Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File:                     qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier:          xpq9wnhdkLvOu9XVS7TCiB0T1mSa7XpyRlikVzn8UfY=
Subject key identifier:   6D:B0:79:F7:05:E8:17:55:42:85:5E:CA:CC:42:42:92:51:7B:21:6B
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer:       /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial:       01962F3D587777E7C3703B0F4EC9A0F92005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number:          0BA1
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
                          2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: rqe7YjU6AgO8tVLwDPVAt2p0Q7MkhCBFjlHgMKJPlW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:77:77:e7:c3:70:3b:0f:4e:c9:a0:f9:20:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=6db079f705e8175542855ecacc424292517b216b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:7d:91:da:a5:df:34:c5:4e:d5:b3:94:11:
                    e5:e9:e6:ca:09:36:d3:1f:7c:a6:94:0c:51:68:c4:
                    19:09:ec:43:d3:c9:6e:2c:b1:b9:f2:32:0a:6c:35:
                    1a:1f:6a:03:57:0f:b8:f8:1e:62:57:7f:71:f8:d6:
                    2c:9d:e5:8d:1d:bc:c7:3c:0e:80:fa:60:8a:1c:ac:
                    7c:e3:d5:94:9e:30:83:f2:96:df:34:d6:3f:95:7f:
                    1e:71:56:f0:3a:ac:4c:ff:40:6d:d7:39:b5:58:fd:
                    69:f2:b6:93:b9:c7:07:3d:e9:33:68:d0:26:47:81:
                    13:23:a1:65:07:a5:07:41:ce:c3:a4:c6:fb:df:20:
                    7f:f5:b0:80:97:8a:1a:db:41:5a:da:6f:ae:26:44:
                    69:39:32:c2:b2:92:db:f6:b1:e9:3c:fb:2b:61:e3:
                    ea:a6:b5:e0:d1:9b:31:60:be:fa:2e:b0:57:93:de:
                    26:a7:63:8c:03:32:46:1e:7d:cb:a7:d3:71:24:3b:
                    43:3e:6a:ae:23:6c:7b:58:9d:c3:11:40:a0:8c:6a:
                    75:05:8e:ae:b6:85:8c:e2:e8:05:f0:0f:25:53:1c:
                    3c:7c:7d:d9:5d:39:5b:73:6f:83:1f:b6:09:ed:ce:
                    a9:0a:0f:03:ae:15:2f:3b:06:65:45:7b:4a:80:04:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B0:79:F7:05:E8:17:55:42:85:5E:CA:CC:42:42:92:51:7B:21:6B
            X509v3 Authority Key Identifier:
                keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:56:33:5f:42:3e:0c:32:cf:33:e4:db:6a:65:7e:f6:1a:
         5e:08:bf:6d:8c:ac:56:11:1f:b2:0a:d7:7b:a8:0a:65:f2:5d:
         2b:a0:4b:5e:64:55:ed:bc:74:28:1b:32:b4:ae:ba:88:2b:61:
         26:89:90:e0:2c:a3:e3:8f:6b:06:bf:5e:15:e7:97:fa:24:66:
         39:5d:ff:28:a3:43:d9:1d:21:7b:0a:58:4c:e4:fc:61:24:10:
         ee:33:d7:8f:1c:97:68:8c:f9:08:fd:13:05:ee:a9:66:a3:a8:
         c1:12:f5:a7:db:99:f2:e0:4e:58:42:43:1f:8c:b1:fc:04:b1:
         83:6d:55:b3:a1:1c:9d:d1:91:31:c0:e9:70:08:98:56:ab:5e:
         66:d0:d5:8f:dc:8b:6e:29:54:8f:a1:00:f2:68:2f:f8:63:17:
         52:06:ac:63:73:29:ef:39:3a:f6:3d:05:0b:6d:2f:4b:20:da:
         2f:e6:68:a7:90:bc:06:bd:11:05:1a:54:eb:39:b7:f8:cb:4b:
         97:8c:ba:e0:2f:af:b6:aa:b9:2d:d9:4e:60:72:d2:ec:94:fb:
         50:ae:bb:23:7f:6d:a9:2a:2a:57:cb:84:c6:b0:5f:d4:b8:32:
         59:cb:9f:b2:89:d7:71:ad:52:c9:29:c7:e9:fa:fc:5b:ce:7c:
         80:45:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----