Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File:                     qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier:          UWoGl/oo5FYvP7O7G7qoU60d5HoUgBKYVXRyzXglc5g=
Subject key identifier:   0B:01:63:CB:08:39:F5:1C:9C:28:FB:98:7A:E0:FA:0C:7C:37:FB:ED
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer:       /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial:       01962F06BDFB7D6D4D80D7F411A7B9ABA488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number:          02D6
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
                          2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: YBDHCnuWtCmHBesnpFcoRjuSLLCwtSh9CC8xZc5hmB0=)
                          3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:fb:7d:6d:4d:80:d7:f4:11:a7:b9:ab:a4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=0b0163cb0839f51c9c28fb987ae0fa0c7c37fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:a8:1e:4c:c5:8c:c5:6a:a1:ca:6e:45:ab:
                    97:94:39:b8:1b:09:4d:39:ff:de:6a:5c:21:9a:c3:
                    3f:0e:13:7a:cd:d6:3c:0e:cf:8e:cb:56:77:05:40:
                    f8:73:d1:c8:ac:e0:57:55:a2:e9:cc:ba:47:af:2d:
                    85:49:56:8e:c6:13:4c:1d:19:9d:54:c0:38:76:bc:
                    c0:ee:7b:9c:c7:15:9b:39:a1:b2:cd:3c:5b:72:0c:
                    d3:cc:d2:d2:02:ee:49:4b:af:2a:33:2a:2a:f9:e0:
                    34:a9:d3:b3:38:06:c9:b0:26:71:10:b6:2e:11:63:
                    fd:52:c3:53:13:50:de:68:09:c6:ed:22:a5:36:b5:
                    16:07:b4:78:6c:f2:6a:1b:71:71:d8:3e:52:f6:b1:
                    b5:bc:73:41:30:e7:d6:e8:08:34:53:53:1f:04:81:
                    a1:0a:2c:d1:18:61:28:78:5a:d6:f5:6b:d0:9a:3a:
                    f8:e8:f2:cf:ac:c8:7b:da:11:9e:d0:71:7e:04:76:
                    14:4f:75:59:76:c4:7b:99:19:47:cb:d7:da:cd:73:
                    2f:2f:3c:b9:03:42:14:5a:16:b7:07:af:26:fd:72:
                    f8:14:59:dd:f4:3d:b3:97:1f:91:b5:0e:65:c9:c2:
                    bb:f2:6f:e6:47:dd:dd:51:d6:ab:99:d8:06:d8:1d:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:63:CB:08:39:F5:1C:9C:28:FB:98:7A:E0:FA:0C:7C:37:FB:ED
            X509v3 Authority Key Identifier:
                keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3b:b9:b0:25:ee:be:2c:cb:f3:5c:ed:8a:f9:d9:1a:31:48:
         e2:d7:bc:00:82:5a:cd:32:59:71:11:b0:16:62:cd:87:fa:52:
         db:a6:d5:19:a6:bd:41:a6:3c:f8:6e:f3:02:72:ac:c3:c2:49:
         dc:34:43:8f:e1:1e:cd:42:1a:02:6f:e5:77:22:8f:07:5d:75:
         3b:60:22:71:a2:eb:0c:15:8f:c2:2e:2e:92:ab:af:11:8c:b4:
         de:0f:c2:15:3f:fd:3b:c2:72:b3:ca:c5:a9:2c:8a:ef:e4:4d:
         df:f6:25:f1:01:f5:31:41:19:cb:59:e5:3f:41:1f:05:06:82:
         c6:b5:2a:c1:8a:c9:af:07:d8:45:dc:b8:60:d7:0f:ca:cd:f6:
         a8:c3:91:df:9a:4d:4b:78:83:13:03:76:e6:fe:f8:3a:a3:c3:
         c2:e3:3b:e8:9a:3e:5f:b5:74:e6:a4:a4:ee:f6:a7:4f:3c:54:
         cd:57:75:90:dc:0f:46:c0:31:86:49:6c:4b:62:19:ef:f9:bc:
         e6:c6:f0:35:b4:c7:a0:81:71:e7:96:44:d1:a3:03:ec:b8:9f:
         a4:ab:fe:b7:b9:ac:27:db:78:0c:a5:5d:98:9d:94:55:5c:2d:
         d8:6e:cb:50:8f:66:cf:9b:ea:39:3a:9f:68:c2:b6:b1:9e:9d:
         67:87:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----