Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File:                     qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier:          ENyiPn5oSr5UtqpavnM9OIc+occYfuHYRM1jRqpWaCU=
Subject key identifier:   03:4F:C1:FA:BA:95:12:43:14:2B:F2:7C:0A:25:A2:A9:53:EB:D2:67
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer:       /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial:       01962E2AE2C7244D2DC1304E0F815EAD0541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number:          113E
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: cGstWWcStfLVMRSsiEq5+vSse55JQ4fKJDqC3pngNkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e2:c7:24:4d:2d:c1:30:4e:0f:81:5e:ad:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=034fc1faba951243142bf27c0a25a2a953ebd267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:c1:4d:ad:17:9c:5a:2f:cd:a1:b2:33:a8:
                    b3:b6:ed:a5:38:9b:a2:2d:4f:37:20:36:d8:42:2c:
                    73:83:c7:b0:cc:c5:6d:e8:6e:54:f4:17:70:e8:28:
                    d7:c7:3d:da:03:08:bb:fd:24:63:40:57:84:dd:ac:
                    cd:27:99:56:62:a8:fe:ee:dc:01:58:f7:79:9f:dd:
                    5a:86:b8:a9:da:ca:1d:86:6f:8f:31:50:5f:ab:04:
                    67:7a:46:89:40:4d:75:48:9b:d5:f2:d1:40:bb:34:
                    2c:b4:3f:db:cd:6a:7f:34:2e:01:a8:27:ed:36:22:
                    44:ec:a9:1b:1e:58:e2:f1:e3:f8:54:2a:e8:d8:c3:
                    20:95:41:8f:66:6d:bb:33:db:d4:d1:09:0a:db:70:
                    11:69:c5:da:dc:4b:7a:20:40:c5:fa:38:88:38:0a:
                    33:7e:f0:7b:c0:09:4b:9e:cb:83:c4:cb:b3:7a:cb:
                    b8:7d:15:54:5b:15:81:eb:a0:cd:c6:10:ba:5e:ff:
                    00:92:b6:61:69:28:e8:37:99:7f:4c:69:86:79:88:
                    c8:cf:88:f6:da:ab:3e:7b:3d:65:00:b0:08:59:bc:
                    82:15:d6:53:02:85:96:9a:ba:fe:9b:81:f5:b6:7a:
                    f6:a5:55:63:fa:be:ec:e6:2f:22:84:87:eb:45:8d:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:C1:FA:BA:95:12:43:14:2B:F2:7C:0A:25:A2:A9:53:EB:D2:67
            X509v3 Authority Key Identifier:
                keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:80:fd:d4:ad:65:48:0b:6a:27:eb:b0:4b:72:45:df:3d:2d:
         39:13:bf:ed:79:b5:1b:75:62:5b:b5:e3:43:ba:08:d5:0e:df:
         35:d6:8c:df:d8:12:44:77:12:80:a5:89:03:db:c4:31:44:50:
         38:51:f5:15:e0:af:44:b4:e3:b1:c1:6f:cd:7f:e8:c6:3d:4c:
         a9:1f:7f:99:2f:1c:e4:0a:4a:d8:17:ff:5b:a9:93:b9:c7:a8:
         83:c9:fb:b9:00:b8:3d:ed:29:83:04:14:5c:8d:77:c8:d1:42:
         2a:b7:14:81:4d:ae:5d:0d:00:9c:a5:3d:3c:b1:df:90:32:28:
         dd:6b:af:26:b3:42:2b:72:27:b5:bb:00:6b:ca:01:9c:80:a7:
         74:f5:79:16:df:21:cc:cd:bf:0e:8e:0a:c3:84:48:d8:5c:ea:
         93:5b:25:b0:b2:67:dd:24:ca:3b:41:2e:77:28:ea:bc:ab:08:
         43:bd:0c:72:56:78:24:15:97:cc:4d:2c:60:06:da:50:7b:f0:
         8a:a5:46:6b:e9:b4:79:e4:ef:9c:8b:ab:c2:8a:df:ce:ed:3f:
         b4:04:4e:21:e6:da:ec:bb:c0:fc:f7:b9:b4:9a:31:d2:27:d2:
         5f:54:aa:cc:fa:7c:b1:db:05:68:0f:44:da:c0:d4:5d:b6:10:
         fe:17:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----