Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File:                     qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier:          +O5dZMpmncJqajVtwq65DQeO3dQpEIHd7re3xG+uZEY=
Subject key identifier:   D3:BB:B3:3E:36:2A:C5:D4:05:58:0C:3F:92:16:05:79:0B:C4:1D:3E
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer:       /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial:       01962F072BA3A44511E8414E3DAB779E0F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
                          2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: Z1doV1Yg+FRJv6JmL9aYC7ATFsO2eudKH+gamTHzYaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:a3:a4:45:11:e8:41:4e:3d:ab:77:9e:0f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=d3bbb33e362ac5d405580c3f921605790bc41d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:48:8c:23:d0:ba:05:ed:e2:e8:2e:ae:c9:
                    c1:31:fe:5e:78:85:fd:1d:7d:e2:eb:a2:79:e1:df:
                    a4:99:5c:bb:5b:2c:b0:73:25:a1:c7:0b:03:70:d2:
                    36:77:78:d6:f0:59:dd:68:a5:e4:d1:2a:ba:43:35:
                    01:68:53:9a:8d:e6:53:5c:f4:42:2a:64:f8:88:8f:
                    b9:be:9e:0b:57:40:cd:55:35:6f:d1:e8:fc:0a:e0:
                    ff:e4:a4:2f:c5:1c:3b:ad:0a:dc:4f:12:26:eb:97:
                    81:8b:da:c1:8c:d1:27:dd:24:f5:ff:a1:d4:3f:4b:
                    09:08:14:43:4a:0d:dc:05:c2:53:83:0f:65:cb:86:
                    33:b6:bc:d2:e4:c1:15:86:15:35:3d:6c:57:e8:9d:
                    31:ea:11:93:e2:4d:46:fe:b1:4c:24:16:3b:65:9d:
                    f7:53:bf:98:43:01:a3:cf:a3:ae:b8:c7:63:a9:65:
                    ad:0d:43:24:25:78:c9:8e:75:e8:b7:99:3a:b6:02:
                    2c:1b:11:2a:b7:d7:1b:96:d3:92:b9:5d:4c:43:c3:
                    97:ef:23:21:28:83:a2:e5:c2:7c:f8:4c:a8:b4:6c:
                    87:f1:5a:9f:89:9f:c7:4f:fc:b2:ac:15:c0:58:25:
                    3e:03:4a:e4:5f:6d:dd:29:10:39:24:f7:15:c8:3e:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:B3:3E:36:2A:C5:D4:05:58:0C:3F:92:16:05:79:0B:C4:1D:3E
            X509v3 Authority Key Identifier:
                keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:c8:c1:82:eb:9f:50:4d:a1:15:2c:f9:4b:68:92:90:db:
         71:dd:4d:f0:5f:95:7b:37:fb:32:57:77:94:58:e5:d9:f9:6b:
         d3:46:a0:64:8f:08:3d:96:74:0c:05:b8:ae:72:6d:16:15:eb:
         ec:0e:6c:eb:a1:a3:2d:1c:4f:9a:3e:29:4f:99:92:c6:f1:af:
         c3:1d:c9:2f:76:11:0f:8a:94:8d:52:cd:b5:5c:d5:f0:10:e5:
         8e:4a:ab:f0:3a:43:64:e6:41:8c:e6:a9:d0:9f:7a:ff:34:ed:
         66:fd:33:9e:b1:b2:5b:3a:3a:b6:c6:cc:cd:94:60:07:0a:2c:
         6a:34:e1:37:3e:44:25:13:f6:e4:9e:bd:81:a0:f6:d3:09:78:
         29:f0:c9:04:93:30:10:ff:7f:9b:42:9c:c8:97:68:48:a5:c5:
         b9:34:e4:1f:64:c2:de:d0:f9:05:9c:db:34:6d:02:a0:59:63:
         ed:fd:a6:f1:26:c1:9f:94:c4:c3:71:9f:54:3c:f0:dc:a8:db:
         48:d7:74:a9:df:62:f0:b1:6d:19:55:56:bf:64:41:23:4e:ef:
         ac:e0:9c:d1:9e:ed:05:85:58:9d:fc:b4:e2:91:e8:35:ee:77:
         7e:2b:49:c3:a2:9d:a8:56:58:49:96:3c:1f:09:99:53:5a:05:
         a8:4a:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----