Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File:                     rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier:          iPW7XpLdT7ERQBVGYofizi7f/vGGD6vCIuOPjMRCZZM=
Subject key identifier:   EB:5C:FA:D7:DF:AC:06:EA:BC:DD:DF:3E:79:66:B7:FA:26:1E:25:FC
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer:       /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial:       01962FAB72589E47467834231A3D045181DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number:          41
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
                          2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
                          3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: j4m0ve39upCrTfOosh4hTXTsCIkJSOZY1MVtKDmMOVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:72:58:9e:47:46:78:34:23:1a:3d:04:51:81:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=eb5cfad7dfac06eabcdddf3e7966b7fa261e25fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:cb:6c:08:d1:14:45:31:a5:36:c7:b8:83:
                    22:72:45:40:58:1e:71:a2:95:fb:e0:cf:35:32:c8:
                    94:98:81:96:9c:4c:6f:e2:7e:33:5f:6a:88:6a:69:
                    c0:62:76:22:c5:38:1c:87:37:2d:87:af:cb:2f:9b:
                    5a:5e:ea:df:01:37:46:f7:fb:d3:b7:7b:1b:15:b5:
                    5a:f6:cd:4b:d4:ed:6e:a2:9f:e6:d6:7a:57:59:ca:
                    cd:df:6d:f9:d9:70:6b:27:57:78:6f:72:d6:90:30:
                    9d:8b:7c:91:54:aa:18:15:3b:29:38:a9:c2:b8:84:
                    2f:57:ad:c0:8a:85:46:fc:0d:12:a8:2c:ca:b9:90:
                    2f:2c:9c:27:80:20:7c:90:b8:68:3f:87:ac:9a:e6:
                    c1:7f:3f:90:b2:98:c3:9b:8a:ee:8c:2f:14:ce:bb:
                    fe:84:b0:3d:00:e7:a4:d2:72:1c:d3:c4:e5:fd:0b:
                    79:f3:f5:da:a2:87:c3:d8:dc:a5:ac:25:c6:33:24:
                    ad:90:f3:d2:2c:29:78:0c:96:04:e6:b8:d4:cb:15:
                    db:2d:e0:34:6a:77:e9:88:b1:70:05:70:4f:1d:ee:
                    52:25:e3:5e:e0:71:a5:fb:e6:49:81:5a:55:00:f5:
                    c1:8f:96:9f:55:0c:7b:52:5e:ac:49:52:04:6a:68:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:FA:D7:DF:AC:06:EA:BC:DD:DF:3E:79:66:B7:FA:26:1E:25:FC
            X509v3 Authority Key Identifier:
                keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2f:ef:8c:74:4f:e5:2a:e7:90:35:e0:dd:a7:a3:33:bb:b0:
         5f:98:24:d5:d9:3f:6a:e9:55:91:cd:63:49:db:e2:3e:5f:cd:
         a0:0f:c9:bd:e1:6d:5e:4e:ff:fa:19:ed:da:b3:5e:4b:a9:6a:
         e7:70:a9:c6:9c:40:55:6f:d9:00:a3:f4:00:6e:76:de:49:55:
         40:6f:5c:05:3d:53:da:9d:06:2c:62:98:88:84:7e:7c:14:20:
         0d:a5:9d:8a:8c:e2:98:79:92:6f:67:cb:26:09:f0:e9:e8:29:
         62:af:79:04:1e:b3:0c:82:c9:a3:6e:36:e4:f2:5d:02:06:4a:
         07:bf:0f:3e:87:ce:76:92:ce:fe:5b:0a:3c:6c:51:1e:49:bc:
         01:9d:d0:f5:9b:cc:bf:cb:d3:65:47:f0:3e:ec:47:8a:fe:7d:
         e6:39:54:7a:2a:a3:4f:27:e8:33:49:e9:f6:57:04:cb:86:1b:
         ab:87:e5:be:65:30:9e:bf:bf:f7:98:29:38:ad:64:40:4d:47:
         9e:d3:87:ac:81:a5:b2:37:09:c1:f5:a8:04:26:49:19:f2:2e:
         31:87:70:55:e2:22:6d:14:0d:8b:87:1a:31:8c:02:e2:c7:bd:
         d1:16:44:46:1f:19:69:f3:07:3d:79:30:1d:20:62:b1:9b:67:
         32:22:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----