Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File:                     qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier:          Ca3v9idAbKHuNjyur6dRs0HO8Bbsm87u2qe3STKQCt4=
Subject key identifier:   80:7D:88:EC:82:2D:CF:10:D9:98:B7:D2:36:5B:B8:F9:B1:82:71:AD
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer:       /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial:       01962E987B64709FE1A1098D60B5E7DD6BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
                          2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
                          3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: 72tDgLfvAE47mp6llGwcA+nPru2CJbELRw2PBfERtmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:64:70:9f:e1:a1:09:8d:60:b5:e7:dd:6b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=807d88ec822dcf10d998b7d2365bb8f9b18271ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:d0:dc:0b:71:d0:02:28:98:39:74:e6:ed:
                    30:a9:f6:5e:f1:27:72:34:90:d8:5e:be:ba:54:7c:
                    ea:55:dc:7b:43:3b:3b:6b:4a:06:c0:1f:43:30:f8:
                    52:65:72:2b:80:1c:f1:60:84:f5:65:eb:1b:19:e1:
                    ff:90:61:d5:dd:ae:18:98:b0:7b:cc:1e:0f:32:e2:
                    a3:9a:09:19:26:3b:85:5f:2a:32:0f:24:69:6b:84:
                    6a:31:63:cb:0f:d9:9d:6f:6a:fa:1c:31:3f:00:bd:
                    c4:d0:ca:97:9b:64:94:8e:2c:05:3d:1e:52:05:ed:
                    90:63:6b:09:92:5c:e8:cb:d8:fd:d4:ee:93:c4:1a:
                    c4:39:db:57:0d:35:aa:32:b5:1c:7f:81:b8:a9:6f:
                    f7:dc:10:48:99:e9:5e:94:9d:7a:45:35:33:c0:f8:
                    22:60:b3:d0:d4:31:bf:96:71:46:16:c0:0f:58:8e:
                    13:de:52:1b:7f:c6:59:12:43:85:af:e0:83:e3:a4:
                    42:1b:0e:ec:ec:3b:be:06:fe:8d:db:44:13:33:38:
                    97:d6:86:ab:6f:3c:a0:17:b3:0c:16:0e:2f:f1:5c:
                    70:a2:02:98:e7:99:dd:09:b3:a9:a3:31:07:57:4d:
                    7b:4d:77:25:60:b5:b0:15:2e:3d:77:30:a6:ae:62:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7D:88:EC:82:2D:CF:10:D9:98:B7:D2:36:5B:B8:F9:B1:82:71:AD
            X509v3 Authority Key Identifier:
                keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:84:ea:10:00:1f:7e:1e:d0:fd:ff:36:a9:ed:82:b3:fd:
         0d:26:77:d9:e1:81:1b:1c:34:96:9a:06:64:2c:35:bd:88:ac:
         de:c9:0b:a6:07:80:8c:f5:1c:b3:da:cf:13:23:d2:67:01:a6:
         9c:ed:40:ba:75:e2:b7:fe:44:63:ae:b3:6b:db:30:48:5d:fb:
         e5:10:99:e1:26:06:da:aa:5b:c2:6a:2f:71:70:19:ec:27:fe:
         48:33:40:26:da:aa:b2:fa:09:3e:93:88:93:39:e6:96:ce:50:
         40:a3:23:11:41:58:1b:3a:25:00:75:77:cb:9e:8f:84:78:e6:
         4d:71:65:1d:74:52:a1:73:43:dc:4e:36:df:f2:40:77:18:d6:
         e9:51:00:bb:62:43:2c:23:c5:7f:4d:5a:60:e2:a9:e5:a0:de:
         ef:ef:65:68:fa:92:52:7b:33:00:b5:c9:eb:7b:34:28:d6:5f:
         a5:fc:24:bb:da:18:74:7c:ae:27:cb:9a:1e:9d:fb:db:3d:79:
         47:02:22:c4:8f:a3:74:f2:4b:d0:76:b4:c1:54:84:8e:fb:80:
         13:f4:67:70:9d:15:d2:12:30:84:ee:b1:a3:20:92:2e:73:68:
         ab:80:4a:52:05:ad:66:14:6e:1e:80:74:17:10:01:77:1b:c5:
         7f:69:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----