Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          +VUv7U7tdy0vDZQVKTFiVPHhrkFKBsbK3/calvoByYw=
Subject key identifier:   44:E4:F7:35:D4:03:43:D4:3B:64:E4:55:D4:B7:6D:B8:E7:36:CE:11
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       01962ECFCF00C8439D61BDC9031C417CFBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          1219
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: tE/Ydn7dl68/R6rlf+ZVDaksJxcUNg8m2hdqolkDP7g=)
                          2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
                          3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
                          4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:00:c8:43:9d:61:bd:c9:03:1c:41:7c:fb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=44e4f735d40343d43b64e455d4b76db8e736ce11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:19:dc:b7:46:e3:fc:b5:ea:ff:1b:66:f6:
                    5c:b2:85:97:b2:fb:6e:a8:57:5b:54:88:bf:03:7f:
                    ea:8c:8f:7b:ba:0e:de:27:0c:d1:25:db:a6:69:9d:
                    c0:c7:e3:3b:5a:cf:6f:53:af:5b:6b:81:80:01:3c:
                    99:39:e8:58:31:19:4a:66:69:ca:74:fe:05:1f:1c:
                    6c:0a:c7:3a:0e:9f:16:e1:62:c1:3f:56:5f:93:66:
                    22:5c:7c:26:0f:6c:25:bf:fa:6a:e7:7e:cb:1d:b8:
                    7a:c5:cc:ad:47:be:04:91:6f:30:ea:52:84:45:08:
                    a3:f6:7b:3f:3c:7a:f9:bd:3c:3e:fa:e5:7b:f6:48:
                    fd:e4:c1:ab:a9:55:47:21:7e:b5:57:c9:be:ae:74:
                    5e:3c:a7:90:90:e0:d9:49:3e:54:d6:1e:4e:c0:07:
                    33:20:69:3e:63:b8:e0:a7:6e:e8:f5:39:48:a2:81:
                    57:10:1b:f6:1c:da:bc:32:bd:06:d5:b8:7d:09:5e:
                    92:c5:86:f1:df:58:4d:3d:9a:e0:e3:36:c8:5b:cf:
                    07:b0:7d:8d:bb:b7:ae:3c:db:33:90:f8:15:3c:5d:
                    46:36:a7:97:cc:84:13:e4:1d:fd:45:16:c0:81:95:
                    44:35:5d:99:2d:3c:4d:11:6f:8c:bd:9e:2b:08:d1:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E4:F7:35:D4:03:43:D4:3B:64:E4:55:D4:B7:6D:B8:E7:36:CE:11
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:42:71:b9:ea:a6:50:f6:88:51:96:67:91:e2:4c:dd:42:74:
         ac:09:f6:67:4e:5e:6a:a3:f9:99:66:bc:1b:c0:12:fd:8c:e5:
         17:5c:8f:b2:db:e1:f7:89:59:4e:fd:81:64:2f:a3:55:01:f7:
         c3:f9:ba:f4:49:92:43:c2:25:f8:39:6e:95:35:b3:a0:91:2b:
         fb:01:2e:e4:01:5d:92:cd:01:79:3c:81:e4:b2:0d:97:2e:07:
         c8:d9:97:53:67:bc:10:20:92:c7:06:b3:ca:da:02:ac:d3:6f:
         1a:a0:db:75:44:1b:23:34:12:ad:eb:63:6f:b7:78:f0:10:c0:
         c4:d4:9d:41:be:7e:0e:48:0c:91:fc:9f:cd:d1:48:4e:35:fb:
         50:51:75:c0:a3:d7:00:74:3c:df:a4:6d:4a:69:fc:1e:14:ac:
         ff:32:49:b9:bb:d4:14:d8:f5:d3:cf:21:95:1a:be:d7:14:4f:
         84:82:1d:e2:19:a1:cd:b8:35:d9:2a:e5:8d:66:a6:59:e6:09:
         5e:56:5d:db:bb:0a:be:f2:21:d9:27:f1:d9:b0:a6:bf:a0:9e:
         c3:59:bd:1d:0c:5b:d3:ec:57:d5:e6:f7:7c:3a:fd:73:41:2c:
         c6:17:72:54:c7:80:3b:57:40:b5:d0:60:cb:09:54:0a:4b:65:
         e9:46:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----