Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File:                     qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier:          MorDn1fsPUtk9kEJ9/SLSjJ+DNRVdOnV2am0bILyjCM=
Subject key identifier:   7F:75:06:A2:E4:D2:31:5E:50:87:7B:5C:C7:24:E9:09:87:D4:2A:89
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       01962E9870D233AD3DDDB20857673054FDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
                          2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: aZfH66eKsdFONyBhrh5NGRfV5wGLuQqKvPrvdrMCsX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:d2:33:ad:3d:dd:b2:08:57:67:30:54:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=7f7506a2e4d2315e50877b5cc724e90987d42a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:28:a2:1d:e9:56:c2:20:08:5d:58:4a:00:
                    a4:0f:e5:83:9a:fe:71:54:52:ae:bc:ae:b2:e1:d8:
                    5f:71:08:aa:93:c0:aa:d5:59:15:8e:f8:af:18:1c:
                    cf:45:91:e0:f0:04:e6:b5:09:4c:6a:db:0e:b6:df:
                    8e:70:8e:75:45:cd:d8:c5:dd:0c:64:ba:1c:c2:3b:
                    7b:0c:4a:03:0e:43:c9:58:4c:df:ae:4c:ac:5a:24:
                    e4:ed:25:b2:5b:2b:c2:56:e7:46:7f:52:ee:22:14:
                    59:3b:b1:3a:cc:0c:f2:31:cf:ee:78:29:3e:92:df:
                    d9:94:70:2a:52:ef:80:5a:62:39:d5:7f:51:ba:e4:
                    0b:1f:09:a2:78:9b:7d:fd:63:c0:98:64:51:f4:b7:
                    b9:5d:b1:20:72:64:e6:e0:c0:6a:5f:4a:5e:d1:d8:
                    f2:9c:43:42:0d:91:cc:ee:92:c5:1e:de:1a:ab:43:
                    6c:5a:ba:cf:19:a6:30:b6:87:a1:00:b1:82:64:e8:
                    c5:a8:f0:f2:5d:dd:67:50:ac:a8:0b:75:84:70:bb:
                    f5:f7:7f:c5:60:c4:a1:78:24:fe:d9:92:cc:d2:b7:
                    1a:f7:cf:b8:8a:28:96:a5:74:62:79:90:ee:c7:44:
                    a1:4f:17:25:3e:d4:d6:dc:1e:d1:ca:25:81:df:8d:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:75:06:A2:E4:D2:31:5E:50:87:7B:5C:C7:24:E9:09:87:D4:2A:89
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:42:49:79:75:55:7b:e0:9c:fc:93:ab:ca:81:c7:b3:c4:74:
         33:31:05:1e:76:ef:dc:ac:96:b0:9d:ea:07:6f:b0:4b:b5:5e:
         8b:fd:b3:23:9d:46:47:3e:a1:8e:92:46:c3:3d:b9:38:96:81:
         a4:cc:48:ed:0a:46:79:0e:2a:cd:a6:c5:5f:0b:75:94:c3:98:
         92:1d:ef:5c:13:09:3d:ae:21:15:5d:97:e8:32:56:7d:bd:88:
         43:61:ba:17:11:93:57:39:d1:6b:28:07:b4:5c:ad:30:94:b5:
         bb:b1:56:ba:44:39:2d:22:ff:fc:13:78:80:2b:14:fc:15:ab:
         1d:d8:ca:2e:0a:c4:52:9a:d7:14:aa:a0:61:f9:54:74:01:7c:
         36:97:68:a1:7e:0f:f8:97:17:c5:21:0b:eb:c5:93:b9:00:22:
         28:fc:62:c6:d4:61:b6:c6:c1:b2:12:00:1c:41:f1:43:09:fc:
         f3:c8:28:78:16:c3:14:04:1a:d6:9c:d3:cd:f1:56:e4:8a:31:
         57:cf:55:8e:25:42:da:f7:81:d0:bf:f8:b3:6d:7c:65:fc:d0:
         39:6b:41:e4:60:22:92:ff:35:71:19:16:9c:3f:1e:8a:31:b5:
         03:8b:e6:42:fd:2d:ab:f0:f4:e1:af:19:8c:95:22:a1:19:a6:
         bf:6c:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----