Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File:                     q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier:          AJ9BlKf+X8PY0bu+GM/4yI4zuH8Btd67qlA9ExMZp38=
Subject key identifier:   6A:5B:5E:B0:10:5B:30:A1:54:A7:DD:27:8A:39:7C:21:E9:EE:2B:83
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer:       /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial:       01962E61902F5C326450095684A506CE02F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number:          0635
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
                          2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: 2ZBNPpcIlQYgm+EXGVaZ/mlgODe543MO15CX1WNY2/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:90:2f:5c:32:64:50:09:56:84:a5:06:ce:02:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=6a5b5eb0105b30a154a7dd278a397c21e9ee2b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:75:de:5a:e8:d4:6e:83:da:cd:ef:88:fa:
                    c3:33:0f:f1:3d:6d:0f:93:9b:78:2b:dc:c4:7c:6a:
                    25:92:31:42:0f:31:02:36:0a:85:06:b8:5f:1a:71:
                    35:6f:d6:9a:c9:85:ff:68:89:46:0f:3c:ea:9f:48:
                    e9:67:30:d7:51:c4:d9:52:40:64:ec:40:e2:d8:9f:
                    fd:23:bc:bb:5f:e9:49:7a:b2:2c:2f:3d:19:1d:f9:
                    36:fe:7c:84:65:b6:15:56:84:d0:4c:76:f4:3e:e9:
                    a2:76:ac:15:5c:15:f2:9f:9c:4a:85:3d:6e:19:e5:
                    b4:f1:1d:f5:b8:18:38:42:54:1e:92:84:63:16:75:
                    9a:2c:b8:30:49:2c:3a:70:56:50:b9:54:99:9b:92:
                    55:8d:2c:4c:67:07:91:ec:9f:f4:cd:4c:86:5c:6d:
                    43:94:5a:15:7d:20:c6:52:62:43:c4:73:3c:65:71:
                    5c:44:69:58:1d:59:a8:48:35:71:5b:81:07:39:be:
                    f6:de:01:2f:a0:e9:21:1a:10:16:9d:07:68:d7:d6:
                    64:2c:57:f2:dc:47:88:30:98:fa:45:6c:32:e9:07:
                    cb:5c:26:f1:e8:09:d2:19:3d:f9:e8:37:16:ed:93:
                    3d:ac:89:e5:19:32:60:12:cd:e6:1e:fe:83:45:80:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:5E:B0:10:5B:30:A1:54:A7:DD:27:8A:39:7C:21:E9:EE:2B:83
            X509v3 Authority Key Identifier:
                keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:77:42:a5:a3:10:54:56:c6:f1:71:22:20:42:73:59:cd:
         57:c2:34:a0:2b:48:21:3d:ff:ef:16:1f:35:36:de:19:4b:de:
         0c:df:3a:6c:e3:c3:6a:66:4d:b2:bb:3a:c2:07:4c:8d:de:9c:
         5b:b5:62:d5:46:87:da:76:6a:67:bc:d2:82:7f:93:ba:26:58:
         e4:01:02:2e:8d:62:0a:4a:c1:05:b5:02:b5:4d:d2:28:00:ab:
         c8:6a:e6:97:00:39:de:f4:c1:5d:f1:d7:14:3a:11:22:5b:eb:
         96:67:55:43:22:c6:54:14:8d:cc:67:5c:3b:63:4b:bb:39:8a:
         b8:f3:7c:4d:f9:3f:ed:ef:58:8f:1e:40:75:5d:f1:0a:aa:44:
         20:9d:4d:7f:73:80:c6:78:25:91:18:c9:ed:cf:4c:57:49:08:
         fc:e1:28:1c:43:a8:47:76:27:f6:7f:5e:64:37:d6:e7:c8:74:
         8d:ba:2c:57:c3:2f:b7:b6:e2:3c:69:f0:fc:d1:2f:6c:32:a7:
         c7:26:c8:20:d0:8c:ae:0f:b1:29:18:69:65:6d:8f:12:da:af:
         b4:a1:0b:2a:f1:e8:62:35:d2:5e:4a:b2:b8:7c:84:d8:67:36:
         01:1e:a5:ed:b5:72:fd:f8:87:3a:2c:ef:4a:d2:a8:f9:7c:58:
         83:a5:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----