Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File:                     cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier:          H8GXMO1smvJTNvDTw2/d01wqCzY8cjMN7wzvwbwjusQ=
Subject key identifier:   B3:1B:A1:DC:56:79:55:92:DD:43:52:32:DF:B5:48:D7:3F:87:7B:97
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer:       /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial:       01962FAB8B02E533353D27D9FA9FD531DB03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number:          11D2
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
                          2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: QGbqU8JwANt1mnA6mv1EpazmVnE0QYj6n9x9zOZMIfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:02:e5:33:35:3d:27:d9:fa:9f:d5:31:db:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=b31ba1dc56795592dd435232dfb548d73f877b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:01:6c:37:32:b0:82:62:65:42:01:ac:64:
                    81:ff:72:f9:47:de:02:db:81:b3:29:be:46:ac:07:
                    63:31:d6:59:c4:83:74:22:af:ca:53:b1:be:0c:c5:
                    25:7e:71:14:15:34:99:04:11:5f:62:03:c6:d4:a4:
                    b8:5a:62:2d:9f:3a:7f:91:bc:4a:d9:f0:88:c0:b4:
                    42:62:b7:a5:eb:06:f7:7b:80:1b:b6:75:be:17:dd:
                    76:e1:0c:3c:1e:62:7c:a1:6f:23:e6:da:94:69:f9:
                    b9:54:d6:20:12:92:47:57:33:13:a1:93:f3:ab:cb:
                    db:b5:76:87:a2:7c:b1:b6:2c:69:30:6f:09:b7:ce:
                    68:c0:d5:95:3c:f4:84:83:b4:52:c0:1b:6e:f6:37:
                    01:aa:57:0e:fc:84:42:5d:45:4b:92:a3:c0:f0:ad:
                    25:70:9f:83:a8:66:6e:14:34:63:45:24:ea:fd:50:
                    d9:06:a2:b4:ff:e1:79:de:c4:ee:42:1b:23:bc:93:
                    5b:e0:43:35:e1:94:10:58:68:43:59:de:38:4e:cb:
                    8b:7c:45:c0:a9:e3:9f:30:37:ae:1f:fb:4f:40:e5:
                    49:b9:47:75:ed:60:9d:ba:11:34:03:f8:46:cc:10:
                    45:64:d3:f8:0b:32:d5:26:d5:7c:6a:36:d6:2a:44:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1B:A1:DC:56:79:55:92:DD:43:52:32:DF:B5:48:D7:3F:87:7B:97
            X509v3 Authority Key Identifier:
                keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:e0:d5:6b:de:d7:b6:c8:c3:30:59:b5:36:34:96:0e:92:
         e6:82:d5:c3:09:09:8b:a1:2e:be:fd:b3:71:59:eb:e1:45:a6:
         41:fb:75:3a:e8:fa:3c:59:a0:27:f4:7f:c0:b6:92:8a:69:a6:
         cb:2f:fe:4e:08:19:de:f7:af:f4:c1:5a:66:df:4f:bd:46:e3:
         c1:de:22:9e:f4:28:a8:c1:7d:3d:c8:3b:d6:4d:d5:2b:f1:cb:
         79:85:a6:af:f5:ef:97:31:3a:ff:19:eb:d1:1a:45:82:60:da:
         e9:ec:b5:c3:68:35:7d:bc:c1:b6:c6:9f:d0:bc:b3:41:91:81:
         de:48:52:1d:7e:78:27:01:e3:30:84:53:44:9a:1a:fb:88:a2:
         3a:07:29:d7:5a:73:b1:dc:5b:af:eb:87:6a:ae:c4:d2:e2:61:
         63:f9:a7:c4:80:a7:c0:6a:95:fd:76:05:86:83:37:63:34:f5:
         eb:fb:e9:af:78:44:02:cf:9f:eb:2f:89:c8:64:3b:11:f5:87:
         22:a1:35:77:60:5c:f4:2f:11:77:be:c1:6f:c6:69:29:b9:09:
         f2:bb:a8:eb:ed:e2:0f:41:e3:a4:46:6a:bb:9f:65:1e:bd:4a:
         7a:a7:34:20:04:df:dd:2c:bd:ee:e0:72:c9:35:5f:9c:8f:46:
         83:98:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----