Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          5BJDpepZcO8O8LpR4YwyfOYBuj6yFEUXyVPUj7+LimQ=
Subject key identifier:   A9:9A:3C:3D:98:B2:34:39:0C:31:FB:9A:7D:DE:07:5C:DF:9F:B4:BD
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       01962F74C0CCA0B5EF30AB233A261E850FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: /QnPUcg6rtVYZZp9vJG1HNL+gOBfGjQ/GepIsKWQ4S4=)
                          2: zCcp7j-FTR7h6zyRr__6kmhwg_M.roa (hash: ep4Wt4XOrawaaEnM0c8/+z8Ud6DA2WUnVWDUZ1tn3mc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:cc:a0:b5:ef:30:ab:23:3a:26:1e:85:0f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=a99a3c3d98b234390c31fb9a7dde075cdf9fb4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:ea:79:03:43:56:e4:37:a3:85:a1:d2:85:
                    83:e8:e9:e0:e3:90:25:02:e8:81:90:6c:3b:2d:c1:
                    1f:fa:c5:6b:25:25:d9:bc:16:e4:d9:55:ab:03:ad:
                    b6:d4:78:b9:8b:85:3b:73:f0:e0:3b:e4:80:8e:be:
                    69:2a:c0:60:58:97:e0:a1:63:6b:1f:2d:62:25:16:
                    d3:10:ee:2d:68:64:1a:f8:b3:f2:9f:f2:ff:b8:0c:
                    14:3b:2f:32:f9:32:75:27:e5:a9:ac:bc:c5:51:37:
                    56:45:cf:20:33:aa:e3:1d:0f:59:7f:f5:e3:fe:4b:
                    78:b7:2c:2b:c1:8d:39:a5:da:f0:fa:27:7d:99:cd:
                    cd:b9:df:37:72:4c:00:cd:3c:6f:db:0d:01:15:4f:
                    a9:03:ad:f5:61:d7:da:a7:15:6e:f7:2e:c4:10:13:
                    19:6e:d4:09:e1:da:81:16:69:8a:b4:86:c8:fd:98:
                    0e:e9:d2:9e:d7:c6:d9:0f:94:97:6e:6c:8a:97:71:
                    4f:69:44:00:aa:d5:04:73:16:86:59:1e:6c:cb:23:
                    93:ad:73:68:62:a1:7f:45:bb:a1:a5:68:3a:02:d6:
                    fb:de:ad:00:ee:f4:57:e1:f7:e9:91:31:07:01:98:
                    b2:05:14:ce:36:6a:e2:6e:47:6c:34:e9:9d:60:47:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:3C:3D:98:B2:34:39:0C:31:FB:9A:7D:DE:07:5C:DF:9F:B4:BD
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:84:46:bb:70:23:2e:57:b3:fc:87:c2:43:de:70:fb:52:ed:
         ce:6c:ab:29:7f:76:5a:3a:1e:10:d7:44:3a:01:36:96:96:af:
         35:35:3a:41:5c:cb:f5:71:b8:06:c7:52:2a:f0:8a:64:01:05:
         c5:f8:e2:2a:88:dc:6c:66:46:db:f1:b4:d1:4e:d9:b1:20:19:
         57:2e:08:1a:3a:42:ee:05:fb:4f:86:47:2c:3d:38:8a:85:44:
         a9:b3:2e:a7:7a:ed:a4:21:b1:83:14:b9:2f:87:1d:3d:74:cd:
         38:61:b2:14:cf:1d:6e:cc:34:f9:67:d7:99:fa:59:c3:0c:6e:
         06:22:83:a8:d0:4b:72:16:3a:2b:a7:63:b9:f8:bc:ac:72:1f:
         fc:85:7c:4b:54:dc:5b:e4:77:61:af:22:d7:eb:2f:bd:1a:4f:
         74:97:c2:3a:46:e1:df:fb:aa:71:81:60:59:34:18:22:85:5b:
         ce:56:9d:3b:39:cd:31:b2:2d:95:d1:6c:50:fe:f3:72:f4:36:
         d5:dc:c8:68:5c:b8:86:5a:81:98:a5:01:f7:22:44:8f:92:5f:
         3a:5b:0a:5b:65:cb:d3:c9:00:3f:a1:47:dc:a0:3b:38:72:36:
         71:01:5f:59:39:d4:e2:20:f2:b4:f0:94:6d:73:40:9a:7f:a8:
         96:8b:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----