Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File:                     RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier:          5z+3fEKoPM0NTRUgMhcVwwaK3FrrgtBK6y9gEnq5TQk=
Subject key identifier:   30:FE:15:0C:73:F6:69:FD:E5:7E:F4:A0:19:12:92:9F:0C:E1:B3:D2
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer:       /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial:       01962F0665DE677294CAE47FA6FB772C103B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number:          0203
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
                          2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: sAGAfxW53QDxdP6Q0Nd6ZU+2Bt38PmkC+ICMO/vaABo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:65:de:67:72:94:ca:e4:7f:a6:fb:77:2c:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=30fe150c73f669fde57ef4a01912929f0ce1b3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:79:3a:2d:f7:a1:65:1d:0b:b7:5c:1a:4c:
                    7e:70:9d:11:0f:91:df:85:3f:a3:fe:7b:18:29:0e:
                    bc:16:01:de:80:c1:68:63:df:9e:cc:bf:33:24:b5:
                    70:c3:93:b7:76:a1:3f:b5:24:4c:78:c1:ae:3b:a6:
                    3c:e8:f6:7e:82:74:9c:2f:cd:21:61:1b:f9:1d:dc:
                    e5:71:7c:4e:77:62:eb:4c:8d:d0:f7:72:67:1c:a0:
                    c8:ad:28:57:4c:28:04:fd:d4:b0:b7:e6:0b:06:94:
                    49:ef:95:ff:bd:e9:be:fc:72:e6:9d:86:43:a4:48:
                    2d:2d:fb:a2:e7:37:27:c5:65:4b:75:80:00:36:44:
                    86:95:fd:db:f0:f6:f7:b1:6f:75:0c:3c:67:5f:e2:
                    31:b2:ba:47:11:3d:68:63:f0:06:d4:f6:15:eb:e8:
                    ca:85:2a:ec:17:39:75:94:0d:94:92:1c:6a:5e:6e:
                    90:aa:38:37:6c:ae:74:03:45:e7:8a:0f:e8:b2:d2:
                    45:ce:2e:d7:cc:ea:99:d6:bc:02:31:f9:df:ac:a6:
                    f5:58:38:05:85:b8:39:94:bf:91:b1:8d:2f:b2:26:
                    82:d3:50:46:b7:ce:70:13:ee:19:e5:4a:d9:97:81:
                    d1:59:95:8b:16:09:92:47:48:3a:22:4c:5d:2f:c8:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:15:0C:73:F6:69:FD:E5:7E:F4:A0:19:12:92:9F:0C:E1:B3:D2
            X509v3 Authority Key Identifier:
                keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:de:88:2b:34:9b:1f:fa:ec:6d:f4:6a:0e:51:7e:e4:0a:
         fd:00:b2:40:cc:cd:e4:61:42:28:ba:26:1f:29:d5:d4:4e:54:
         cf:70:19:74:60:b7:a4:ec:6f:f1:66:8e:7b:f1:47:26:a3:d2:
         ab:1d:4f:03:00:06:85:60:c7:d6:38:5f:58:b3:2a:02:3a:cb:
         92:ce:99:ef:fe:33:cc:94:db:d8:4d:09:d5:b6:8e:6c:25:c1:
         57:43:f5:ce:c1:42:db:b8:d6:4a:80:01:a9:86:a0:97:6a:24:
         6f:97:27:f5:cd:77:58:73:7d:0f:42:97:fe:22:92:65:43:63:
         29:6a:b5:21:a5:57:1c:50:cd:41:26:18:2e:97:ff:57:54:2f:
         11:9a:e7:71:16:e1:4b:2b:e6:8f:3e:39:0f:15:70:5a:19:1c:
         a3:19:4b:04:d9:ca:18:db:a9:d2:1c:70:e3:6f:9b:11:94:cd:
         a6:f1:c1:c3:12:92:56:79:28:2f:2f:1e:24:81:7d:3d:87:1c:
         0c:67:35:54:31:92:52:1c:d6:6d:d5:d1:73:28:36:24:1a:a5:
         dd:03:60:3b:ea:81:6f:de:2e:bc:16:dd:c8:c5:ae:9b:42:57:
         ae:78:87:b3:40:03:f7:60:38:6a:7b:cc:18:48:2c:7f:23:9f:
         74:3a:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----