Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File:                     qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier:          2wfg5yGlptGCmaNNMcXRKs/nb7iCc42kYAuYtOfPtT0=
Subject key identifier:   B4:7E:AF:81:6A:14:C0:4B:02:67:85:2B:CA:FD:6C:14:37:D8:C4:40
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer:       /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial:       01962F066F07E2D0FB2AA8AF37224A76CBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
                          2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
                          3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: 8mZM4TuLYEflhybgN9g7xHCBbZjOJwNYin2BPPfHZhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:07:e2:d0:fb:2a:a8:af:37:22:4a:76:cb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=b47eaf816a14c04b0267852bcafd6c1437d8c440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:3b:1a:65:61:39:b9:56:38:05:03:c1:87:
                    c5:6d:d0:2d:ff:15:e6:45:ff:a1:17:75:96:2e:96:
                    f3:1a:4f:b3:ee:85:c1:d3:f9:be:31:e4:ff:c1:d3:
                    2f:63:75:ae:74:26:4b:1e:55:9b:c9:89:70:de:d5:
                    f9:40:1a:d4:52:34:fa:d6:dd:36:ee:af:30:50:25:
                    34:1a:45:69:ba:99:6c:9c:1e:a0:de:41:de:2c:8a:
                    41:1f:e6:bb:3e:3d:7e:e3:87:ce:31:94:7d:f8:e4:
                    3a:b6:2e:63:ca:eb:44:90:40:2b:f9:51:ff:76:cd:
                    a7:08:ab:ba:ea:39:53:cd:ba:2b:e9:2a:da:9e:41:
                    ff:55:52:a6:d8:60:1f:e7:9b:9e:f7:67:d6:f3:f7:
                    84:c0:c5:c3:04:79:a0:9d:96:a7:1a:5a:49:a2:1f:
                    ad:bc:c0:a2:c4:9e:c9:f3:3d:6a:5f:46:7c:6e:77:
                    62:80:3f:40:cf:c9:50:04:f8:b7:33:b8:78:c9:4f:
                    a0:49:8a:9f:04:c7:cb:cd:ab:d1:4e:4a:79:8d:d2:
                    81:e8:9a:25:c5:77:c3:2f:bc:71:9d:c4:b0:72:71:
                    d8:9c:6d:0f:92:b9:44:4e:e8:50:f9:9a:15:b2:62:
                    1e:f8:f0:86:7a:fb:b7:ec:65:19:36:bf:82:ba:82:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7E:AF:81:6A:14:C0:4B:02:67:85:2B:CA:FD:6C:14:37:D8:C4:40
            X509v3 Authority Key Identifier:
                keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:55:48:55:91:60:1f:54:49:ce:66:c5:d5:5c:20:2d:59:
         c7:d8:98:38:5a:06:a4:95:d6:4f:08:9d:8f:b9:80:a2:0d:7d:
         52:5e:02:c2:04:1d:45:e1:45:06:9d:cc:25:01:96:06:1e:c4:
         47:6f:7a:b3:07:12:9a:71:60:2b:ef:94:43:ce:0b:ac:db:cb:
         50:f5:d3:26:f8:51:97:0b:9b:e3:bc:73:c9:49:40:7e:cc:8d:
         57:71:e1:04:b1:8a:88:4d:b9:bc:56:c4:3b:73:90:8b:5c:62:
         d4:4b:8d:25:11:db:b7:9f:5b:3c:8a:b9:8b:19:c9:5b:f3:e2:
         6d:bf:70:a7:a5:0d:b0:b6:77:2a:60:62:81:7b:45:0f:1a:6f:
         de:19:5c:d7:50:69:09:f8:d1:f8:2b:29:99:7c:27:e4:ca:3d:
         1f:de:ad:f8:7a:5a:9b:97:b1:ce:3d:ba:89:75:c9:8b:48:b8:
         6d:f8:87:54:01:e4:92:6b:7d:53:f6:aa:4f:bf:be:96:94:8f:
         c0:b5:2e:20:ad:a4:57:a7:03:ec:2d:5d:ac:b9:ae:2f:f4:e9:
         49:06:fa:75:25:9a:6f:2f:89:19:9b:e8:bd:06:44:d1:23:f7:
         97:0a:e5:0f:8f:02:07:33:ef:0b:a1:90:8d:f1:4f:31:bb:13:
         e7:40:eb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----