Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File:                     Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier:          bcIz9c7v6RK7GBCNxRURIYyV3WRof9Z6GmSe2vqWUz0=
Subject key identifier:   8D:92:D3:50:3C:72:FE:EE:DE:DA:B3:19:19:6B:60:F8:9D:18:F2:14
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer:       /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial:       01962DF4135A9330138A81ECEACCD2200598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number:          0E12
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
                          2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: 0NuJruq1wpuJm/nkXhMqg8bHfMfaQ57U1N/6jE1teUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:13:5a:93:30:13:8a:81:ec:ea:cc:d2:20:05:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=8d92d3503c72feeededab319196b60f89d18f214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:a6:f7:77:31:c9:3c:ca:35:fc:f7:6f:25:
                    22:1e:9e:3c:a6:99:3b:53:52:e2:a0:34:0b:bc:e0:
                    5e:34:bd:d5:8d:92:aa:20:1a:c8:28:bc:f1:9a:ac:
                    85:46:82:0f:6c:50:54:a9:c0:b8:0e:0b:05:5e:12:
                    d7:18:6c:18:c9:39:83:7a:9f:24:dc:aa:6b:e6:55:
                    4d:07:ca:c4:cc:40:75:8f:df:27:20:fe:bc:61:cc:
                    80:65:97:fc:3b:a9:26:63:9e:cc:ce:64:94:c5:f8:
                    5f:1e:31:b3:a2:a5:ca:fd:c1:ef:ad:95:ff:52:1a:
                    68:3a:f6:00:64:45:84:4e:9b:f7:f8:8b:7b:2c:f1:
                    b0:42:09:ee:a1:f9:1b:61:83:5c:c1:20:26:30:0b:
                    72:f4:62:80:25:07:d2:4a:21:b0:cf:00:79:55:d9:
                    ae:e1:3b:fa:bd:23:f1:f3:bd:b2:55:9e:f6:eb:80:
                    7d:b2:0a:7c:3b:55:53:5b:47:87:10:10:ec:ef:9c:
                    21:48:8d:ad:c4:64:79:80:ad:7a:96:bb:ec:e1:f5:
                    d2:fa:35:64:60:85:43:d6:b7:12:f1:fe:7a:97:fb:
                    1b:b5:a7:91:cb:75:19:21:be:a0:43:fb:0e:49:39:
                    d1:dd:64:54:82:c5:77:52:94:64:7b:0a:51:3f:b3:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:92:D3:50:3C:72:FE:EE:DE:DA:B3:19:19:6B:60:F8:9D:18:F2:14
            X509v3 Authority Key Identifier:
                keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:15:0f:46:b9:96:db:19:07:85:7a:c6:6a:b6:e7:5e:40:
         0c:50:42:5e:8b:08:36:f0:67:83:69:03:ca:e2:60:58:82:ee:
         7d:c9:b9:53:8f:1f:9d:52:f4:c2:5d:6f:97:1e:8a:ed:a6:cb:
         fe:05:70:e5:af:a6:b4:16:29:6b:bd:e9:30:59:58:ee:84:ab:
         51:f7:f1:25:e3:95:72:47:1b:c7:fa:1a:30:ba:db:22:b3:7b:
         51:d9:09:21:39:55:1a:50:14:67:77:02:81:b4:6a:ac:f9:98:
         63:84:30:db:29:6e:3f:92:1a:cc:2b:1a:c7:eb:40:35:5b:1f:
         ca:7d:af:8f:a2:67:bb:c9:1f:22:bf:eb:09:3d:65:ca:f2:23:
         66:98:1f:cc:63:4b:d0:39:6b:d4:1e:0f:b4:8d:14:08:f3:7e:
         64:a3:ad:ad:40:24:0c:de:73:e9:eb:2e:75:a5:11:bb:5e:a1:
         7c:4a:b6:30:3b:55:6f:b1:cf:04:22:54:7f:fe:2b:0a:2a:a4:
         0a:10:7f:d7:f0:d5:e1:e2:9d:d7:0e:b2:50:06:43:0b:c8:52:
         0f:77:f1:e4:60:2f:ef:d0:d3:2b:00:8d:00:20:c4:c1:93:e6:
         4f:cb:c2:1a:25:94:f4:8d:cf:d9:e8:14:e6:9c:cd:f1:62:82:
         c9:6c:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----