Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          bF39UgeqwNqi57/R6BsgZPKucEHxePCda2Y3kaKJaNg=
Subject key identifier:   F7:A9:04:31:FC:08:72:3F:FB:45:FA:AE:90:B9:DB:E7:3D:AF:15:49
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       01962F06AC49E897B9A3F63D29BFFB38B1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          03C0
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=)
                          2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: VC/fl2oz6EMwR6l1ATUQFZM5J4g0gMV+57H2723hlb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ac:49:e8:97:b9:a3:f6:3d:29:bf:fb:38:b1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=f7a90431fc08723ffb45faae90b9dbe73daf1549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:d8:48:45:71:6e:93:b5:21:f9:47:08:56:
                    5b:35:b1:7d:16:db:a7:f4:42:97:a5:da:94:5e:70:
                    c6:23:df:4d:9b:2c:7b:b9:1d:26:bd:a0:51:69:e1:
                    1d:22:30:e1:45:92:6f:eb:0a:bf:c9:4b:b4:ef:99:
                    28:62:4c:36:e7:a8:90:be:7e:e3:ba:0b:21:e2:f2:
                    16:63:81:9f:46:36:66:ee:1a:72:2b:64:8c:97:08:
                    d7:e8:e5:58:c8:b2:16:b4:d3:b8:c1:0b:52:07:56:
                    e3:8f:fb:95:df:74:4f:d7:8a:79:fb:48:27:a2:4e:
                    ab:f8:93:65:b7:30:4d:80:cf:c1:23:23:66:fd:d3:
                    e3:61:a6:be:3d:cd:60:b7:ea:55:25:81:a5:5f:7e:
                    87:1a:73:91:dd:e0:60:08:eb:72:6d:e5:7c:ed:ca:
                    bc:1e:d4:02:33:37:a7:2c:34:e9:1d:a4:f0:8c:d2:
                    c4:d1:37:d1:bb:cf:fd:4f:50:25:70:fb:bd:61:76:
                    30:d7:6a:0e:5a:1e:99:a7:13:50:90:25:1d:52:07:
                    8d:9d:b5:c3:69:23:f0:69:fb:79:4c:bf:eb:e3:ce:
                    82:06:3d:a9:4a:d5:a8:19:31:dd:2a:a4:cd:bf:bd:
                    c6:b6:83:01:81:38:d6:1e:1d:1c:c3:e7:cb:9b:a7:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:04:31:FC:08:72:3F:FB:45:FA:AE:90:B9:DB:E7:3D:AF:15:49
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5f:af:e4:cd:f7:d9:34:ae:8a:48:d6:25:b3:ec:6a:fa:19:
         c9:b3:54:85:7d:65:7c:84:8b:a8:ab:fd:b8:34:87:00:b4:8d:
         9c:12:ba:44:ed:4e:28:87:ce:ad:d6:d7:7b:8f:79:9a:15:d6:
         d1:01:ad:b4:56:82:7c:fe:16:a6:d2:3b:03:a2:63:87:c5:4b:
         30:fd:79:e0:a4:64:96:08:dd:6f:49:f5:31:6c:13:95:7e:47:
         39:7c:7d:72:fe:7f:7b:13:48:02:b2:c2:92:ac:82:4c:f9:df:
         bc:ac:12:5d:49:ed:42:c3:e5:65:71:f4:0e:58:c1:8d:e8:2a:
         3d:d2:d3:b0:33:3b:50:7b:4d:a7:04:0f:be:77:11:02:12:bc:
         45:8d:90:20:16:7d:43:f5:13:cf:70:13:a4:ed:75:36:b3:6b:
         f7:f4:84:b9:4d:85:6d:09:d9:e2:3d:ae:87:55:07:88:0c:8f:
         74:9f:85:b9:dc:78:80:38:63:09:1e:8d:69:f1:d4:72:58:67:
         07:ec:0b:3a:3d:5d:12:06:24:e4:71:b0:66:b0:dc:1a:43:6f:
         19:df:35:8d:6b:72:cf:3f:63:76:7a:40:c1:f5:03:3e:0a:c8:
         d5:87:d1:d7:66:a2:c0:97:a8:b3:ae:0b:47:bc:93:f3:a7:66:
         7e:b2:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----