Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          OMgiMTe02vvZE8E+jUQTcUW/rrw3IzEA4ttCIGIkoys=
Subject key identifier:   E6:8A:62:3E:B2:EC:AE:B1:D3:DB:CE:93:CC:70:C9:53:21:CA:F6:90
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       01962E9880C2496CB5F1EFEDD39129A18207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
                          2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
                          3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
                          4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: aFiVruZUboJkJ/inqMTUIuOMxUhXCL4dw8lI+onoDJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:c2:49:6c:b5:f1:ef:ed:d3:91:29:a1:82:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=e68a623eb2ecaeb1d3dbce93cc70c95321caf690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:25:ff:5f:e8:23:e4:dd:68:b7:f1:c6:ce:
                    82:a0:4d:04:e6:83:93:30:69:35:78:30:30:37:94:
                    7f:0e:d9:65:17:cf:38:c6:de:a3:3a:76:15:c6:b3:
                    47:6e:7e:63:73:17:a1:23:fe:df:a9:10:99:59:d9:
                    18:c5:e1:fb:58:eb:92:8c:be:b0:df:d6:fb:ef:e4:
                    1a:8e:94:82:5f:21:b7:22:98:01:c9:e2:e3:df:fc:
                    1f:09:d8:1a:97:6b:f4:17:db:e4:06:8b:03:ba:00:
                    59:c6:2d:61:58:4f:e2:b3:6f:f0:91:41:eb:92:14:
                    11:9a:cc:5a:77:b4:42:fd:fb:67:81:11:16:9e:b7:
                    42:2c:8e:4d:1a:1a:3b:e4:6a:6c:e2:fd:1d:ae:94:
                    cd:49:52:47:e6:f5:84:96:8f:ba:1e:c3:06:77:5c:
                    91:c2:0f:b8:91:89:ec:1d:d9:bb:0c:47:07:4b:62:
                    ff:bd:13:81:73:f9:70:42:1d:10:50:d4:01:fa:55:
                    76:68:4d:7b:d2:95:77:12:27:67:79:bd:8f:75:a8:
                    56:c8:16:ec:84:4a:b3:4c:87:df:f2:df:71:85:4c:
                    ba:ec:31:1d:9d:91:4f:23:3d:87:e7:db:9f:49:53:
                    7c:5f:22:a0:ac:cd:71:32:6f:cb:6b:14:f2:79:c1:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:62:3E:B2:EC:AE:B1:D3:DB:CE:93:CC:70:C9:53:21:CA:F6:90
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:46:95:4f:77:63:a3:22:38:88:b4:c1:cc:fd:8c:51:7f:29:
         82:e1:74:db:e5:4b:53:1c:d0:c1:8e:6b:b7:d9:bf:8a:56:cf:
         04:03:f7:4c:66:61:5e:4a:8f:7e:85:75:2c:f0:30:b4:7d:31:
         c3:97:b9:c7:b1:d2:a8:35:0d:8e:72:4a:22:66:5b:74:65:0e:
         62:ab:2f:8d:1b:f6:d1:31:33:22:d8:fe:58:61:b9:83:11:97:
         de:b0:4d:7a:96:a0:6f:2e:d0:25:82:d8:40:3d:e3:d7:70:2e:
         2c:42:63:c8:d7:55:d3:cd:86:89:8d:4d:bb:f5:71:40:cb:09:
         d7:92:55:e4:7d:82:8b:d6:a6:f3:d1:0d:d7:7c:2f:25:9e:03:
         2a:fe:c7:6b:c4:28:57:4f:4c:8a:09:7f:14:db:6e:6e:9c:90:
         a5:d9:73:36:23:e9:4e:61:86:17:1e:d6:90:49:bf:5c:ed:d6:
         d5:98:56:12:20:b3:e5:d7:29:bd:fc:91:ec:3e:76:e3:e4:2a:
         1d:76:6b:be:ef:78:77:67:94:d6:82:70:39:a1:66:ac:db:7d:
         bf:b8:ce:e5:04:22:fe:77:f2:b2:94:d5:86:de:a7:a6:71:3a:
         7a:4a:e4:45:74:f0:d2:33:73:69:d3:b6:76:4d:8e:db:4b:d7:
         b9:b5:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----