Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          NI0EgQJvYVTT2gtQQJ17hdSjk+qspK3HteTeTrrAxYU=
Subject key identifier:   CC:F1:29:55:79:2C:07:BE:90:E4:67:7C:84:09:93:33:0C:EC:BC:D7
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       01962F3D4565BDABD812036FB2B4E62E345F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          025F
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: sZqJGnmMWVaT0gxQwoA8AGlcVY9R/AVFjlqhrDmFLBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:45:65:bd:ab:d8:12:03:6f:b2:b4:e6:2e:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=ccf12955792c07be90e4677c840993330cecbcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:9c:77:3d:14:e3:22:fd:ee:9a:7f:42:7f:
                    69:1a:74:7d:26:45:63:3b:ac:c4:8f:80:00:d4:40:
                    fe:4d:ae:9b:b5:a3:17:e8:89:af:0d:5b:84:87:cf:
                    80:f6:d6:77:ce:c6:5d:55:04:13:2a:d8:4b:65:df:
                    0c:fd:9e:25:09:00:34:41:e3:d4:1f:0e:84:ee:ac:
                    d5:0f:a0:ef:58:d9:28:7a:de:40:01:22:71:25:91:
                    63:81:f0:84:6c:df:c3:35:a8:a5:60:3e:0a:1a:77:
                    b0:e3:1a:c0:37:cd:96:ba:0f:9b:ff:c8:18:a4:b7:
                    ac:de:1a:02:c2:da:f5:e9:9a:3e:ba:a9:22:20:bf:
                    7b:89:4e:d9:d3:8c:8e:50:10:ff:d1:8e:11:6d:20:
                    37:e4:8a:1e:60:9b:8f:24:51:de:fa:e7:ac:c8:01:
                    0e:1b:9e:6a:d0:9c:08:7c:48:1a:4f:f4:a9:6b:f9:
                    91:35:51:dc:2f:85:6b:b2:fc:c1:0f:66:09:86:17:
                    8c:3b:90:87:7b:2f:a7:c6:c3:9e:8a:d5:49:97:a8:
                    2b:ec:c4:70:44:05:94:67:81:10:ac:8a:e3:ee:f4:
                    7b:e6:ab:52:3c:70:93:90:bd:bc:3a:12:42:2a:17:
                    d0:8b:d4:19:68:28:91:8c:f2:49:4b:29:11:65:60:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F1:29:55:79:2C:07:BE:90:E4:67:7C:84:09:93:33:0C:EC:BC:D7
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:88:c2:90:a4:61:bf:0c:9e:01:99:47:98:57:ee:74:f4:1e:
         d5:ba:6b:e1:80:98:e8:e4:58:8b:d1:c9:a4:7a:e0:26:96:96:
         7a:9f:da:20:d8:02:62:31:0d:62:90:b5:03:3e:14:b0:e4:55:
         5c:a1:c0:d3:3b:be:03:a1:f9:a1:f0:a3:11:8f:de:8b:6a:f1:
         65:ce:fc:05:41:9e:6e:1e:2a:58:9c:db:51:e8:da:0c:4e:2e:
         96:8e:44:11:4a:2b:46:dc:be:9c:9c:1d:2f:fd:7e:fc:dd:b0:
         55:86:79:4f:50:10:25:bd:a1:1e:d3:9f:2d:ff:76:14:7d:f1:
         f0:d0:53:0f:1a:93:bb:fa:68:fa:14:e0:9e:87:69:f2:23:a4:
         83:5b:fe:3b:48:7c:c7:5d:e3:b1:4c:64:49:1f:97:09:1d:ec:
         37:33:ae:d0:e1:57:02:c6:b2:4e:66:c6:b8:8c:aa:6d:0e:94:
         48:12:d0:7c:95:0d:64:8b:a2:46:c2:42:4c:2f:5a:af:c4:22:
         c8:4f:00:f2:c7:2f:f2:7e:3e:d5:5f:8b:01:b9:fd:d9:06:e4:
         f6:72:7c:15:a6:5a:fc:dd:70:02:8d:b6:fa:65:64:b0:24:fb:
         f3:6a:f6:5b:8d:72:3c:5c:95:f7:6f:c1:86:60:60:11:b5:07:
         60:6d:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----