Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File:                     nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier:          2BwdVcgYdScK9ujpuTT6Kato9v1LAtDDZiUfjO2t0QM=
Subject key identifier:   24:20:59:10:F3:90:3D:33:B3:2A:4E:80:0F:F7:AA:F6:5E:44:DD:DB
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer:       /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial:       01962DF4008D418BE6B613C80C7B969143A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
                          2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: XLJS0Z7Ebw5pAWXNqrO11dJOXrq+EixMKXgOYnv6x0A=)
                          3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:00:8d:41:8b:e6:b6:13:c8:0c:7b:96:91:43:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=24205910f3903d33b32a4e800ff7aaf65e44dddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:cd:20:7a:d6:cd:e9:3d:c2:aa:7e:45:dd:
                    9f:3a:98:fc:62:e5:7e:25:84:75:00:45:d0:89:6c:
                    4d:09:95:30:67:a7:eb:a1:66:0f:6c:b4:e3:eb:d8:
                    f4:07:73:99:4e:76:10:61:9a:ac:e8:ab:03:c8:d9:
                    99:29:46:13:65:f0:6e:88:a8:5c:3d:75:ac:fe:5f:
                    85:04:f4:77:5b:24:7e:ac:12:3f:ab:2b:62:14:98:
                    f8:42:b3:03:14:4e:f8:24:36:48:6d:33:00:4b:1f:
                    9e:fb:ff:9e:f6:57:3a:b0:37:f9:0b:b7:ee:9b:17:
                    f0:cc:f9:91:47:81:f4:a8:a4:06:02:e5:ea:e4:39:
                    67:91:c1:78:12:d4:10:2b:ad:2b:67:22:39:63:58:
                    b4:0c:7e:f0:a6:c5:c8:45:97:b9:30:5c:d9:90:3c:
                    6d:05:33:ce:ac:84:2c:71:4b:10:0c:48:95:9b:e4:
                    dd:ff:59:4c:d9:e4:5a:76:27:e6:5e:6b:df:3b:0b:
                    5f:7d:7a:dd:4a:61:3b:8e:36:9e:a8:75:4a:04:0d:
                    64:1f:fa:6e:8e:7f:b9:12:4d:b6:6e:23:ca:10:09:
                    bd:fd:6c:fc:4a:3a:40:7a:34:73:b9:a6:f4:3c:af:
                    e4:00:8e:54:53:ab:3f:de:a4:58:e4:59:71:87:1c:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:59:10:F3:90:3D:33:B3:2A:4E:80:0F:F7:AA:F6:5E:44:DD:DB
            X509v3 Authority Key Identifier:
                keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:87:5d:91:8c:d3:ed:c7:2a:fc:21:74:63:48:3c:4c:9f:22:
         6c:7d:cb:fd:04:93:ca:65:d7:e8:9f:0d:81:e2:75:77:9b:00:
         51:74:e6:c4:fd:f9:84:79:25:7b:9e:98:e1:9b:61:0a:61:5e:
         88:70:a6:2f:d4:44:ac:c2:51:92:fd:3c:a3:a9:4e:a8:c2:53:
         54:0d:0b:cc:cb:7d:c3:3d:64:fb:db:7a:06:dc:60:e0:24:b9:
         67:65:22:9b:67:43:b5:43:12:cb:dd:c1:07:4b:be:00:ed:7d:
         67:80:83:ca:b4:5d:fd:ca:a6:32:b7:62:31:2e:56:60:3c:d9:
         cb:61:ec:ee:3b:57:45:5b:41:de:e5:fa:57:f6:3a:3b:f9:d5:
         5e:04:92:21:e6:b5:18:8f:91:6d:cb:64:e1:8b:81:78:af:41:
         76:9c:2e:67:70:96:66:36:f3:0c:3b:44:d7:cb:cc:fc:bc:e2:
         30:ae:de:cb:6c:f0:30:e6:72:64:b4:fc:53:89:ba:9a:24:b4:
         7f:00:c6:ec:79:b5:6c:5f:3f:bd:5c:f5:de:40:33:6c:3b:de:
         a3:1f:81:4d:46:ad:f4:0b:93:b5:2a:5d:e3:3c:f2:6f:2f:f2:
         de:49:75:34:75:32:4e:89:5e:3b:28:c9:91:35:06:ac:cd:0e:
         e8:bc:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----