Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          800tNk6sZsVNm+bp9/MSHjnrQU4jnqvxXqlNIUgfyhc=
Subject key identifier:   97:79:36:91:A4:61:5B:85:2B:D7:6F:D5:64:DF:5C:ED:18:E4:C7:A2
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01962DF41FBEBEF0426F2A719CDC6ABAE08B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          0418
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
                          2: Cof8eev8n1uM7JC5vqffwrxP-x0.roa (hash: L3gyFbzSnpA7qzEPac0XApSOePsviNFdneQIfFUzHbM=)
                          3: Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa (hash: MNDf1tMg+caMWIh4pA1x8FHG09g/BDV+hXI1n2rqjLE=)
                          4: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: RnopWxQfxLT6IjZaFdSXZQuCZzTUvgnrg42udhISK0M=)
                          6: VuQJMzsFIREp6bcpzuh2KiinwdM.roa (hash: h5bgZWq9bx9jHDxasYLYkys54j2HtJgByCCvySMD0lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:be:be:f0:42:6f:2a:71:9c:dc:6a:ba:e0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=97793691a4615b852bd76fd564df5ced18e4c7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:8e:d1:cf:ce:ae:1c:53:c3:08:a6:fd:08:
                    da:93:97:34:1e:89:1c:59:6a:c7:5d:4e:c4:5b:a2:
                    8f:da:09:6f:9e:fe:e9:4b:d1:92:45:79:0c:1d:de:
                    70:b3:7b:72:1b:0e:63:db:f0:b2:1e:14:5d:e6:dd:
                    68:5f:e5:52:0e:57:c1:ff:b9:7a:c9:ed:f2:f6:26:
                    90:16:b9:bf:48:f9:e5:09:fa:81:d9:8b:e7:12:eb:
                    8a:fa:8a:68:ff:90:bb:76:55:24:24:f7:27:7c:26:
                    f0:0a:47:22:70:fb:35:9b:5d:f2:66:f7:c1:c8:2d:
                    57:2b:10:dd:83:31:28:9b:8c:08:f9:4c:98:56:df:
                    69:f9:83:3e:2c:ee:82:db:ee:d0:a0:69:19:f3:f5:
                    b9:bd:c7:74:f6:5a:bf:5b:3a:3c:10:0b:c0:c8:83:
                    14:da:77:46:4a:3d:1b:d6:5e:a2:5b:ac:17:66:48:
                    49:11:87:18:40:ec:f6:a4:f9:f9:ef:c8:f7:2b:b0:
                    90:8d:fc:e2:91:d3:45:f6:7d:eb:5e:8e:6c:c5:c6:
                    bc:6a:3e:2b:60:a7:63:11:4d:1e:ec:7f:c9:48:ba:
                    00:f4:d7:1d:9a:5f:32:b9:c4:ab:19:62:4c:97:6c:
                    cf:f9:59:b4:4a:84:7e:8d:58:22:e1:0e:02:67:67:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:36:91:A4:61:5B:85:2B:D7:6F:D5:64:DF:5C:ED:18:E4:C7:A2
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:91:fe:57:87:5e:d1:8e:22:81:1f:e9:66:cd:06:df:d3:1c:
         b1:25:b2:2d:3c:ac:01:07:7c:b5:fb:5e:34:88:1e:ba:85:16:
         69:81:19:85:9d:ce:4a:7f:df:01:c3:d9:07:c8:ac:cf:71:e2:
         15:14:0c:30:11:d9:55:1d:45:82:c9:1b:72:fe:d3:98:05:29:
         1f:28:2f:bb:06:cf:a8:de:26:0b:70:02:5c:c1:b1:42:d3:f8:
         d0:44:57:9e:6b:b8:2b:69:bc:0b:c2:ad:2e:ac:04:cc:27:9a:
         fe:12:ce:4d:5f:e1:6c:35:5b:22:14:ac:a9:fd:7d:af:82:f7:
         d5:eb:ac:60:65:3a:f9:8f:0e:c2:02:32:00:be:88:00:bd:4e:
         00:30:6b:fe:26:aa:5d:fb:1f:0e:0b:19:71:65:df:f3:90:06:
         0e:1f:bd:ba:08:8e:a6:02:ec:d3:90:85:a7:52:a8:50:b7:ea:
         9c:3f:1c:74:3f:cd:11:d7:1d:52:e5:b7:bf:5c:54:24:7a:d3:
         f1:38:c3:c8:ab:a7:28:20:1c:45:c5:45:ce:27:08:6e:77:9f:
         14:9b:0d:fe:7d:5b:b7:a9:24:de:60:4d:7b:99:31:e3:8a:92:
         c2:63:38:01:3e:85:d4:81:68:bc:b9:b8:bd:29:1a:39:02:8f:
         4c:29:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----