Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File:                     q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier:          TWi8+lJ9foGvDVIMma04XxXC34Yy7/Bi/V774ybIbxk=
Subject key identifier:   54:9E:A7:33:16:90:8B:EB:F8:A0:08:62:ED:8D:B3:16:3C:7E:59:1E
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer:       /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial:       01962F7418CA43D79306FE95C8331312798C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number:          04E5
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
                          2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
                          3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
                          4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: XCoiQ4+808OYMUQTJFQVLZzy8r89Lsv9d+B7M0LFDTk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:18:ca:43:d7:93:06:fe:95:c8:33:13:12:79:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=549ea73316908bebf8a00862ed8db3163c7e591e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:30:81:44:64:0a:be:e2:16:9e:2f:7e:d7:
                    f0:23:f6:3b:3a:40:d9:e0:b7:28:a2:a2:81:e2:43:
                    2f:ad:b4:8f:82:64:52:12:da:8e:8f:11:3e:3d:39:
                    4a:c2:9c:d3:05:ed:0b:f6:e7:20:19:92:b1:96:c3:
                    79:fb:26:55:4f:e1:d7:cc:6e:38:b4:4e:88:58:26:
                    4d:dc:1b:13:c1:54:77:fe:ec:c6:f6:a8:5f:9b:b8:
                    00:8d:fc:28:1a:c7:89:05:6b:ae:ee:d7:e6:19:a6:
                    e9:28:65:b0:7e:fc:48:46:5c:5c:b7:a2:8b:8a:24:
                    61:f1:42:e7:25:e9:e6:30:9f:0b:63:ff:a0:ef:35:
                    ae:63:a0:b9:2a:2f:99:06:2d:4f:84:0a:88:60:f0:
                    7d:8d:f7:24:10:74:be:fb:99:d7:93:ad:af:12:2e:
                    fd:65:8f:89:dd:61:0e:4a:44:7b:df:c8:03:8f:f9:
                    c1:99:96:20:a0:34:3e:86:8c:42:4c:ab:4e:ee:03:
                    83:96:5d:73:ab:54:42:49:e4:af:16:d5:90:12:f4:
                    37:a1:35:d9:ac:07:a0:d6:33:bb:3a:b6:b3:ee:46:
                    76:e1:ec:4a:a9:e3:a4:c4:2f:a2:e0:71:d0:d2:c6:
                    2a:19:9f:e8:8f:68:00:7e:4e:d1:12:55:b5:f6:5a:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:A7:33:16:90:8B:EB:F8:A0:08:62:ED:8D:B3:16:3C:7E:59:1E
            X509v3 Authority Key Identifier:
                keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:54:99:6f:ba:99:54:c4:75:1a:cd:cd:90:8f:e9:a0:8a:
         40:70:59:43:19:b4:e4:88:d5:f4:36:9b:06:f1:b5:68:36:05:
         cf:e6:8c:d7:08:22:c8:99:da:c6:1a:7e:71:3d:cd:32:cb:03:
         b7:fe:7a:33:c5:18:bd:70:6c:f3:7b:fa:c0:be:2f:c3:eb:4b:
         23:33:15:3e:7d:a7:ea:b2:ec:1b:9d:19:98:9d:a2:85:28:ce:
         f8:7f:26:89:41:31:2a:96:0d:00:d4:ee:ac:68:f3:7e:fd:86:
         2c:5b:bf:fb:3e:fa:0b:d6:5f:27:9c:0f:a0:ce:b4:09:22:68:
         9d:2b:ed:cd:2b:1e:56:a7:25:c2:13:9f:9f:36:dd:a0:41:18:
         3f:de:55:11:4f:68:b2:29:dc:8b:ed:a0:30:97:51:56:7c:01:
         54:ec:26:e7:44:7b:4c:04:76:c7:ea:2f:11:b3:90:a1:54:80:
         53:90:30:c6:e6:6d:45:fe:e6:97:33:1b:d5:e8:31:4f:46:97:
         bc:f1:1b:c3:8d:b9:3c:5b:3f:17:71:7b:70:fb:74:54:2b:6b:
         c0:d9:45:87:8c:62:46:86:8a:2f:89:ec:71:12:76:0a:0c:7a:
         e3:c3:0f:e3:60:6e:74:a3:d2:65:8c:f2:0a:03:ad:f5:ab:e9:
         08:b6:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----