Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File:                     qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier:          21bWwPIUOnLzWehdlqhBUmCHORJrwHknmcZ4ioku6M8=
Subject key identifier:   EA:77:D0:8F:F0:7C:13:E9:25:87:BD:6F:14:FE:C3:F9:8A:88:CD:94
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer:       /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial:       01962E990775480F4FCEDCE3620598D53D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
                          2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: HhtOm89fiM+3lEiUbLIncVJGoXF7rKzX2finfPR7vCU=)
                          3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:75:48:0f:4f:ce:dc:e3:62:05:98:d5:3d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=ea77d08ff07c13e92587bd6f14fec3f98a88cd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:9e:39:22:6c:d1:82:cd:f0:83:0a:96:d8:
                    94:15:f5:78:55:c3:a4:e6:64:36:33:cf:a1:a6:8b:
                    d7:21:6b:c8:7a:56:54:e4:23:e4:84:9e:d0:c4:ab:
                    01:9c:98:21:6c:25:5e:5e:5e:a3:d6:90:d3:0a:05:
                    a8:28:0f:c0:f1:3a:1b:9e:f3:26:8e:b4:1a:a0:b1:
                    85:32:ad:89:a1:9d:c8:46:78:b0:91:48:88:df:6c:
                    fb:31:c5:c9:42:64:6a:fb:20:ed:49:df:ed:6b:ad:
                    37:d6:7f:34:88:3e:69:6c:88:08:3c:ff:e0:89:47:
                    d2:d5:4e:c2:e3:f1:39:af:87:a8:a6:10:09:ab:42:
                    f3:ef:a0:f1:e6:a0:3a:61:24:86:93:cf:f5:f8:53:
                    1c:43:bf:a4:40:96:9c:56:49:8d:15:49:b7:a9:b3:
                    f3:f6:b5:bd:d4:7c:81:91:98:68:7d:48:14:da:90:
                    bc:f0:e1:c1:a1:d5:88:10:29:f2:8c:aa:b7:5f:43:
                    39:c2:1e:3d:b3:1e:41:bf:64:e5:09:d6:45:31:d4:
                    10:ad:83:85:ba:67:75:0a:60:95:82:b7:fe:47:8c:
                    8b:fd:66:f6:ac:32:a0:61:97:c3:bd:a2:b7:18:f5:
                    01:4a:dc:4e:27:77:82:1a:18:d7:f5:77:fd:95:93:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:D0:8F:F0:7C:13:E9:25:87:BD:6F:14:FE:C3:F9:8A:88:CD:94
            X509v3 Authority Key Identifier:
                keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:40:06:26:bf:53:c9:71:82:74:06:38:2a:8d:bb:c1:56:
         5d:00:50:cd:dd:3b:1f:97:30:15:4c:1d:53:0f:91:b6:53:41:
         e4:33:58:65:11:96:a8:47:06:21:61:8b:8e:33:bf:45:3c:88:
         3a:cb:b4:35:80:ea:77:12:db:c4:60:ba:b7:8f:f8:3c:fe:55:
         f9:82:de:e6:ac:60:d4:90:c5:64:87:ee:7d:36:86:5b:32:ea:
         17:a8:45:96:a9:73:74:9e:78:b3:d4:2b:92:1d:a2:5c:6d:db:
         1e:c3:4e:09:8a:d8:a8:6d:b0:57:5a:c8:63:de:e7:64:38:c2:
         68:cf:bb:f9:31:c6:19:f6:e0:49:4c:82:87:3d:c1:08:a2:a0:
         23:44:f3:d5:b4:71:31:4b:47:20:e5:11:16:fc:09:31:ae:10:
         a9:c2:16:d7:d9:ab:ac:a4:0c:c3:1c:f3:87:ff:fa:13:e3:65:
         cc:a5:4a:24:25:ec:25:3d:ee:42:90:68:42:5e:53:64:4d:d4:
         f2:22:96:13:d6:84:a4:be:ae:65:e4:28:35:38:70:44:16:7d:
         38:c7:e4:2d:06:49:39:15:15:8d:d7:d5:a6:86:02:36:74:97:
         25:f2:b2:66:fe:13:4b:99:f6:9d:d0:44:b3:96:1f:46:e0:be:
         d2:2b:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----