Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          +eXNPbzv+bf+p3XNhX68+4GifOvZaBkSIeewpILrxe0=
Subject key identifier:   5A:1B:BD:C2:26:C5:E7:CA:94:EB:BD:AC:3A:0F:89:13:7C:9E:5F:70
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       01962F069A1386A9D19C82E7A58149A4E37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          054B
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: uk/mxvabyN0hpNhITzbhgc2NyxMTrkMq++GuGBBJuyg=)
                          2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9a:13:86:a9:d1:9c:82:e7:a5:81:49:a4:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=5a1bbdc226c5e7ca94ebbdac3a0f89137c9e5f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:fe:57:15:ed:29:2b:38:d0:ea:a1:3c:1c:
                    63:16:1c:48:bb:da:94:2b:da:13:8a:d5:0e:0f:70:
                    1a:9a:92:03:26:f7:19:9c:7f:90:03:c0:ed:cf:d1:
                    ff:b2:df:ed:a3:c7:93:b8:cf:29:9b:c4:90:a6:7b:
                    db:35:af:67:17:3b:5a:67:6d:18:bf:92:cf:2f:a5:
                    c2:76:80:6f:63:80:3a:ca:5c:a4:80:7c:ab:bb:55:
                    b5:fd:98:3a:d9:ba:b1:5d:57:c4:4f:f3:32:9a:a0:
                    a3:d7:d4:ff:7c:eb:a5:31:99:12:c1:5a:d0:99:2d:
                    a2:56:2e:95:a9:ae:4b:aa:d2:6c:3b:39:18:26:c4:
                    4e:d6:f8:bc:4e:97:60:bd:c3:4f:46:66:61:17:68:
                    40:67:b8:6b:9e:98:1c:27:10:94:67:1d:48:a6:1a:
                    b9:9c:3d:ca:1b:4c:29:65:52:aa:6e:71:2b:5a:32:
                    e3:9b:b4:0d:00:f0:ae:88:a9:19:ea:4d:52:5c:b0:
                    47:a6:f1:bb:44:ae:a0:4c:96:25:81:a1:a3:16:69:
                    45:8b:fd:43:d9:85:87:b4:60:d8:26:f4:a9:2b:14:
                    87:a2:0f:86:a3:ef:b1:69:6f:b1:dd:aa:d1:0f:91:
                    92:6e:82:eb:c2:a3:86:0d:d3:39:d9:d7:f6:db:cf:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:BD:C2:26:C5:E7:CA:94:EB:BD:AC:3A:0F:89:13:7C:9E:5F:70
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:0a:f0:a6:81:bb:72:70:04:3c:62:d3:a2:75:14:89:5d:
         2f:bd:e9:4c:5e:ce:8d:ac:9f:72:19:32:5d:17:97:67:8d:21:
         bf:af:10:39:86:a1:f5:c8:8c:4c:68:25:fe:8c:2d:90:6b:ea:
         dc:41:9a:26:70:e3:98:b5:52:cd:b1:7d:13:ac:d8:de:cb:ac:
         6a:4a:b3:71:44:8d:1b:2d:d9:d6:5b:f5:15:e1:7d:9b:97:b9:
         d7:e4:10:fc:cf:27:8a:fd:01:49:3b:ec:3a:25:29:87:6a:1b:
         7b:b4:3b:7d:5e:4d:98:d3:5e:11:f0:61:db:22:0f:27:fa:4a:
         9c:fa:d2:92:2e:05:04:5d:27:e3:c7:08:a3:bf:68:aa:86:1b:
         97:7a:48:1b:ac:51:c3:1c:ec:78:b5:de:55:b7:7a:75:5b:f0:
         7c:8f:c4:54:e8:cb:69:d8:de:f8:67:bd:9c:12:c5:46:d7:39:
         ef:5c:7b:2a:e0:bb:66:67:64:b2:7d:eb:89:0e:ac:77:9c:4a:
         e2:f4:e4:1a:91:54:b0:d4:01:5c:8a:db:df:64:c1:69:36:51:
         f7:89:71:de:92:a4:d6:03:d4:ad:a3:4c:ef:85:7b:9e:27:30:
         21:6a:08:1b:b0:4c:9f:9b:fc:8d:9b:30:95:6b:c5:fa:8e:61:
         4f:b1:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----