Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File:                     qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier:          0Rg4CUViApDhPgsqoCdTwODUSnXeNxnbDdim+ie+t8E=
Subject key identifier:   A4:F5:3D:BA:0B:BD:8D:F1:E7:36:FB:7E:A7:6F:BE:21:B4:16:2C:83
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer:       /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial:       01962E6198DB48629EA018EBEF25B2F90946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
                          2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: /ygMBebpji9Q/nH4We9fU+XBotb4FD54wx4nNaHADjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:98:db:48:62:9e:a0:18:eb:ef:25:b2:f9:09:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=a4f53dba0bbd8df1e736fb7ea76fbe21b4162c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:51:44:c7:3a:9c:42:53:b1:71:5f:c9:8e:
                    82:3c:66:ed:f4:82:81:35:b6:57:68:a3:6a:b2:c0:
                    0d:8e:da:18:07:27:82:a0:36:8d:76:97:2a:d7:35:
                    eb:42:ab:5e:78:e3:6d:e4:94:4b:73:87:02:d6:f3:
                    e7:2d:67:95:e7:de:50:8f:2a:6e:86:41:df:29:14:
                    da:b9:96:1d:5d:77:b4:05:6f:5f:cb:af:ec:43:4d:
                    b8:4b:c4:b9:b9:93:b0:30:a3:29:8a:53:c0:f4:38:
                    ca:2f:e2:96:b2:c8:a1:ab:b8:49:ed:75:22:3d:24:
                    98:e2:53:a2:a0:08:a9:a3:dd:03:10:a6:a5:fa:8c:
                    1f:dc:97:24:92:34:d5:05:29:f7:a5:47:24:d0:c8:
                    7c:00:98:36:f2:54:43:43:bd:26:84:29:20:68:05:
                    55:78:23:18:1b:52:0d:03:a9:3f:7f:89:06:2b:30:
                    eb:33:5b:e5:d8:5a:d4:58:2e:73:23:ed:50:55:8f:
                    27:8a:a6:ec:d8:ba:c2:5b:7a:e5:78:e9:0d:a8:01:
                    c3:e7:ee:f6:5f:8a:ec:e7:58:74:ec:a7:28:41:e3:
                    e3:1e:f5:4e:49:a5:82:ab:ef:bb:88:eb:af:c3:52:
                    42:79:10:bf:96:e9:03:91:b4:14:30:5b:05:56:78:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:3D:BA:0B:BD:8D:F1:E7:36:FB:7E:A7:6F:BE:21:B4:16:2C:83
            X509v3 Authority Key Identifier:
                keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:2f:49:04:a2:6f:c3:31:5e:1b:83:c0:c9:74:20:6f:90:
         d1:b7:53:40:73:28:4f:4b:60:fe:ad:04:d8:30:bd:73:ac:ff:
         a1:53:9d:e2:3b:32:1c:b8:ce:fa:13:a8:37:6c:da:60:cb:db:
         86:44:25:3a:78:86:3f:67:a7:d9:10:1d:68:2e:45:c1:ca:38:
         9c:ca:42:23:90:0d:95:2e:5d:06:64:68:77:1c:a8:bf:b5:31:
         16:58:3a:b5:d7:52:d9:04:9d:fd:c7:a3:7a:4c:83:06:a8:e9:
         53:e4:11:ef:e2:4f:38:c8:61:bf:ba:3c:e8:3b:59:a4:84:0a:
         b6:b0:be:66:31:87:00:a3:1e:d4:bc:9a:4d:cf:05:f1:20:d8:
         24:f0:cb:f9:52:d8:c3:cc:2d:27:7f:59:b4:41:27:f0:31:5f:
         3d:d8:fb:6a:a5:ba:63:8f:bc:70:01:47:fe:f8:6e:c4:d7:36:
         fb:d2:4f:5b:4f:fc:7b:63:e3:f9:21:8a:37:5a:d0:7a:ad:f6:
         a7:ea:01:1e:55:36:06:e3:9b:2b:14:05:0d:ce:1a:ff:50:09:
         ad:77:63:f4:cc:39:4e:06:0d:5b:01:c2:83:cb:f9:c9:12:f7:
         a8:3b:46:b2:dc:da:32:34:31:6e:d7:47:30:4b:3c:6c:dc:ea:
         5c:34:18:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----