Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          DTQN2I/Si14+zeFAaoHfHIqX4Dil9bLZEhiE65/MxY8=
Subject key identifier:   35:2E:D8:A2:1E:08:D6:A7:72:56:24:CD:15:E4:00:5C:92:65:46:66
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       01962E99791A2A93528B19040F25A33FD1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: s3MRBGtPryZ9yV+a2UeeeQNz9FXEmX+f5gQWOePJ2xI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:79:1a:2a:93:52:8b:19:04:0f:25:a3:3f:d1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=352ed8a21e08d6a7725624cd15e4005c92654666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:1d:51:29:01:e6:81:8a:9b:21:55:86:28:
                    96:29:39:8f:4f:0c:e9:1b:a4:5e:35:78:ce:31:ae:
                    b8:41:f6:43:17:e2:e3:3e:62:6b:ec:31:fb:13:3e:
                    ac:bb:a0:ba:56:3b:94:3b:19:2b:79:d4:eb:bf:8e:
                    b8:fe:c0:7e:f1:0c:e0:97:9b:28:29:f4:b8:eb:e5:
                    8b:d8:48:64:f0:e7:87:9a:05:67:dd:fb:62:98:2c:
                    cd:e2:82:bc:95:64:b6:ae:b4:89:5b:76:53:f1:0d:
                    8f:38:91:17:4b:7a:24:8c:59:5b:52:02:66:45:9c:
                    37:da:8e:20:02:d2:6f:63:ce:62:d2:13:7e:2f:e6:
                    e0:18:f3:97:4b:88:16:78:b6:8a:f2:d6:9f:9a:34:
                    d8:62:9c:61:29:33:72:f7:f5:7f:bf:af:b8:7c:b5:
                    fe:51:4f:8f:95:cd:9c:c2:d8:83:17:ea:ca:ef:eb:
                    f0:91:b3:7c:2e:84:33:7d:e4:2a:5d:fb:be:22:df:
                    2d:16:f9:a3:4d:34:a4:23:b3:61:dd:e6:4a:b8:39:
                    84:da:10:51:60:a3:20:26:6e:44:c0:1a:6b:c3:2f:
                    3e:c5:ab:6e:f8:6f:e1:74:48:5f:0a:ed:d3:1a:57:
                    ca:94:10:f7:a9:2e:06:f4:e0:90:5d:02:49:9b:ce:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:D8:A2:1E:08:D6:A7:72:56:24:CD:15:E4:00:5C:92:65:46:66
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:80:c4:65:19:2d:4b:f7:48:5d:eb:33:b2:bc:41:84:c2:
         39:7e:49:e7:09:34:b9:2a:ae:a9:25:a6:de:c1:fb:14:1e:6f:
         a1:cc:d9:5d:4d:4f:39:e9:bb:24:9b:c3:aa:a0:c6:50:a7:3e:
         5c:8b:da:4f:5f:ce:a1:6b:c7:5f:51:07:63:f3:d8:2f:1c:09:
         f5:a7:59:10:10:99:08:ae:a4:9c:3a:bf:f8:a0:ec:f6:d1:3a:
         bd:7b:f5:d2:b4:c7:d5:ec:8b:8e:3d:00:80:6b:e3:ff:7a:01:
         1f:cf:b8:33:fa:58:c2:67:d1:fc:24:b6:95:11:62:70:15:17:
         1f:0f:04:00:58:d2:64:f3:ef:a1:05:b3:18:44:af:5b:3b:c2:
         ef:12:32:e5:19:78:9c:48:f8:a5:29:f9:73:18:fd:b4:5a:3a:
         04:fe:f8:b5:b2:6b:92:a8:2f:32:6a:4b:67:8b:c8:ee:e1:a4:
         2f:e4:91:91:37:34:81:02:60:46:26:bc:1f:4a:67:48:4d:96:
         fb:22:75:13:cd:2e:d8:53:e2:bd:17:60:ca:5e:a3:3a:e4:f0:
         0d:0e:17:35:8d:0d:a9:76:4a:4d:52:60:63:e3:06:5a:78:b0:
         8c:d5:23:95:75:24:51:db:f4:32:1d:d1:24:e4:0b:6c:7a:32:
         cc:e2:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----