Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File:                     qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier:          TyFhGrD/591PYbHi8D3V8vTqq49KQ0aLHiMSL1k67lw=
Subject key identifier:   43:87:E8:43:1C:C5:11:5E:0E:32:51:6F:13:C1:68:D4:F6:47:E1:60
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer:       /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial:       01962F06ABD45D04C735A89FFEA90AB3688A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: 0uoR5NVblKbi3UENBvEH+/VxhUGNOVAyeZbTq9g7ulQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:d4:5d:04:c7:35:a8:9f:fe:a9:0a:b3:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=4387e8431cc5115e0e32516f13c168d4f647e160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:bb:b9:bc:94:f8:32:86:d6:e8:d7:c3:06:
                    a1:0e:71:22:c6:b5:fb:70:e5:49:73:87:62:fa:89:
                    9d:cd:77:f4:4a:59:b1:b1:57:06:d8:b3:1b:da:0b:
                    a0:30:b9:09:7f:01:d0:6d:00:71:79:d9:62:2b:31:
                    ee:63:13:d9:bb:7a:99:9f:f6:21:7f:a1:45:28:8b:
                    9b:07:06:ec:84:fc:87:51:d5:cb:00:ee:36:6a:24:
                    90:72:b9:3e:41:96:9f:83:6b:14:aa:1a:31:37:a6:
                    1e:7f:5d:a8:26:cc:49:f7:83:08:72:0d:6f:1d:cd:
                    c2:b8:9e:09:e9:66:76:0b:29:d6:9d:46:fd:2e:f0:
                    88:bd:9d:e0:56:b8:86:22:51:19:05:07:f4:ba:50:
                    f8:fb:ab:15:cf:e6:ad:e3:6d:34:ed:ab:98:33:01:
                    b4:4b:6b:9c:55:bc:1d:ce:22:b2:45:8f:59:a0:46:
                    bc:69:29:71:96:f3:bb:2b:0a:4b:c5:aa:04:81:4a:
                    6c:56:6b:72:50:38:63:38:59:eb:d6:20:03:a6:58:
                    59:a5:6e:c0:aa:03:96:e7:67:87:7f:e6:ee:00:24:
                    5a:52:d9:0c:bb:df:76:b5:02:b3:c8:3f:58:ee:c4:
                    1c:c6:c6:81:1e:7e:32:6e:34:b2:5c:1f:9c:c8:62:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:E8:43:1C:C5:11:5E:0E:32:51:6F:13:C1:68:D4:F6:47:E1:60
            X509v3 Authority Key Identifier:
                keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:a9:2f:cf:ad:88:ca:45:a1:cc:02:1d:56:68:c4:79:f5:
         b6:c8:16:c7:b6:04:56:47:fc:96:f5:09:f7:26:4c:4c:ea:24:
         1d:23:9e:ca:69:74:d4:a2:64:13:86:c9:eb:a3:fe:bc:b1:37:
         21:cf:3a:f5:46:62:0e:30:8d:7a:ba:c5:de:14:81:70:6c:57:
         65:fb:59:bc:de:fe:c1:89:3b:23:ac:70:46:a0:e7:01:6f:82:
         b1:f3:52:33:49:90:f4:99:cf:91:53:4b:0c:fd:32:f1:84:5d:
         34:1a:7a:da:e5:db:ba:dd:e8:0d:e7:94:60:a3:6d:40:b0:e5:
         38:a9:12:aa:b4:3e:ed:25:f2:62:fb:8c:3b:43:c5:d3:44:88:
         3d:b9:85:4a:d0:f4:70:c7:08:3b:b2:22:95:bc:e5:10:0f:da:
         b2:28:cd:5f:4f:b4:cc:4f:b4:56:17:05:8e:6c:6b:0c:4f:5e:
         89:3b:28:30:f9:ba:a6:5e:55:2d:90:07:5c:a5:f7:13:31:e1:
         1f:10:f7:01:fe:12:d3:81:f0:84:ad:db:8a:c6:d2:9d:2f:af:
         be:4c:e3:da:e0:13:9a:bf:73:49:0a:5e:aa:44:21:e8:96:ae:
         0e:4b:8c:67:7f:9d:15:6f:21:be:94:a7:90:e9:de:73:05:80:
         9a:8d:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----