Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File:                     Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier:          z0YAwUv168vYyTXTBEyabMmluvbCQsQOgCeoLv8+DXY=
Subject key identifier:   B8:E1:13:DC:CE:6A:C8:10:A0:B9:C4:BB:97:14:25:10:51:C9:7F:AD
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer:       /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial:       01962E2B12666FCE350AED45157E79C950ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: E8mHOdPX35hoRe7iIATjavUmi3TX4s7K9wGy3FyJMqM=)
                          2: tBcUVtef6rZ0kSSzgGFNQ0aGmXk.roa (hash: axGcXX34atfoTeccVW4HcK4Aoj164U97BqMvxhWQBsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:66:6f:ce:35:0a:ed:45:15:7e:79:c9:50:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=b8e113dcce6ac810a0b9c4bb9714251051c97fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:71:32:0f:39:3c:4c:ad:17:a2:68:b8:e0:
                    53:a2:2c:ea:ed:2c:31:73:7e:39:54:6b:50:20:16:
                    10:ce:69:74:91:c4:87:81:89:7f:fe:80:11:34:02:
                    50:94:d7:b1:dd:d4:ef:17:58:da:70:f0:c0:32:54:
                    52:f6:8e:b5:a4:82:8d:42:fd:a8:5f:59:a3:52:00:
                    05:3c:c6:a9:fc:c5:ec:b8:90:a0:68:e4:c9:22:ab:
                    5b:b2:7c:07:f2:1c:3b:f4:84:f8:56:1f:b9:66:4e:
                    46:d5:5d:98:58:2e:d6:15:2d:71:b2:51:d9:f9:b6:
                    7b:1c:37:6a:12:a0:98:18:59:01:2f:e7:f8:07:c4:
                    0d:34:1e:6d:f2:8d:c0:81:bd:fc:be:72:1e:f2:70:
                    7a:ad:8f:a3:09:39:f4:79:5c:21:7b:77:25:67:cb:
                    f1:43:7b:11:8f:aa:36:3a:ae:f3:1b:3e:92:e1:0c:
                    b6:e5:5b:d0:5e:7d:01:2e:54:39:7d:77:ab:50:64:
                    6c:ff:a5:04:eb:8b:66:e5:c2:3e:9e:82:70:cd:86:
                    50:94:3a:34:74:3f:7f:08:bf:d7:0d:16:e6:cc:e9:
                    60:56:5a:05:23:ac:fe:83:82:f3:31:88:96:b4:10:
                    ae:d1:9e:fb:36:0f:f8:20:8f:4e:db:ef:cd:67:b5:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E1:13:DC:CE:6A:C8:10:A0:B9:C4:BB:97:14:25:10:51:C9:7F:AD
            X509v3 Authority Key Identifier:
                keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3e:3c:f4:5f:c3:38:97:d5:5f:c4:3a:70:c7:52:a1:36:03:
         d8:26:c8:9a:af:82:90:b1:3b:84:91:4a:27:31:fc:f4:53:a9:
         ce:25:2b:a9:ce:d2:72:a9:7e:8a:11:78:b2:4d:7f:2c:1e:1c:
         63:39:6f:e3:b5:d7:3a:83:48:07:fc:c7:8f:ea:b6:12:c6:6d:
         4f:f5:f2:ef:c4:02:9a:1c:5a:ff:c3:ad:48:00:ba:3e:14:7f:
         e6:83:84:70:39:2a:50:94:b6:1d:49:91:e6:d1:fe:a7:a9:92:
         68:81:ee:07:94:11:65:4b:4a:43:8d:f2:bc:34:45:83:dd:8c:
         43:59:b9:6e:d3:83:be:7b:57:91:e3:a2:5f:db:73:26:cb:88:
         8a:39:78:33:b3:e3:0d:4a:47:e8:a2:38:a4:ab:e6:cb:ed:88:
         c8:b9:84:6e:8a:09:78:38:7d:5d:4c:d2:82:59:48:31:3e:c9:
         b4:26:5c:4f:62:cc:5d:0f:af:1c:e2:55:b5:a7:4e:29:5e:b2:
         53:89:b3:31:9d:7e:d4:8f:8b:2c:58:b3:c9:27:76:07:00:41:
         02:d6:7c:02:2a:86:1a:b2:cc:7e:58:8e:00:5d:1b:6b:a2:c9:
         32:37:73:b7:a8:83:88:f3:0d:11:7e:26:a8:af:62:75:d1:6b:
         ca:bc:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----