Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File:                     r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier:          YwfhCoV2YMqNk8UquY+ZYJ90XqaaeU8VyjQBWCpHUMo=
Subject key identifier:   5F:96:EF:2A:BE:41:0B:63:70:4B:D2:50:8A:70:59:B8:12:AE:EB:D4
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer:       /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial:       01962F3D804D6D04279AECE70A0E281A5682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number:          11DF
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
                          2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
                          3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: J2VhzRkauITEclwn0jMhjL+s4v9t0gHvUokacS+sJ/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:4d:6d:04:27:9a:ec:e7:0a:0e:28:1a:56:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=5f96ef2abe410b63704bd2508a7059b812aeebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:0f:85:5f:be:c5:61:33:8d:6a:71:5b:b0:
                    95:26:e2:be:d9:f7:f2:2e:c3:7c:89:13:43:1c:70:
                    3c:f2:a8:5b:67:df:01:14:1d:93:6a:fd:2e:b7:0f:
                    c9:0f:78:75:2c:ad:6b:bc:ac:e3:85:22:78:8e:9f:
                    66:0a:9c:36:63:5b:65:fd:0b:a1:98:9d:90:a9:4c:
                    dc:41:cc:26:93:5e:a4:59:2f:c7:67:26:d8:4d:31:
                    15:b7:00:7d:c0:41:ea:96:de:59:43:c9:6b:d9:84:
                    21:0b:a1:0b:e2:73:5b:aa:d2:53:9f:0d:70:7e:36:
                    d0:c3:3e:5d:49:08:51:f6:a7:32:94:87:38:9b:20:
                    32:44:4a:f9:a3:2e:3d:7a:4a:ce:44:ed:36:36:a2:
                    39:0b:cf:1a:f2:a5:ec:1c:14:10:8c:7b:ce:26:d1:
                    3a:f4:42:7a:ef:17:78:db:24:73:2a:70:6d:08:b7:
                    b9:aa:67:16:7b:ab:ee:1c:85:23:77:cc:04:88:9a:
                    ef:8f:67:1f:46:8e:e2:68:d6:82:65:e8:fd:20:bf:
                    8d:1f:13:31:c5:d2:9c:f0:34:c1:7a:1c:aa:41:36:
                    58:22:80:42:84:7e:4e:87:a6:9b:98:3b:26:2d:a7:
                    4c:63:73:b9:4e:87:79:69:18:f8:49:5c:12:5e:6a:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:96:EF:2A:BE:41:0B:63:70:4B:D2:50:8A:70:59:B8:12:AE:EB:D4
            X509v3 Authority Key Identifier:
                keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:43:e5:01:a3:f2:4c:b0:15:97:22:dd:3b:ec:88:38:c7:
         14:e9:fe:93:00:f4:d4:4c:22:e9:fd:ec:ab:a6:97:0b:6a:54:
         b9:30:c3:3f:7c:40:6f:b6:dd:d1:76:e1:91:ae:18:5c:29:dc:
         a5:a9:5e:c1:b8:ef:32:4b:be:dc:f3:97:e2:45:60:f0:28:5d:
         5b:ab:78:e0:1e:a5:c2:42:46:0c:95:3f:c1:01:b3:38:8b:06:
         94:39:8c:c4:37:a9:9c:81:05:9f:4e:df:c8:62:4c:54:0d:dc:
         0a:cb:f1:7a:78:31:3e:d1:6e:38:06:75:e0:64:26:b6:6c:d1:
         17:bd:55:bf:ac:28:f4:6e:b5:d5:90:80:ae:96:cc:6c:21:07:
         71:57:29:a1:20:ea:f5:51:20:70:fa:8b:ab:34:97:6b:52:ea:
         c0:c2:87:9e:79:98:9b:86:39:c5:8a:b9:d5:8d:cd:27:88:75:
         07:4f:f3:96:67:32:b0:1a:3d:84:1d:ba:54:5a:37:88:db:78:
         63:cb:43:aa:ce:be:20:0d:8d:99:60:dd:74:24:f1:9c:88:19:
         49:4b:49:a7:88:5e:fc:43:a2:63:a7:85:a3:97:06:35:82:23:
         ec:de:bb:53:c9:00:94:52:3d:aa:94:d1:1c:8b:f1:35:d4:f5:
         3d:e2:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----