Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File:                     aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier:          s6AvCCB01NuDN6MVxH1MxOsQe96u+UokpgFRiv8rzs4=
Subject key identifier:   F4:C4:9B:C3:AC:26:96:5E:F4:21:3C:5F:F2:4C:2D:0F:F4:0F:55:C5
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer:       /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial:       01962F06AAB692E3F828EE12DE365158BABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number:          112F
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
                          2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: KmSMzNQv4tkJdWhnRWkelsvmfi+yeLPG2JvHoS4pmRE=)
                          3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:aa:b6:92:e3:f8:28:ee:12:de:36:51:58:ba:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=f4c49bc3ac26965ef4213c5ff24c2d0ff40f55c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:73:21:f7:62:36:c2:8a:d0:14:45:24:f6:
                    bb:45:07:24:46:d6:24:ce:b1:fa:db:f1:70:8b:64:
                    f8:fb:09:b8:57:06:0c:45:73:68:e0:eb:6e:f3:83:
                    53:8c:21:d4:07:64:9b:cd:46:1b:03:d2:77:b5:cb:
                    42:28:85:87:62:97:47:57:11:f8:9e:49:38:bd:7d:
                    4a:9e:1f:7b:70:a1:39:a4:75:8b:98:4f:3a:95:e7:
                    1f:97:0c:ec:e6:cc:70:64:0b:98:e4:8c:e8:03:81:
                    fe:01:de:80:82:03:b1:53:c6:f5:ac:c9:a2:63:4a:
                    ed:98:4c:46:fd:09:54:94:04:4a:72:e8:fd:68:a1:
                    3f:52:40:34:5e:6e:d8:4b:43:48:9e:0c:22:ae:82:
                    e4:47:65:a4:57:0c:5b:09:29:d1:90:14:9d:a5:ec:
                    54:6a:84:e1:86:fa:65:ec:1e:eb:fe:84:5c:69:d4:
                    d0:2b:be:73:73:0d:34:6a:90:b0:b8:60:f1:eb:80:
                    38:9c:34:d7:f6:f1:66:0d:c4:c2:b0:95:72:a0:e3:
                    7b:e8:fb:c5:8b:1d:ae:d2:74:1f:fd:79:87:6e:3f:
                    06:bb:b6:d3:c6:1e:29:c1:33:21:2d:84:74:8c:05:
                    82:7a:0a:7a:5e:09:ca:43:2e:06:c9:2e:52:1a:64:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:9B:C3:AC:26:96:5E:F4:21:3C:5F:F2:4C:2D:0F:F4:0F:55:C5
            X509v3 Authority Key Identifier:
                keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:ca:f6:78:c1:1c:0b:34:06:ab:f7:6d:4a:87:50:ed:b9:
         e7:75:79:f6:8b:6d:01:75:87:59:2b:2b:c8:be:25:bc:5b:40:
         86:cb:81:62:1b:ad:32:8b:b9:45:68:39:b2:4f:37:bd:8b:f9:
         cc:33:15:b3:6a:a4:c2:cf:17:53:eb:58:78:4b:e5:a9:4f:a6:
         46:93:e7:d2:7e:7e:33:75:db:9f:ec:2c:70:34:bd:11:3b:e2:
         35:ef:93:e7:7b:2d:e4:ce:a9:01:1b:06:e8:9f:90:9f:68:51:
         71:fd:40:c5:57:74:20:a0:b7:a5:e4:d3:fe:2e:d2:23:95:11:
         0a:87:73:b1:62:7b:36:ad:38:c3:ad:5d:73:7f:bf:6a:8c:85:
         f3:a7:c8:9d:84:0f:28:2c:2c:1b:f6:4c:e6:5c:f8:9f:76:03:
         f9:98:dd:58:8f:af:39:04:ed:3a:73:96:fd:46:1d:77:44:3e:
         c2:a9:7a:59:1c:75:53:11:da:6f:8f:be:ed:88:70:bc:fd:11:
         fa:2b:1b:0a:3b:62:70:59:be:32:3a:76:21:4d:d5:af:0d:6c:
         ec:22:e7:64:6e:d7:86:fb:41:62:e8:64:f2:80:b9:48:ee:e5:
         81:1b:38:e2:40:5f:c9:1c:93:1b:25:27:0b:55:ec:34:a8:89:
         a7:90:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----