Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File:                     qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier:          I6LKywRHAsJHoIrVV8znJJtxomvBCT7sZsMkvS3aMnI=
Subject key identifier:   87:87:B1:51:73:36:E8:5C:48:62:3B:CD:DC:A0:97:98:DE:E0:91:25
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer:       /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial:       01962F06EE6D793E7C975CBED11728562CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
                          2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: Mv6fTZESUy252Re6ARvQFIwwD32pSitJC3BAQEsq784=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ee:6d:79:3e:7c:97:5c:be:d1:17:28:56:2c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=8787b1517336e85c48623bcddca09798dee09125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:aa:ff:8e:53:87:b7:bb:8b:9e:76:90:51:
                    23:01:2c:ac:7f:e3:ac:92:2a:8d:4b:21:07:82:8b:
                    02:8a:db:dd:27:d8:b9:29:cb:3d:19:b1:2d:82:38:
                    9b:be:e0:38:a5:0e:bd:44:c2:65:55:6b:c3:c0:06:
                    5b:57:a7:f1:45:e9:9e:1b:14:0b:d2:53:c4:f4:04:
                    4b:6e:ec:61:a3:f1:f5:fd:e9:38:64:b2:c9:4e:be:
                    f6:f5:dd:3b:5f:49:b5:78:bc:34:38:fe:d9:2e:ca:
                    d7:81:60:1c:f8:36:5f:59:97:96:a6:98:4f:d1:ec:
                    27:9e:f1:f5:14:a1:fd:76:ad:e7:49:0d:43:be:d3:
                    f8:48:37:77:b4:11:aa:1e:c3:61:81:92:2b:93:23:
                    6b:40:bc:45:8b:bd:6e:ad:b6:62:9c:4b:51:ab:62:
                    dc:44:6b:9e:04:e6:86:f0:d0:94:88:b6:52:41:0e:
                    c2:d7:d6:0c:bf:a1:ab:fb:cd:27:47:c9:52:e7:9f:
                    4c:93:50:0b:af:6b:cb:7b:fc:c5:74:fc:24:84:d7:
                    cb:65:65:10:e3:41:a5:34:a8:1f:d1:8e:b1:89:50:
                    9c:fc:2c:e8:3c:b8:93:e6:ea:eb:9f:e4:ff:74:e8:
                    c0:55:ae:e8:c7:ee:14:52:7c:1b:eb:d1:fe:5b:22:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:B1:51:73:36:E8:5C:48:62:3B:CD:DC:A0:97:98:DE:E0:91:25
            X509v3 Authority Key Identifier:
                keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:84:7b:64:01:33:dc:6a:d3:99:02:04:85:10:83:03:28:da:
         87:ce:3e:df:11:98:4e:2b:4b:10:27:53:8d:ce:b4:77:ef:38:
         8c:80:07:dc:ff:f0:5e:8d:92:14:36:b9:9c:07:2d:6f:d5:e6:
         1b:0f:9a:8e:9b:97:cd:c6:2a:42:af:12:4c:dc:dc:f0:e0:e0:
         db:b6:d4:99:f9:3d:40:0c:a7:d7:f1:4e:4a:07:7b:21:c8:32:
         5a:21:a4:4f:45:fb:d5:0a:5f:05:79:3b:8a:71:da:42:46:f5:
         5d:7a:c2:40:ca:80:a6:51:d7:78:48:c4:3e:39:2b:d5:6b:36:
         a6:32:66:a5:a9:f0:8c:e5:8e:40:c3:74:4d:ed:bf:06:af:5e:
         cd:50:9b:70:d2:48:c0:96:53:bc:4a:ee:0a:fd:62:bb:c3:6c:
         aa:0f:84:05:e6:f8:1c:94:4d:4e:f8:c1:c1:40:a9:cc:b9:48:
         1e:dc:01:8a:16:29:be:52:a0:06:6e:0d:3e:9d:87:28:20:06:
         29:f3:39:65:ec:84:7c:55:36:59:69:2c:99:a9:5e:53:92:fb:
         da:76:fd:d1:02:78:59:25:b8:07:56:ee:fd:29:ab:06:61:90:
         9a:64:92:91:dc:1f:73:81:97:0f:3e:49:03:23:4d:24:ff:4e:
         66:9b:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----