Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File:                     qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier:          1BLrosr9rNiwPsWcaxQsTfo0Ml7prNRKAmGCE6RyhEI=
Subject key identifier:   1A:15:3C:6D:10:86:18:CA:75:6A:51:92:1E:66:13:3B:11:34:91:FF
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer:       /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial:       01962F06CA5EC6DCA3CAC73DFB05FADFCBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number:          0583
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: AC6tsmHQy35R43InkKWGtBtYVLprgrpL6MicMVkY8k4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ca:5e:c6:dc:a3:ca:c7:3d:fb:05:fa:df:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=1a153c6d108618ca756a51921e66133b113491ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:71:e2:9b:90:0b:ba:f9:cc:c1:24:43:44:
                    49:eb:a5:9b:25:ea:17:0e:4f:04:69:17:69:6a:4e:
                    a2:28:a7:8f:03:0a:29:f4:ac:ca:6e:f6:d2:20:bd:
                    cc:19:e0:b9:6c:fe:7d:b8:6b:6f:c3:3b:d2:ef:7c:
                    14:e5:d2:04:c8:c3:e3:58:90:b0:fb:c8:a6:c6:4c:
                    8e:27:d7:ec:18:0d:7b:9e:a9:52:e6:a4:13:25:06:
                    8d:07:49:29:38:19:96:43:43:2a:38:9e:f8:eb:dc:
                    d6:cc:1a:23:05:74:70:82:0d:b0:47:dc:b7:af:36:
                    7a:57:38:ec:f3:4c:96:59:d3:5e:f1:24:b1:d0:43:
                    2b:21:ef:27:90:9a:8f:e9:60:85:22:bc:a9:83:41:
                    e4:11:28:8e:bd:5d:5c:75:58:fd:71:40:89:99:7b:
                    a1:d8:e9:71:32:34:81:87:39:ba:49:af:68:69:c4:
                    63:f6:b5:81:76:f4:02:d2:8f:c2:0b:14:09:bb:09:
                    b1:b1:72:fc:3a:dd:8a:7f:c1:64:3b:12:fe:cd:11:
                    65:3e:d5:2c:8b:b1:85:4f:d2:a3:78:ab:af:c3:5a:
                    46:7a:dd:ec:1d:59:af:bd:c8:ce:b5:e3:46:a1:45:
                    b3:53:72:cc:a1:5f:6c:00:e5:65:60:1d:63:96:5f:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:3C:6D:10:86:18:CA:75:6A:51:92:1E:66:13:3B:11:34:91:FF
            X509v3 Authority Key Identifier:
                keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:e0:56:3c:c0:85:78:6b:b7:d5:cc:ad:47:51:b4:9f:ec:
         02:41:5d:d7:b7:94:ad:1a:ec:25:26:79:db:20:b2:19:55:50:
         63:01:81:dc:d8:56:75:9b:a8:f8:8b:87:c9:c3:28:92:1d:af:
         8d:22:e4:c1:d3:41:cd:cb:27:b6:99:b6:f3:28:34:6c:11:05:
         7a:01:68:74:8f:a4:41:09:e3:b1:b6:7e:51:ff:64:f1:57:d6:
         71:8c:8c:2c:99:db:99:c7:e5:e8:69:7d:a2:d6:a7:9f:85:ae:
         ff:2e:3c:d9:c4:9f:ad:05:07:50:09:fe:93:84:a2:a5:48:29:
         f5:50:0b:f8:bb:f9:0f:11:35:9f:d7:ba:a5:8f:f6:9f:f0:a2:
         37:b3:7b:2a:46:8d:74:53:51:10:c4:95:ad:35:24:2b:ee:80:
         b0:9d:e9:cd:18:3c:52:f8:9e:81:c6:c2:1c:7f:9e:bc:e0:0b:
         e1:61:5c:e8:2a:fc:7f:50:d1:1e:7b:3c:72:f2:ea:bb:fe:76:
         20:54:05:f4:a8:df:40:9c:11:8d:a3:ed:8d:17:c0:5d:47:b5:
         21:03:a7:b4:81:02:99:be:19:81:3a:42:ad:bc:9f:38:a5:25:
         20:93:60:e2:ac:f6:19:0f:bb:d2:1f:b5:67:60:f6:53:71:da:
         be:7a:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----