Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File:                     q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier:          C5GUoMEUj8zVSbKo8/T20lwTN52kk+5/H1ugI0ch4vo=
Subject key identifier:   76:20:A9:04:85:17:35:20:70:6E:75:84:C7:BC:26:72:0D:5B:8C:4E
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer:       /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial:       01962DF396F58BBE79E457A06A30E4976F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
                          2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
                          3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: AyYZE+Uwic3rE9+kJI+l3RbPoikFbeQ5Qa9wuwteV30=)
                          4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:96:f5:8b:be:79:e4:57:a0:6a:30:e4:97:6f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=7620a90485173520706e7584c7bc26720d5b8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:41:95:69:c4:b6:4b:62:c2:86:99:02:fb:
                    19:fc:92:38:09:a5:71:04:50:af:99:83:87:7f:91:
                    5d:2e:97:bd:56:b9:2f:f4:48:84:1f:e5:4c:67:5e:
                    be:ab:36:55:17:e7:9e:f3:56:ca:6f:28:30:22:5e:
                    ea:a8:a0:37:35:d4:79:e6:00:3e:8d:97:55:e4:a8:
                    6e:f5:89:f7:a4:b1:c4:89:ff:9f:df:71:1b:3e:cf:
                    5f:03:b9:ea:d2:43:e0:5d:2e:86:39:e0:77:5c:e2:
                    c6:3b:70:c0:fb:6d:b5:87:de:69:30:66:5e:a5:f5:
                    fb:69:87:65:9d:a1:24:84:a8:e1:8d:95:cb:9e:52:
                    24:b1:9d:3a:b6:cb:58:d6:86:c9:1b:b5:9b:62:46:
                    75:9d:1c:67:ff:3d:fe:1f:31:3e:c9:b8:1f:ba:8f:
                    82:56:78:d3:17:64:44:b9:12:d2:af:21:d8:d1:45:
                    d1:36:fb:8b:1b:2c:24:96:21:0a:3f:46:ad:85:6b:
                    6f:dc:22:56:db:f9:85:f9:c5:57:28:53:f2:5e:d1:
                    05:e5:39:b5:99:11:5d:25:ae:59:5c:73:20:02:10:
                    ff:93:62:c8:dc:c6:72:54:27:40:d8:c4:a5:3a:bc:
                    0f:18:ed:02:e3:72:40:c5:26:ff:56:cc:22:5b:fd:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:A9:04:85:17:35:20:70:6E:75:84:C7:BC:26:72:0D:5B:8C:4E
            X509v3 Authority Key Identifier:
                keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:80:dd:ff:9e:3d:96:01:43:a4:74:a7:14:ce:d2:d4:f6:
         02:9f:af:14:2c:7e:19:29:a4:0c:c9:37:9a:35:78:a4:e0:c5:
         a5:9f:08:5c:fa:70:b6:36:f6:5a:6f:9a:95:a6:5c:dd:1b:e8:
         36:ef:96:a9:72:a7:7b:99:93:f7:62:06:32:7f:0f:f5:ea:f2:
         80:ed:43:03:bc:bc:75:a3:01:c9:97:23:1b:7c:90:de:92:af:
         11:c3:7d:19:c0:08:6e:0d:65:b1:4a:09:31:81:09:0a:59:f3:
         16:13:cc:10:a0:c3:8a:bc:d6:e0:db:74:7d:9d:10:d8:12:e7:
         6c:7d:c5:23:9f:9c:ed:96:47:5c:e8:b4:01:94:27:c9:62:2c:
         36:81:8b:b8:c5:fa:38:e0:5b:8b:4b:da:3b:12:62:b5:fe:f3:
         44:78:9d:65:58:1d:82:0b:92:57:0e:8f:c2:5f:10:d9:78:44:
         c8:11:b3:9d:71:b2:36:d4:0d:03:2c:04:9b:33:e8:31:3a:12:
         cd:ad:7c:72:2c:0d:24:12:b5:b0:64:7f:d9:10:a2:55:e7:c8:
         37:b0:2e:ba:19:e8:8a:a2:66:c4:ce:44:35:73:6a:83:fb:c5:
         b8:fe:4e:f3:16:7d:4d:7a:8f:8b:cd:f6:f3:23:bc:7d:04:8d:
         a8:55:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----