Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          YSoE8taOd9PDoDtK/Up2A+Zz6JHxHoV60+3pxegf32E=
Subject key identifier:   C3:C7:99:FF:25:5A:BD:25:C3:77:10:37:AA:3B:59:68:A5:06:71:58
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       01962ECF5266627347ED165A47074152E522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
                          2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: SjMgKjIOScZ8mNsncrettOXEmhKOk1hbLDAq5HO3bmc=)
                          3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:52:66:62:73:47:ed:16:5a:47:07:41:52:e5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=c3c799ff255abd25c3771037aa3b5968a5067158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:25:11:1b:8d:4d:ef:a0:e1:e2:f2:b8:31:
                    dc:e4:ce:bf:66:91:c0:ab:97:f1:50:e9:9a:f2:7b:
                    38:d4:25:22:9d:ce:77:cd:5a:57:fe:c3:bd:e5:80:
                    98:d7:1f:20:ce:ed:e8:10:e6:c1:fd:87:03:be:ba:
                    d5:35:1e:c8:d3:b6:45:cb:72:1d:13:9f:e0:60:86:
                    3e:97:66:39:9c:29:aa:11:7b:f3:8f:20:02:09:92:
                    6b:80:95:ab:6d:d1:6b:26:a5:6b:73:46:ed:9a:e6:
                    9a:41:83:ba:58:70:1e:78:3a:49:8e:a8:63:91:3a:
                    8f:8e:53:ef:5d:69:37:2c:3e:08:93:40:4f:35:ac:
                    a1:f4:92:91:c0:d5:3c:e9:27:28:c4:a3:d1:dd:b0:
                    e3:ff:03:ab:88:e0:fa:4b:3d:b7:74:76:86:96:66:
                    8b:50:7f:12:a5:06:1e:04:d6:6b:d0:7c:38:09:38:
                    2f:63:bb:3d:6c:92:ca:dc:54:18:97:3f:7c:88:63:
                    f3:44:a4:9e:5e:5d:d8:36:f9:3c:b8:c3:50:e3:15:
                    b6:64:11:fb:e3:9b:a4:d9:b4:01:93:0f:32:3e:00:
                    6a:92:c9:b6:c6:42:da:50:df:98:c9:f0:5d:2e:e1:
                    dc:02:ba:fc:8c:55:f0:0e:aa:63:b8:31:98:85:c8:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C7:99:FF:25:5A:BD:25:C3:77:10:37:AA:3B:59:68:A5:06:71:58
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:81:67:07:71:9a:b7:9f:93:e5:18:4c:8c:bc:c8:67:94:
         c2:e6:03:58:2d:11:25:8f:d4:a8:56:80:4c:ba:e0:78:d4:42:
         5e:5a:b8:8d:b6:8d:70:10:32:33:b1:52:3f:58:5f:3c:99:c1:
         b0:fa:bf:27:50:8f:e4:d6:b7:67:dc:e6:ef:3a:1b:5e:a1:c8:
         8c:a9:b6:a3:26:e1:e1:cc:43:85:3d:b1:65:73:83:31:4b:95:
         1b:64:16:7e:d7:40:a0:ff:48:b9:5c:d6:05:23:92:d8:31:99:
         fc:05:cf:ea:58:f8:d2:50:e4:d6:96:4c:af:c1:f6:60:22:c6:
         23:bd:f4:aa:f4:44:02:9d:ac:a5:32:37:ef:14:56:ba:69:71:
         9f:0d:d1:92:c3:d1:c9:d9:c8:f4:84:81:56:9b:d5:6a:c7:37:
         23:a1:26:b5:24:0e:fe:63:5e:f6:92:48:f6:42:00:c6:5d:19:
         3f:13:12:fc:ab:06:ab:d1:bd:70:b7:49:5a:a4:c9:54:41:3f:
         ec:cf:24:32:af:27:a1:51:d2:dd:19:d1:04:d2:f7:e3:8d:83:
         3d:47:7c:6a:c1:65:75:ca:bf:32:7a:7e:8a:3b:c0:3e:4d:ad:
         80:ad:68:31:33:17:11:ba:15:ad:06:1b:aa:90:72:fe:d1:ae:
         64:6c:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----