Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File:                     qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier:          BVyil0Az4eGlVCx2/uGgkp4VbTv7tlhBJL8pyHJuBHE=
Subject key identifier:   C4:8B:A1:12:64:68:B7:6F:8A:D5:98:91:EC:35:7A:16:C2:04:AE:7A
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer:       /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial:       01962E61939E3C8E555CA5635DFB6A85B957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: AJtxlRhC18CSM9vDFJ0bVbhxN3Y.roa (hash: fBqbrVqiGsFpDlku7pjNXfyrY6CdOCxCpNnDRdqo0xM=)
                          2: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
                          3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: LuN5UpjlCe+hwh/JfLDF3qVKW+MNTuBLru/LCGOXk9s=)
                          4: z9pLNQSZNKFYtIVw9GxMfA_dzlc.roa (hash: ceBAqvnBw6p+b98UNKLSzZv2TyxRWLOoeu9xMf4knvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:93:9e:3c:8e:55:5c:a5:63:5d:fb:6a:85:b9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=c48ba1126468b76f8ad59891ec357a16c204ae7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:1b:8b:00:23:80:7c:08:d9:46:32:aa:da:
                    23:c6:65:07:3d:48:a8:31:9a:4d:ad:ca:42:49:58:
                    81:61:28:97:4e:6b:37:fe:82:63:5c:47:01:d6:97:
                    d1:76:0e:84:22:51:24:d3:6e:7c:d4:06:ef:3f:f1:
                    9e:1e:b7:37:b9:eb:31:d2:a2:c8:91:5f:64:35:5c:
                    22:bb:d7:c8:68:90:97:ee:8e:5c:06:68:65:6f:6e:
                    eb:95:7a:8e:fb:f1:1f:08:5b:bb:4b:56:7e:19:4e:
                    f1:f6:ff:e4:a0:1a:66:6e:64:d3:48:6d:06:62:aa:
                    5f:0c:b5:2a:1e:00:ce:9a:38:9a:87:39:f7:cc:d3:
                    f4:92:06:bb:af:1c:3f:44:f6:51:b9:8e:08:9d:a1:
                    ae:cb:12:07:e4:fb:1e:07:37:3d:1f:11:60:b7:aa:
                    fa:05:4d:96:63:c1:55:23:bd:59:e3:46:59:fa:1b:
                    92:20:a8:f2:c5:bc:11:6b:0e:fd:a4:09:80:c9:6c:
                    81:77:0c:3a:28:a6:33:6c:b8:ee:61:2f:63:82:83:
                    09:38:af:43:b3:09:c5:64:c7:3a:63:e4:d2:a9:f2:
                    eb:a8:23:d7:35:44:d2:f4:24:85:83:90:e3:09:6f:
                    b4:0f:e4:3d:9a:60:29:92:3e:9e:67:b0:55:2f:da:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:A1:12:64:68:B7:6F:8A:D5:98:91:EC:35:7A:16:C2:04:AE:7A
            X509v3 Authority Key Identifier:
                keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:11:ae:8b:f6:df:d8:08:fc:7b:6c:d6:0e:06:75:c6:a5:
         1c:8b:2c:05:85:32:40:1d:10:e2:8d:a2:85:4f:e7:34:63:f8:
         89:6d:39:90:29:fe:3c:f6:fc:29:4c:25:5e:0b:44:34:23:e6:
         08:cd:67:cf:ca:ad:9e:c2:51:26:18:43:35:af:47:46:87:36:
         b8:0c:8a:c7:6f:94:a0:fd:29:e0:0b:41:3d:38:20:23:95:0a:
         34:f6:b1:d2:5a:56:5b:a3:eb:25:41:13:c7:01:8f:a4:61:fd:
         3f:1f:4f:e6:30:61:f7:12:1b:61:45:f8:17:1c:fd:51:6d:dc:
         78:59:ac:93:e5:92:6a:a2:3e:1c:02:42:7d:c3:21:87:01:ff:
         db:36:22:50:ba:8a:9f:8a:15:c6:c9:c6:36:d3:b3:61:97:d6:
         4f:9a:25:75:f1:f0:82:6e:37:c4:63:f7:03:30:ee:f7:40:9a:
         b3:ae:51:f0:85:05:67:7b:31:65:50:4e:ee:ee:9a:4e:69:48:
         11:d1:fa:b9:9a:35:4b:2d:4e:45:94:1c:45:c9:b6:5f:19:df:
         1b:9c:d8:5a:0f:64:b4:c4:bd:dd:a4:e8:4a:a8:ed:93:54:5d:
         fc:f9:8c:ff:ec:d7:52:3d:bd:11:f0:71:3c:41:1c:ae:08:49:
         94:7d:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----