Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File:                     fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier:          WY4SSMjos2KFL+osAexNQAD9ffnsbmHwspeT5hsfapY=
Subject key identifier:   11:75:12:18:14:D6:24:1E:33:A1:6A:57:F6:D6:4E:74:5E:A2:51:0C
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer:       /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial:       01962E620553CED3FCED71D6BDE86A8D26BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=)
                          2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=)
                          3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=)
                          4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: BmDntxiB5Q9s7OlnvEBlMEFTWJvCmPj13vHL3pjjrB4=)
                          5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=)
                          6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:05:53:ce:d3:fc:ed:71:d6:bd:e8:6a:8d:26:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=1175121814d6241e33a16a57f6d64e745ea2510c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:89:ba:d1:12:cf:00:cc:c0:bc:fe:77:fb:
                    08:ec:a0:cd:22:d2:1a:ba:c1:6b:33:09:12:8a:a3:
                    5d:25:cc:79:1b:4a:2b:9f:b8:1e:69:9c:b6:6e:90:
                    56:f7:7f:c2:62:3a:af:a2:c3:1b:88:b5:4f:e4:83:
                    2e:b1:c0:49:60:4e:6d:6c:09:41:3e:f0:98:9d:5a:
                    c9:1e:87:c5:ae:56:a9:0d:b2:df:cc:1d:af:b5:06:
                    30:f4:28:9d:e2:5e:10:d5:68:5f:b4:bb:31:67:40:
                    b3:e3:9f:93:7f:e1:e7:62:8a:67:8b:68:81:92:e6:
                    33:68:9b:d5:4d:55:f9:5d:1c:49:ab:41:40:f1:3b:
                    bd:c8:40:df:61:26:7c:62:13:fd:b1:59:cc:d7:4f:
                    10:d6:dd:9e:4e:87:0e:d8:51:a3:43:62:35:4d:f0:
                    49:ab:28:28:65:9c:75:a2:dc:4a:27:0d:e0:42:3f:
                    0a:3e:38:2c:53:4f:db:5e:ff:3a:2b:6c:3c:2c:6c:
                    75:b2:58:9f:13:8e:24:e5:7d:33:d4:f3:7e:eb:d7:
                    5e:48:82:f9:c7:b8:a8:63:31:d3:ba:b5:6e:d5:cc:
                    11:c5:8d:d8:b2:53:7e:42:bb:b0:ad:4f:2f:21:7a:
                    26:4a:b9:ed:df:09:ff:e8:88:1e:6a:ca:91:94:c2:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:12:18:14:D6:24:1E:33:A1:6A:57:F6:D6:4E:74:5E:A2:51:0C
            X509v3 Authority Key Identifier:
                keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:58:97:c8:f1:2f:44:36:4d:e3:13:ae:5e:cb:82:a8:09:
         a9:b5:54:d1:36:07:83:8f:7d:5f:eb:83:00:52:60:74:c1:89:
         9e:99:49:7a:ee:05:bc:42:4a:b7:12:9e:0b:81:c2:73:50:2b:
         3f:1a:8b:37:3e:72:c7:c7:bf:04:be:39:73:2f:28:b2:bd:67:
         fb:7d:13:cf:6f:03:84:c4:e0:c0:21:be:71:75:5b:68:59:1c:
         84:87:78:fe:19:54:67:77:08:55:ab:13:16:0e:5c:38:5b:fc:
         61:e7:c1:4d:be:72:21:54:d5:57:31:31:df:79:54:9e:4b:f3:
         47:47:4f:dc:45:00:a4:97:9a:2d:24:45:73:aa:58:71:a3:01:
         e6:7c:be:2f:18:ba:dc:50:03:1d:61:c8:ef:bf:0b:6c:62:39:
         e4:83:44:ff:18:e4:f2:93:1f:0b:00:db:5f:7e:01:8b:0b:14:
         e4:db:eb:ee:ec:89:d9:f5:0f:48:42:99:b0:69:21:94:ce:a6:
         c8:dc:72:01:5e:53:04:f3:a2:bb:68:68:4a:77:65:bb:30:29:
         e3:78:18:85:0c:6f:de:67:10:fc:5d:c7:14:39:55:ae:4e:b5:
         c5:aa:10:f2:d9:14:b5:99:d2:30:ce:44:1e:f9:03:2d:dc:de:
         74:30:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----