Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          ZWqTpgBP29RhNIsWFTHxo6hCB5qs5ApAcXwN3cJJ+3A=
Subject key identifier:   3A:98:20:1A:F4:DB:85:B2:21:6D:2C:7B:C1:4C:D1:95:E9:B7:48:D6
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       01962E9994983E7DC8A153D367B14F87944F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          092D
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
                          2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: dwE6FAyibFNnsXL9lTktr/jhrXE4eXelPJYwQhjG2Rs=)
                          4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:98:3e:7d:c8:a1:53:d3:67:b1:4f:87:94:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=3a98201af4db85b2216d2c7bc14cd195e9b748d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6f:40:5d:a3:07:9b:42:5a:9e:cc:c1:ff:fa:
                    12:f7:48:24:c7:c5:2c:bc:fa:52:51:d8:7d:2e:0c:
                    db:73:9e:1a:4d:8a:ea:95:07:be:ce:9c:28:ed:4d:
                    23:e0:5a:d0:b1:d6:fe:60:30:f5:7a:38:a0:44:8f:
                    50:33:ba:39:83:9b:78:ac:a8:a1:83:3d:a4:6b:38:
                    52:49:e8:66:0c:43:03:af:40:94:b4:a7:95:27:e9:
                    a3:8a:f5:a9:57:06:a2:fb:18:0e:03:96:3f:e1:48:
                    2a:33:c8:1b:eb:78:cf:a6:68:0d:12:46:bc:bc:1f:
                    56:c8:ce:92:9c:46:b7:7a:76:83:ef:60:b5:df:26:
                    78:ee:07:05:fd:22:0f:35:e6:6a:5d:7f:1a:b5:95:
                    09:b4:45:d5:ad:5f:5f:bd:65:59:7b:11:d2:0c:ae:
                    3b:88:0d:4a:f4:f9:a4:38:c0:a9:05:9a:a5:a5:fb:
                    e9:20:59:2e:db:ae:28:91:3f:a5:8c:a4:90:07:9f:
                    ba:17:35:d8:75:5f:af:8c:cd:73:37:43:8b:8d:da:
                    ba:01:05:c7:ea:98:15:c3:11:6f:53:ee:d4:82:27:
                    3c:61:5e:e4:2a:34:83:76:95:8f:be:1a:91:6a:ad:
                    22:72:33:54:40:99:ae:a2:1b:ab:33:9a:fc:77:0b:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:20:1A:F4:DB:85:B2:21:6D:2C:7B:C1:4C:D1:95:E9:B7:48:D6
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:3d:3d:b8:9c:58:83:55:2e:ec:75:9f:3c:d0:bc:1b:08:
         03:64:33:40:78:47:41:27:d2:58:bb:3b:4e:3f:15:dd:42:90:
         ea:34:93:77:a0:78:20:73:0c:58:71:dc:3a:65:dd:d8:ec:e0:
         48:6f:a4:a8:bd:57:82:ff:9b:ab:1a:bc:a2:2d:44:1f:41:ed:
         e0:7a:13:f3:c6:0a:dc:7c:24:15:2f:57:b9:53:d3:2f:f7:04:
         25:a7:c9:5e:2d:85:6d:de:ef:07:9a:62:2e:44:be:6d:33:2e:
         1b:fe:4b:79:c5:87:d9:af:82:8f:16:9e:da:e1:31:b4:4d:ce:
         f5:6d:ba:8d:c7:8b:77:1f:fd:de:e1:70:9e:b8:08:ac:c5:02:
         d6:2e:88:dd:28:34:18:cc:f5:da:fe:dd:c8:ef:a6:e1:b9:a0:
         a2:c0:9b:9d:de:28:ef:db:83:a8:47:26:5b:9f:1f:e6:a3:fa:
         c7:62:dc:2d:4a:aa:d2:5d:71:de:88:04:bc:2f:ae:80:47:75:
         b9:60:bd:75:af:c6:3c:6c:cc:f8:c2:57:d0:bc:20:08:f4:10:
         64:67:81:73:3b:b4:57:90:e8:d8:95:fd:c6:2a:48:0b:8f:3a:
         31:4b:c3:d0:21:d2:fe:5b:5a:f3:0d:aa:f4:47:1c:d5:cc:51:
         68:df:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----