Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File:                     Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier:          557Wt8RmfXc7ebslJOqwCnRH7XqUJ8xzoaB9i82FBlE=
Subject key identifier:   3A:45:37:1E:4C:CA:EA:9F:CB:07:78:D7:B6:EA:B6:8C:23:BC:3F:7F
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer:       /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial:       01962FAB2235DCED03ABEC287628CB0EF115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number:          01DE
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
                          2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
                          3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: D94RpMxi2opJbCX2ORdshAYwx3/OlppQRQFM8YObV3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:22:35:dc:ed:03:ab:ec:28:76:28:cb:0e:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=3a45371e4ccaea9fcb0778d7b6eab68c23bc3f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:c6:99:c5:1b:6e:17:d3:9c:10:f9:57:81:
                    59:e9:9d:4c:b9:55:1e:21:f2:36:af:bb:ba:f8:41:
                    0e:2f:93:d7:d5:99:55:f0:b4:fe:82:22:65:5e:f5:
                    1e:4e:b9:7e:54:a4:a1:67:96:93:4a:a5:1e:ac:af:
                    6e:c3:c0:c5:3a:57:a8:20:1f:96:6a:df:8f:8d:73:
                    55:45:fd:43:12:ad:a1:6a:53:79:c7:9b:1b:07:23:
                    fc:07:2d:04:4d:30:91:0a:4c:0e:4a:92:d6:c7:f0:
                    3d:9a:71:71:8a:86:ae:28:be:46:26:8b:cf:b4:24:
                    52:13:c7:77:7c:ac:57:89:3b:93:be:a2:70:9b:2b:
                    57:df:f0:62:ec:62:53:a8:34:b9:1e:52:45:7f:2c:
                    83:19:d4:e4:00:bf:2b:0a:47:cd:99:e3:e6:80:8a:
                    c8:cf:19:02:f4:75:2f:c3:bf:39:fa:88:9e:d9:9e:
                    61:13:8a:30:86:07:25:28:e7:0a:aa:73:f2:5b:af:
                    89:64:2c:b7:7d:80:bc:3f:29:83:91:48:51:80:71:
                    33:cb:7e:4d:da:98:4a:24:e8:75:c2:f4:0b:a4:44:
                    2f:6a:84:4d:f0:dc:64:44:f9:4b:76:bd:59:c2:5e:
                    e8:95:17:34:47:54:94:d5:04:16:fc:eb:92:02:e0:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:45:37:1E:4C:CA:EA:9F:CB:07:78:D7:B6:EA:B6:8C:23:BC:3F:7F
            X509v3 Authority Key Identifier:
                keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:55:6b:82:df:a5:e5:49:c1:dd:dc:c5:0d:80:d9:b4:38:
         75:50:4a:4c:d8:14:de:9d:e3:ea:6d:64:a4:ad:ba:27:c7:20:
         bd:7d:46:04:2d:38:f5:bb:af:e3:eb:61:fc:b6:55:2d:1b:df:
         b2:47:a3:6a:d7:07:ae:27:53:a9:94:ba:96:97:94:7d:66:04:
         b7:37:06:be:9f:f6:32:7c:de:07:4b:37:93:d6:35:90:e5:8d:
         ca:80:13:25:4e:8b:bc:9a:89:4d:0a:44:61:2b:d3:23:31:2b:
         90:dd:52:09:88:90:1e:30:35:02:42:68:5c:90:55:3c:1b:55:
         8c:d5:20:5b:1c:a5:70:81:ff:ad:a8:40:3e:1f:c1:d6:54:28:
         e3:60:45:94:bc:bf:f2:60:4f:71:0d:f1:b3:33:19:96:ef:20:
         20:cc:f3:84:af:d5:cb:5b:8a:5d:e2:d0:d3:e9:0c:ee:a2:7b:
         df:87:7e:a0:28:84:77:dd:08:87:f5:5a:15:ec:da:04:ff:b7:
         d8:97:2a:49:75:29:c0:69:c4:6b:9b:79:4f:0c:08:49:28:f8:
         8d:56:5d:d3:4d:dd:8c:6d:f0:ab:cf:a2:dc:ec:93:ad:26:3d:
         07:b3:4f:92:fb:51:bd:41:09:fe:52:06:1f:a8:55:2f:a0:db:
         2d:29:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----