Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File:                     Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier:          1E8ArgvwpG7iEe34g9ijhdXC2m4ex0sdFoIYnD475/Q=
Subject key identifier:   44:6F:88:01:AF:08:88:CD:3A:A7:E9:7E:0C:CD:7E:32:B3:D5:49:A1
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer:       /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial:       01962F3D928985C6BA27EA284FC2E532AA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: 29wssqErvKQtR_9f6uK-OYzddNM.roa (hash: Bh05SYc8VBmf4zaIv99zE5UZHb6fBJqOGBDvempbpVM=)
                          2: 6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa (hash: wLv2JoucZBkU56L2p9pXvAWsrjbYGSWjGCERyhVvXsw=)
                          3: AN-DGU807Zi1GLozE0Ye6tyK7Ic.roa (hash: +/Pg+LZh0oTnlaPXWDZsXPiFa0OXAsSR/g5vgnMvqME=)
                          4: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: wOHF/qqZ2UoVrz9LF/97CIhhApu7j6Wy4Jc+iQCVtFs=)
                          5: akr2zEciBp0bAf10VTnQBF8A5hE.roa (hash: SJfaT9rqeoFgX5bxM6d8wxAKVaMpQ7a7c0aJKadx3yo=)
                          6: maXcZQ7N2y2_afrzV1oMNjT4O7g.roa (hash: D+pc8oR4WM9Y/chv55U8MqOsuEcIXejdvRWZ+f3Pszg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:89:85:c6:ba:27:ea:28:4f:c2:e5:32:aa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=446f8801af0888cd3aa7e97e0ccd7e32b3d549a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:e0:0c:75:50:b2:c5:34:5d:c6:22:f0:7f:
                    2b:e3:0b:92:0a:df:2f:9d:f2:96:7d:1b:47:62:d2:
                    96:86:98:4b:a0:f1:2f:20:4f:61:02:73:e7:32:23:
                    cf:65:85:8a:ff:fc:c2:cb:d3:9a:09:30:fb:cc:8a:
                    e8:40:99:b0:7b:28:78:1e:0f:c5:b9:cc:80:99:67:
                    36:07:0b:fd:b0:40:ed:07:e9:00:09:1d:06:80:04:
                    fa:cb:3d:53:3b:73:b2:af:4b:57:a2:32:9f:dd:eb:
                    4f:ef:b2:b1:1a:a6:49:f6:28:db:1c:99:af:d3:4e:
                    8a:71:db:1b:29:3c:69:9e:19:19:c2:c1:a6:1e:8d:
                    ce:4f:55:dc:fb:a4:3a:ea:d5:57:22:14:9a:73:8e:
                    fc:2f:77:54:9f:6f:db:ad:e1:1c:bc:da:33:67:6a:
                    5d:66:12:55:38:61:60:55:3a:c2:6c:e1:d0:90:23:
                    28:f0:74:11:dd:63:fe:a2:ff:01:37:22:e5:fb:ba:
                    c0:43:67:3d:38:69:e0:cf:5c:f5:50:07:4b:06:45:
                    f3:d3:50:c2:e5:00:b6:82:06:50:f4:e4:d1:54:95:
                    3b:8a:c9:3a:ad:9a:64:a9:76:0d:80:f4:ac:9f:eb:
                    58:69:ea:15:f3:5d:cc:62:fe:62:b6:0b:fd:b3:b3:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:88:01:AF:08:88:CD:3A:A7:E9:7E:0C:CD:7E:32:B3:D5:49:A1
            X509v3 Authority Key Identifier:
                keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:da:82:41:ff:29:05:f8:e6:a2:d1:c5:6f:8a:8e:b7:57:55:
         e6:a0:1f:77:f8:ae:cf:12:01:ba:e2:79:2d:c8:5f:4a:c6:6d:
         18:68:81:c7:47:59:db:14:7a:06:b0:9f:9c:70:c3:4f:55:64:
         3f:cf:ce:23:3c:cd:1a:b8:31:1c:17:bc:57:12:a4:70:9f:4a:
         6b:fe:27:0e:df:92:4f:7a:8e:c6:8e:31:58:1c:23:fe:ac:e6:
         f7:53:10:1e:54:cf:1f:d5:af:b7:77:fd:e0:3b:d1:d7:8f:47:
         25:66:c7:fa:61:9c:96:b8:3a:33:07:94:48:d8:12:5f:d1:34:
         6e:49:22:81:3d:cd:4b:52:1c:d6:c4:40:59:bf:5c:ec:99:ba:
         48:8e:e2:9e:72:31:e7:ed:22:f1:1e:1d:29:20:59:6c:ae:26:
         a2:ab:4f:43:1f:40:9a:2c:5f:b0:96:94:31:b6:e3:62:19:1f:
         30:4e:c1:fa:64:42:8a:d5:97:ee:8c:a7:17:8e:43:93:79:63:
         08:4f:70:51:b8:61:c5:f8:d1:ed:b5:d8:77:69:9a:95:fe:ac:
         5c:98:7e:6c:36:f7:09:fb:60:bc:f0:2c:b7:7e:25:0e:8c:31:
         f9:aa:c4:fd:a2:c2:55:79:d2:a0:72:76:61:f7:08:23:d2:a7:
         39:5f:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----