Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File:                     q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier:          EcT2ceo57/p+1NvnivKdx6E3J9dyj8TKAaopXpLFIwo=
Subject key identifier:   66:CA:8D:2E:C2:39:31:8D:17:D8:25:F9:1B:A2:50:CB:77:67:89:B9
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer:       /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial:       01962ECF76812D1ABFB7E1E5EF5AA406EEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number:          1196
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
                          2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: 5zHpH+/wcQt/Qc+mWz5Lx/A/LSuePgQwaKdZCJIDF7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:76:81:2d:1a:bf:b7:e1:e5:ef:5a:a4:06:ee:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=66ca8d2ec239318d17d825f91ba250cb776789b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:07:a9:45:d5:b0:7d:77:46:53:47:b1:86:
                    5a:0b:ee:15:71:66:d3:bb:07:34:c1:82:da:b2:6a:
                    92:63:75:8b:53:d1:21:83:86:50:53:3e:cb:73:05:
                    a8:be:52:10:4e:5a:53:8a:7d:df:bd:6f:83:1d:8e:
                    f9:26:a6:5e:30:d6:4d:cf:85:f9:a2:55:c0:35:68:
                    a3:b4:0e:c8:f1:a6:ab:9e:fd:f1:ee:b7:f5:2e:b7:
                    1f:ca:c2:bd:27:55:6e:f9:d6:d6:cf:98:73:ec:e5:
                    06:ed:aa:dc:fc:65:27:d2:9b:0f:e5:23:01:93:4d:
                    71:2f:fa:8b:a0:8d:97:61:c7:cb:89:5b:cc:58:e7:
                    5c:4a:47:94:42:27:97:a1:42:de:85:da:bb:7f:7a:
                    93:d5:73:a3:f3:d2:3f:55:a4:d5:3b:c3:64:02:06:
                    49:19:f7:56:1f:69:02:65:4a:9a:76:c6:c8:70:9e:
                    84:34:c2:80:79:87:1e:cb:f5:63:76:95:e9:d6:39:
                    84:77:80:b8:70:99:f0:0f:f3:f4:79:b3:e0:da:f6:
                    bf:e1:7d:66:bb:a9:d0:49:d9:41:c4:66:b0:67:43:
                    20:2c:55:de:c7:c5:98:66:b2:f9:03:a0:71:d0:13:
                    d9:32:e1:60:fe:f5:7b:81:ad:32:80:d9:f2:b5:da:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:8D:2E:C2:39:31:8D:17:D8:25:F9:1B:A2:50:CB:77:67:89:B9
            X509v3 Authority Key Identifier:
                keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a1:fb:08:bb:e7:76:a0:60:1a:9c:c8:88:f5:1f:1a:c4:ff:
         b5:84:39:e7:32:18:40:cf:54:d1:89:28:6f:a7:37:68:46:b6:
         1d:86:12:99:dd:00:41:9d:4f:a9:21:b5:a9:07:5e:ae:b6:c8:
         4f:40:a1:d1:e6:e3:7a:95:0c:de:22:4b:28:41:28:28:5f:e2:
         a2:5b:eb:50:ca:ec:2d:64:f5:32:0b:5e:4b:bf:d3:94:5d:7c:
         ef:7c:af:21:9a:dd:6e:a7:12:e4:79:8a:cf:98:93:c1:cc:90:
         07:89:1b:2a:f3:cf:10:94:62:1f:b2:70:e3:56:87:f9:b3:7e:
         36:1f:01:ce:e9:d0:88:5d:22:17:07:c9:84:f3:c2:8b:53:e7:
         98:5a:08:c7:33:2a:76:f3:c0:c7:6e:d3:4c:3d:0e:05:a5:62:
         17:c3:a0:f1:26:f7:50:dc:78:53:6e:99:e7:31:13:0c:5f:a8:
         d7:6a:b0:88:f8:8d:73:01:54:e2:60:27:53:11:c2:15:11:ec:
         d7:6a:c3:29:28:ec:5a:ad:8a:42:a3:66:a4:9f:7a:e3:97:bc:
         e5:b7:84:c7:21:8c:d2:d3:12:49:6d:d1:8c:c9:ab:8f:f1:26:
         27:0d:22:ec:7d:91:74:d2:97:b8:99:79:9c:12:d3:fa:43:23:
         f9:79:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----