Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File:                     pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier:          YMC4pj9WB5GKqeUHcfwNj01Oip8lUb2ymdR3s1pu+gA=
Subject key identifier:   2B:34:2C:00:73:E1:01:85:DE:7A:E6:4A:25:A2:80:94:EF:07:26:1F
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer:       /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial:       01962DF3A6E793D69E248A98E5521ACA47FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number:          0C03
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
                          2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: z4eSKTrk40G3HOmB7DC16jl+DK7s/hQSkCNG/zYmxDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a6:e7:93:d6:9e:24:8a:98:e5:52:1a:ca:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=2b342c0073e10185de7ae64a25a28094ef07261f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:af:17:76:e7:4d:c6:71:92:b3:fd:0c:3b:
                    3c:a9:a7:a1:90:33:8c:27:b2:c5:ad:de:e5:5f:21:
                    94:81:54:d2:e8:87:1d:aa:65:ba:00:5b:c4:fc:da:
                    6a:48:a5:3f:f9:e2:1c:b5:6e:5a:7e:01:34:9c:4a:
                    9c:b9:2f:c6:53:8a:c4:62:7c:d2:5c:5b:d0:ea:85:
                    99:9d:46:37:85:4d:36:4b:e5:25:51:5c:8e:e3:12:
                    13:c8:f3:3d:99:f5:5b:bd:12:1a:8d:0f:49:41:76:
                    71:15:bd:72:2d:60:1b:cc:bb:5c:0a:fa:f3:5b:27:
                    11:a6:00:b9:b2:0f:c4:d1:07:41:6f:e3:9d:24:8f:
                    11:a4:7b:09:16:ad:66:68:fe:7f:8e:7b:81:13:88:
                    ac:2c:f9:e6:1e:b9:22:d8:95:ed:5e:eb:aa:31:5c:
                    f6:53:d3:54:10:5f:c0:1e:95:70:99:ba:a0:01:b5:
                    f5:34:b8:e5:b5:04:b4:4c:75:ec:30:34:e1:43:18:
                    97:13:c0:8e:a7:53:3c:95:8b:fc:a3:84:bb:c9:33:
                    a9:b1:4a:ae:c8:71:83:6b:05:2a:59:fe:cf:99:a3:
                    70:d8:d0:99:28:3c:bb:db:03:25:60:e3:f3:80:8e:
                    59:a0:ab:a0:01:57:40:b3:b5:0a:83:9f:15:99:cb:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:2C:00:73:E1:01:85:DE:7A:E6:4A:25:A2:80:94:EF:07:26:1F
            X509v3 Authority Key Identifier:
                keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:66:16:08:8b:f2:6b:ce:b7:68:90:04:1b:72:31:d2:24:4b:
         e1:9a:d7:ad:63:0f:ba:59:d2:60:ee:48:d7:f4:7a:d0:f0:95:
         0c:e8:73:02:4b:c3:f9:7c:56:d0:6c:93:c0:36:b6:33:07:c9:
         87:d0:eb:a2:2c:c1:92:01:b9:0a:41:c3:68:67:b0:67:0a:03:
         b2:11:a0:a3:70:bf:ae:fa:3a:cb:a2:3d:eb:7a:48:46:0a:9e:
         7b:f0:66:23:af:cb:e7:a0:4f:97:98:70:bd:9d:ab:ee:1d:b9:
         26:4f:99:1b:6f:f6:a9:e7:bc:bc:06:92:59:3e:8d:62:59:c2:
         c5:c8:57:b6:30:9a:a5:1b:3c:70:55:d3:ec:0e:20:36:6d:dc:
         c0:ab:11:2e:fc:23:20:cc:fe:a2:f5:3c:01:d0:3b:af:4a:e2:
         4d:81:9b:67:90:ed:1e:39:89:08:27:e4:f4:69:0d:02:89:8d:
         fa:db:16:c9:83:e0:b3:88:d2:d2:7f:79:69:03:26:e6:88:ae:
         95:ea:02:d1:4b:05:77:0c:97:e3:39:7a:42:91:ed:d0:57:20:
         41:9b:39:e3:ac:c6:e5:1f:4c:9d:1d:6a:82:ac:bd:af:66:1e:
         3c:45:a4:c5:c8:65:34:9a:6e:50:7a:aa:14:8e:e5:da:fd:b1:
         d9:2a:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----