Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
File:                     fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json)
Hash identifier:          ZLld+kmyG4ppVC+SvwGhyKArAXq6dYSb+esI73CoSMk=
Subject key identifier:   30:B0:54:5E:30:1E:90:9B:CA:7E:C5:0B:5E:55:DB:D7:79:6D:40:F3
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Certificate issuer:       /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial:       01962E9863D9E7C90D6E93DE3B3D0C637906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=)
                          2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=)
                          3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=)
                          4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=)
                          5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=)
                          6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=)
                          7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=)
                          8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=)
                          9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: xPQAhwAV6qslWTRZSWRIeXD5J+EbahSyC45+PlAc0SU=)
                          10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=)
                          11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:63:d9:e7:c9:0d:6e:93:de:3b:3d:0c:63:79:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=30b0545e301e909bca7ec50b5e55dbd7796d40f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:d7:de:e6:61:73:93:9b:56:16:0e:64:fa:
                    87:df:d0:3b:17:69:d0:4a:9d:55:88:00:d7:b0:d9:
                    e4:ff:c6:9c:09:04:73:41:2d:ee:4d:ed:b5:09:ad:
                    19:ab:9c:b3:7d:19:71:2d:5f:8b:16:83:67:d1:4a:
                    b6:4b:ae:2d:98:7d:de:e3:cc:b3:c4:14:58:8c:7c:
                    5f:18:12:6e:ae:c2:b8:5d:7f:7a:93:58:37:b0:3f:
                    f8:08:8c:08:ae:34:83:5b:cb:d1:25:30:66:23:0c:
                    a7:d6:49:64:d7:73:61:53:f5:0e:f1:b2:75:fe:0c:
                    64:7e:6d:42:63:3e:d8:dd:c2:5d:53:21:89:7d:69:
                    ab:75:86:d8:e8:48:41:98:d9:83:bd:c8:e0:67:71:
                    fd:00:32:eb:93:54:19:12:e3:12:3f:a7:29:6f:1c:
                    0c:84:a3:14:ae:75:c2:e4:f6:b3:1a:de:81:f9:7e:
                    39:5c:6e:d7:4b:21:91:ac:97:95:fb:2f:9a:bc:a5:
                    3b:18:02:40:3e:3d:a4:c6:f9:9e:a6:e9:71:ad:c3:
                    16:ad:c3:e2:bd:33:0e:84:c1:73:13:8f:3d:45:5d:
                    05:31:34:7a:39:92:63:8e:02:c1:d4:7a:02:ee:51:
                    81:b5:5d:b6:83:c0:16:66:ff:86:a6:11:e3:d1:c7:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:54:5E:30:1E:90:9B:CA:7E:C5:0B:5E:55:DB:D7:79:6D:40:F3
            X509v3 Authority Key Identifier:
                keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:08:7c:66:a7:ac:88:91:f6:fc:a5:d6:7d:cc:cc:cf:4c:
         a7:1a:6a:dc:ed:0e:2c:ca:38:e3:67:74:08:8d:5b:62:72:82:
         b9:50:e1:f2:01:6e:3c:a3:7c:8e:e3:de:a7:67:f3:20:3c:69:
         b5:95:58:54:8d:b0:ed:83:08:47:ec:a0:e8:2b:d6:71:cf:a4:
         64:47:3c:47:e6:99:a3:1c:83:c4:06:a7:1c:2c:f9:0e:d1:aa:
         98:3c:70:e1:88:d6:7a:28:d4:1e:30:3e:0f:89:fe:65:6d:e8:
         29:6f:a5:c7:20:3a:1f:a1:ed:ec:cf:67:5d:4c:e9:2c:ed:41:
         55:ca:64:62:fe:5d:0f:af:7e:ca:2e:d1:01:ab:cc:14:90:c3:
         9d:30:ec:60:a1:bb:de:e2:da:f3:e8:ae:fa:dc:00:a6:43:39:
         28:f8:32:71:a4:ad:7a:ed:85:81:48:42:4e:3d:0a:c1:ce:56:
         b5:0e:c7:1b:16:d0:7b:72:95:c1:cc:05:5a:3c:4f:a6:1e:b0:
         9e:cd:d6:ba:f0:57:cc:94:e1:f1:ac:39:fa:ca:fd:55:8b:bb:
         95:d8:51:4c:64:20:34:dc:eb:99:d9:f5:9a:83:aa:0e:20:d9:
         c7:dd:8d:a5:da:d8:8e:5f:8d:9d:c5:98:4e:d7:62:80:bd:d5:
         74:f0:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----