Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          pFAoY4jZ/ZgGahrAYUZsc1YEVuhybFRtuK81eW0QkUQ=
Subject key identifier:   5A:D4:4F:EF:C4:BF:4A:01:73:2E:01:B7:2A:AA:CC:96:78:82:B7:E1
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       01962E2B10FDEC0D827A4C4D7B25590551A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
                          2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
                          3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: 6qT4TU6o1zyFff11MQwaKfZq2No5Ed6PTIra9ry5Eqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:fd:ec:0d:82:7a:4c:4d:7b:25:59:05:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=5ad44fefc4bf4a01732e01b72aaacc967882b7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:e1:27:ad:1f:73:a9:0a:d9:df:df:48:dc:
                    ec:b7:d2:c3:ca:dd:15:c7:5f:6a:e4:33:3b:14:e8:
                    96:ee:1f:0d:5f:f2:fd:c7:2e:e1:8a:72:7e:b1:41:
                    33:1b:ae:ca:85:21:96:c8:dd:9e:36:f5:4c:e9:8d:
                    8d:72:d3:c6:dc:e8:3f:27:51:b3:41:63:3f:b0:b2:
                    fb:0e:fb:da:0e:a1:a3:f9:93:d5:d6:b5:94:67:9e:
                    23:6c:70:d3:e9:fd:2f:a1:b0:93:e3:44:79:b2:df:
                    d6:44:6a:9f:1c:db:c0:fa:9c:22:70:d0:cf:20:db:
                    3e:9f:f7:45:22:cc:b3:d3:c1:c2:b8:5a:0b:b2:2b:
                    b0:db:3c:5f:0f:ef:dc:98:8e:7d:2c:5e:43:14:9d:
                    6a:d7:b2:70:53:f0:81:bb:e4:9c:b4:af:2e:93:6d:
                    cf:50:d5:99:ef:4c:37:49:62:ae:c5:41:ca:a9:c2:
                    ab:91:ed:3b:49:e2:c1:e7:78:f3:f3:69:09:f3:23:
                    0b:d7:cb:76:f3:22:7e:f8:e2:ce:a9:3a:36:17:bc:
                    95:65:b9:68:9a:57:e1:38:72:41:4c:2c:df:52:b6:
                    40:84:c0:18:44:2d:48:4c:35:22:b5:58:9a:76:bc:
                    30:59:fd:5c:6c:76:58:06:9d:e7:7e:86:c7:9e:da:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D4:4F:EF:C4:BF:4A:01:73:2E:01:B7:2A:AA:CC:96:78:82:B7:E1
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:a4:e9:8f:d2:c0:f7:ef:3e:01:0a:1b:5c:20:f2:2c:2d:
         3a:b9:6d:e7:6f:27:fd:50:bf:9c:b5:10:ac:e6:f2:2e:63:ea:
         2d:59:fb:1b:89:75:eb:2c:85:14:bc:4f:5b:c3:08:c1:f4:e3:
         76:60:84:0c:47:66:2a:40:02:89:9f:7e:12:f5:b9:f6:c8:c9:
         e1:37:7c:5a:5d:8e:d1:d6:80:b6:40:92:8e:e9:40:6a:eb:b4:
         26:81:75:e2:1f:d5:bc:4a:af:46:db:69:1a:47:a4:bd:f2:f9:
         05:66:b1:79:7b:11:89:24:31:7b:22:8e:4a:8d:03:43:80:07:
         d0:72:64:93:10:ff:b1:c2:6c:34:9c:5a:4b:34:19:68:f2:f5:
         44:5f:86:f0:63:49:24:c7:fd:d9:6a:cf:89:e9:b0:d7:b2:1f:
         29:06:88:09:35:f8:11:24:47:4f:38:92:8e:bc:82:55:b2:0e:
         c1:1e:11:1b:8e:1a:59:9d:76:f0:58:a4:39:9b:9c:dc:73:e0:
         79:1e:fc:38:53:ad:aa:09:8b:03:e9:95:91:1f:b8:47:10:3a:
         0c:8b:d4:f3:d8:32:ee:97:dc:fb:52:5f:7a:ba:44:11:50:99:
         05:23:de:e7:8a:00:85:41:df:83:97:4b:c3:ac:cd:42:f3:81:
         47:4c:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----