Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          vqMHV2ar1XWlHQynx5GMpJ2/S39TupKhPgkyccB+q8U=
Subject key identifier:   81:12:C8:B1:CB:9E:5F:00:D2:7E:18:4A:D1:0C:7C:D2:DB:5F:A2:55
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       01962E9902B472356F13EE4FD51DE9344863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: FWPWudtLCvLjkDSxuBbyxFMUK7TR7RnLll/eCWYBV18=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:b4:72:35:6f:13:ee:4f:d5:1d:e9:34:48:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=8112c8b1cb9e5f00d27e184ad10c7cd2db5fa255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:20:9f:86:5a:3d:e2:dd:73:9d:26:d0:fb:
                    05:0f:3a:e3:7e:91:bb:e4:13:f0:22:54:63:e7:60:
                    4a:b5:0c:86:11:f5:43:f7:43:2c:a3:6e:1c:29:89:
                    a3:21:9f:2d:02:e1:4d:29:9d:84:52:57:1d:93:f2:
                    1c:08:05:46:96:d1:e1:40:bb:33:da:75:5d:3e:05:
                    32:a8:a5:c9:4b:54:37:41:e3:4a:55:46:86:4d:67:
                    af:75:cb:1c:95:17:ab:a2:4a:1e:31:f8:12:04:ff:
                    f5:8c:2b:12:71:5c:d8:71:79:66:a9:78:1b:e1:bc:
                    34:e4:f7:cd:a8:fd:0e:80:5d:3a:0f:17:39:a2:be:
                    4f:b5:43:41:07:8b:db:61:37:af:36:29:28:2c:08:
                    1f:08:b1:a4:c1:a2:81:e8:44:09:02:a5:88:26:99:
                    95:b9:a5:0d:58:e8:99:48:5a:f7:16:2d:a2:74:a8:
                    86:17:26:fa:85:e6:62:db:b8:ab:2d:1a:50:6d:fa:
                    7d:f1:bf:cc:7f:17:79:16:12:21:64:ea:ae:0a:1c:
                    0b:e4:03:71:68:84:8b:5e:0c:58:9f:0d:c4:d3:8e:
                    b3:9a:aa:83:3e:0a:30:75:53:66:37:6c:fa:57:7c:
                    43:27:52:af:fb:89:5e:49:84:bf:c3:45:71:5f:64:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:C8:B1:CB:9E:5F:00:D2:7E:18:4A:D1:0C:7C:D2:DB:5F:A2:55
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:3c:77:ba:63:8a:f6:e5:8e:29:e9:4e:23:c5:38:92:c8:
         d8:c2:eb:d6:23:e9:fc:e0:20:a7:2e:92:ca:9f:a5:4d:23:31:
         86:39:0a:23:45:3f:35:fa:dd:1d:1c:34:2c:04:6d:8f:26:eb:
         d6:78:77:6a:cc:b9:17:d1:61:79:e2:be:bb:9d:d1:f2:96:d5:
         c6:8b:fa:fe:9c:29:50:36:2e:09:ee:e4:6d:be:91:a0:f2:6c:
         da:f5:68:40:a9:06:57:c0:af:e1:f8:19:69:b4:2f:9a:19:a5:
         93:30:9b:d3:6d:b2:75:f6:66:6e:ce:91:72:a0:65:8d:7b:75:
         b8:d5:6f:f2:3c:8b:b0:fb:d5:d0:c6:4f:7c:bf:a7:b6:8b:9a:
         01:a6:1c:28:43:8c:4d:d6:85:2a:d9:b1:02:9a:98:30:22:80:
         fc:fc:95:bd:2a:2a:15:f0:23:43:a4:a2:05:c8:2c:ba:d5:6f:
         79:9c:fa:72:30:24:6e:9a:d3:ab:6d:9a:21:8f:d1:b3:40:0a:
         26:e6:e1:a1:7b:8c:0f:9e:c8:a1:90:dd:0e:f8:7f:6a:90:26:
         38:5c:9e:bd:5b:1a:04:9c:20:3a:1d:bf:8a:d3:d7:2e:52:ed:
         ac:89:12:22:2f:ac:a4:b8:72:dc:dc:48:e3:6b:e0:c9:0f:3e:
         f2:9d:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----