Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File:                     q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier:          CvprYlsSdeTK5a+u9x2mdeW8I73bx2vKGW/vph6RX1U=
Subject key identifier:   3D:91:7D:88:28:7E:84:43:A4:58:82:AD:60:1E:A3:23:F6:40:7B:1E
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer:       /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial:       01962E6176CE9E7FACB0303E21D711F9C65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
                          2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: rLFZkAEBgKJ5JwSB3sXPhR9F0g6ZFDZawdbtKkWjZl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:76:ce:9e:7f:ac:b0:30:3e:21:d7:11:f9:c6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=3d917d88287e8443a45882ad601ea323f6407b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:b3:97:48:1b:fe:f4:19:7c:75:9a:e9:d2:
                    7a:bd:85:2d:2c:f4:6c:62:40:f1:de:41:21:3b:41:
                    76:11:48:1e:ed:0a:c7:00:9d:d2:a3:50:13:4f:af:
                    2f:98:24:c1:61:be:54:6f:7d:83:54:d1:07:55:14:
                    86:63:58:e6:2c:a3:f6:18:97:f9:cd:39:aa:a7:1f:
                    13:8e:a0:92:ec:8a:60:90:cf:59:ea:8d:24:dd:f3:
                    5e:2c:88:f1:8b:27:8d:47:35:73:a6:9c:63:2c:dc:
                    ae:88:86:2b:5c:49:4f:34:2c:0f:77:fb:9c:c6:8a:
                    8d:67:0a:25:ce:e3:55:39:9a:8c:a9:33:f2:2f:65:
                    4a:c1:6f:10:b7:71:76:b5:f1:8f:ba:4e:4d:ed:16:
                    2e:6a:af:73:f5:5f:98:4b:b4:4a:3f:a5:12:1f:e0:
                    0c:6f:3f:a0:99:04:69:85:7f:71:52:d7:3c:a6:62:
                    1a:38:b8:1d:6e:6a:ab:f1:bf:e6:82:89:8e:8f:90:
                    1d:98:b9:dc:53:e9:1f:ea:4c:1f:9d:b9:c1:11:98:
                    fd:40:ec:57:d9:a8:42:42:9c:0c:01:22:07:5a:b5:
                    a7:02:ae:6c:37:d1:98:c8:7e:27:c3:b6:93:dc:7a:
                    09:32:4e:68:1b:03:81:e4:f1:da:09:d5:58:72:aa:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:7D:88:28:7E:84:43:A4:58:82:AD:60:1E:A3:23:F6:40:7B:1E
            X509v3 Authority Key Identifier:
                keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:1b:9b:db:ab:c1:8d:cc:ff:ca:b2:04:fa:09:93:88:9e:
         23:13:85:93:6a:af:da:be:52:7f:89:b5:b8:19:0f:3a:2f:f5:
         df:93:4c:a6:df:3d:06:69:59:1b:2f:4d:4d:b7:9e:a1:01:d3:
         48:f5:30:6c:71:1f:b1:ae:85:30:fa:59:1d:8e:ca:c0:0f:d4:
         dc:2e:88:9a:0e:52:3d:6e:ec:a3:4a:c7:c9:15:2f:29:02:4a:
         2d:00:ae:b9:1d:0b:dd:c5:ac:3a:ca:65:82:c6:73:8d:6b:4f:
         bb:21:1f:61:f2:62:24:ae:39:1e:dc:b5:6e:ef:a6:5b:43:53:
         ae:6d:f3:4f:8d:1f:d2:fa:37:08:60:d4:8c:1c:4b:78:8a:4e:
         64:09:9c:83:ca:c2:b7:29:69:dd:b3:a1:6f:38:bd:9c:4c:f8:
         ba:74:24:c3:15:1d:99:31:17:34:9d:89:87:25:3d:40:39:98:
         5e:ff:52:b0:8e:c0:47:37:34:e4:31:0f:d3:b0:81:1b:b4:1e:
         f2:8f:c9:3b:91:9a:a2:09:a3:21:e8:53:b8:49:eb:44:ec:a7:
         ed:b6:1c:1c:58:1a:db:db:55:c7:1d:75:23:e9:b0:c1:b4:53:
         7a:db:2e:a3:de:38:c9:fe:2c:ba:c0:bb:9a:5e:e3:b0:59:4d:
         ae:0e:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----