Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File:                     Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier:          otSwSJG897d1rHKeVmlXj93JDalT0yy91fIki83NeoA=
Subject key identifier:   9D:0E:F3:28:70:E2:E0:4F:C4:F8:02:50:87:95:3B:F4:DE:AA:2D:71
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer:       /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial:       01962DF3C3EA26ECEC337B40D089E70C42E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number:          0976
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: F6m4efi7J2OQqABD8wSHVyOmAeWCSr3zS62/+ry1BQ4=)
                          2: rqFwpW6hygA3WlEvpR2r2eLIqwU.roa (hash: hJKMm6stZaqD+/5F5Zq5RhHhs3I7m3K3YzZ93XXb5tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:ea:26:ec:ec:33:7b:40:d0:89:e7:0c:42:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=9d0ef32870e2e04fc4f8025087953bf4deaa2d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:50:b5:31:5c:c2:90:90:d8:aa:56:df:81:
                    0b:57:d8:0a:c5:24:d1:3c:e8:9c:3f:68:29:36:e2:
                    f3:33:d2:35:38:e2:47:38:54:0b:92:42:0c:5c:f8:
                    02:ca:f7:81:c6:f0:59:3e:59:e9:e7:a8:2d:4d:e6:
                    1b:fc:1c:7e:0c:52:b9:00:e0:b8:25:f3:8d:58:5a:
                    c4:f7:48:fd:66:de:a4:12:1b:43:a6:89:76:84:1c:
                    ea:1a:93:a1:4a:51:fd:c3:83:61:da:7c:6e:f1:a3:
                    09:0b:b2:44:6e:2f:6a:d8:a9:dd:96:70:8b:58:52:
                    3a:ad:5d:d2:88:af:64:e0:50:86:9d:0a:7e:6b:73:
                    02:44:69:b2:6d:87:0c:fb:1f:c9:0a:9f:7b:6b:93:
                    15:59:24:bb:93:35:e1:18:2b:cd:42:11:95:e4:56:
                    20:86:16:09:29:c9:67:1b:38:7e:19:5d:e1:47:92:
                    26:39:14:27:db:70:e2:96:0a:8b:58:6b:6d:e3:a5:
                    a8:da:45:f8:68:60:ab:c9:c5:65:72:9c:35:c0:02:
                    8a:98:32:83:57:a7:69:ab:09:82:48:08:11:ab:22:
                    43:36:32:8c:68:8b:f0:31:42:c2:7c:f3:31:23:b4:
                    db:ab:34:c6:b3:cf:69:93:6c:af:60:d3:8a:e4:24:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:F3:28:70:E2:E0:4F:C4:F8:02:50:87:95:3B:F4:DE:AA:2D:71
            X509v3 Authority Key Identifier:
                keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:3e:b4:ba:7b:de:cf:c0:72:c0:c2:47:c0:24:9b:1c:59:
         85:33:20:8f:13:09:94:b3:f5:b7:42:44:01:fe:11:0e:e3:5f:
         09:52:78:b0:46:8b:81:54:63:00:a9:e2:a5:98:3f:19:9f:68:
         02:75:af:ba:57:c1:c7:f8:3b:cb:bb:b0:c1:d5:72:9a:b9:53:
         e8:92:5e:d5:0c:78:9d:2e:52:c4:ca:fd:b8:08:55:e9:93:ad:
         b6:1d:81:5a:98:94:5f:b8:ff:58:c3:9a:42:b8:06:41:ce:05:
         92:8c:5c:26:7e:34:25:e0:c1:c5:94:99:6d:23:94:50:1b:5d:
         94:c8:82:3c:3b:c7:e7:fb:f1:ce:14:4d:a2:fb:f0:90:25:10:
         1a:57:06:a4:ba:35:98:a2:b1:93:c5:ad:33:54:4c:82:fd:80:
         5e:88:69:39:3c:16:6b:a7:43:e5:f3:64:23:43:71:8b:49:22:
         b2:b0:fc:75:c1:be:35:af:7e:b5:4c:1c:a1:8d:3e:63:0a:84:
         87:da:7a:dc:82:b6:0d:2a:2f:88:20:10:fe:e6:e0:4a:da:5e:
         f1:b5:54:24:54:e1:e8:b2:99:51:11:11:3d:b8:b7:f3:c1:2e:
         75:4f:03:06:9c:5a:27:9d:0a:c7:47:b8:53:91:b6:cd:e1:13:
         26:38:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----