Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File:                     Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier:          C43KtnWbKI4AQbF234R/QSPHvymxfi8xaMiUir/uMK0=
Subject key identifier:   26:9B:C4:06:2D:0C:47:55:BD:20:2A:DD:DF:10:E0:BC:56:2E:C2:E0
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer:       /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial:       01962E9996AB1CD122890309760A6DF53018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number:          0DE6
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: Wm2x3UpwOv/S5JzPjcmiyfBlxk8+JGtUGLdx2Pf8CG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:ab:1c:d1:22:89:03:09:76:0a:6d:f5:30:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=269bc4062d0c4755bd202adddf10e0bc562ec2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:27:36:19:ad:98:a8:0e:cf:a5:9c:0f:03:
                    58:4e:01:7d:15:49:de:4d:03:4e:f8:27:51:ab:cc:
                    39:6e:2b:d4:3f:66:22:53:e3:11:41:16:86:47:f7:
                    5e:44:d1:c3:35:54:68:9c:2b:16:08:fd:ae:5a:13:
                    a8:e4:42:3b:24:87:66:57:57:66:c7:09:4a:f1:9c:
                    0d:67:f1:cb:1c:46:86:a2:3c:8a:fd:1d:eb:9c:c6:
                    a8:cc:bb:f8:00:5f:14:6c:9f:a9:65:71:55:26:69:
                    1a:6a:8f:f0:be:5e:d8:0d:d7:26:5d:1e:71:96:b2:
                    1e:d2:38:f3:de:04:43:3a:8f:08:3a:54:15:a9:e4:
                    a9:d5:cf:9b:bc:65:90:37:69:7c:60:42:fa:2a:f2:
                    21:33:02:8f:69:bb:76:dd:25:aa:a1:98:0c:71:63:
                    e0:1a:bd:96:1e:33:67:bc:99:01:ee:0b:ee:39:11:
                    91:c0:ed:3e:97:89:bc:29:93:4c:d9:83:8b:39:e4:
                    f7:86:d0:6c:4b:fa:20:12:80:f1:b8:fb:63:ea:2a:
                    96:81:b7:a8:b5:76:fa:08:c9:79:63:bb:3e:4a:d1:
                    98:61:14:85:7d:56:e6:73:34:c8:50:7d:a9:cd:5b:
                    27:72:9a:eb:53:a3:e0:8b:c1:6b:d3:e6:77:39:18:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:C4:06:2D:0C:47:55:BD:20:2A:DD:DF:10:E0:BC:56:2E:C2:E0
            X509v3 Authority Key Identifier:
                keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:cc:88:75:fc:b9:0e:e5:d0:61:8a:3b:90:0a:bb:eb:29:
         81:36:f6:8d:c8:e0:cb:2d:b6:be:e6:92:cb:85:86:2c:b4:52:
         f4:0d:04:82:d5:69:7a:dd:ce:7a:2d:70:45:1a:73:fb:8a:b8:
         c4:06:92:80:9e:1a:b9:6c:dd:1b:b1:73:dd:b7:b4:82:ce:6e:
         97:d2:87:fb:1b:f5:ed:78:d9:f2:f3:00:13:c0:55:e6:dd:87:
         88:84:eb:0c:c7:fa:c7:59:cc:62:b1:72:82:3b:dd:e4:88:7f:
         51:05:9d:99:90:32:07:a0:d5:6c:9f:2c:0a:48:1b:f9:23:4f:
         b9:da:bf:2e:28:47:ee:fe:dd:17:df:eb:a1:22:16:88:95:81:
         e9:0e:9e:db:04:47:fc:35:8b:aa:94:2a:3e:61:0a:fe:8d:b5:
         41:67:fd:84:c9:7f:49:ce:40:2f:60:c8:80:6b:03:77:a7:7f:
         fc:72:af:54:69:e4:0f:d1:f4:0a:da:62:74:e0:4b:62:14:1d:
         eb:02:63:1b:14:52:08:70:24:ed:23:60:76:e9:31:70:6d:28:
         87:d3:90:bd:fc:4d:ec:06:5c:ff:04:d9:18:fb:36:85:01:02:
         d4:44:8c:5f:64:f3:b5:6c:ab:a7:ae:2a:fe:15:2f:3f:c8:b0:
         bb:dd:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----