         80:d3:0b:57:09:7b:25:fb:12:50:77:75:81:b1:be:61:2a:93:
         3a:4b:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----