Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          r2D5FwZYUmw6AVx4spGrlQ+ifCcN9DjPwprTqJsAPe4=
Subject key identifier:   63:1E:62:BA:33:29:30:F0:12:A3:65:07:5F:F6:DD:19:1F:8F:6D:5E
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       01962DF452F9CA00BFDA30D3819D7719EB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          0FC7
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: r30ZkENfXdxd4ESsxVZPtQZAIzvmh0KkkGg80NNvAfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:52:f9:ca:00:bf:da:30:d3:81:9d:77:19:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=631e62ba332930f012a365075ff6dd191f8f6d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:5b:35:f6:87:65:74:f1:1c:f5:58:c6:93:
                    a6:6d:4d:a9:cf:4f:10:c4:5d:d2:18:93:07:25:ea:
                    45:e6:11:c1:90:74:06:a8:eb:b5:d2:91:42:d0:80:
                    26:1d:27:ac:2e:b5:d7:b1:55:27:38:7f:00:56:50:
                    b0:1a:91:8f:d6:80:15:a8:1b:ae:b1:49:fa:ce:a9:
                    50:e2:96:69:ff:4c:ff:88:0e:af:2d:cd:fd:0c:1a:
                    4b:32:21:3d:3b:48:a7:d1:d4:67:b9:2f:8a:8b:d9:
                    65:28:d9:af:88:c4:77:72:cc:f7:62:f2:bd:09:e6:
                    5f:e0:0d:ef:a8:d8:3d:bd:02:c3:cb:8c:fd:e4:f2:
                    dd:0c:08:22:31:51:2c:df:e7:18:ff:39:dc:b1:bd:
                    3a:51:82:16:fc:b4:3f:c1:4c:10:ae:78:3b:66:97:
                    01:b5:b9:17:3d:19:d5:e8:3d:32:0b:41:db:27:6e:
                    f4:3a:cd:6b:aa:e5:1f:4a:31:fc:c6:c1:32:79:c9:
                    75:ac:a7:aa:39:d8:19:70:e9:e4:45:02:19:ce:5f:
                    84:15:70:1c:0a:96:da:2a:9f:42:77:63:06:a7:65:
                    53:f3:a1:24:48:5e:85:aa:56:c4:c3:c8:57:5d:1a:
                    2e:05:b7:06:bf:17:e4:fd:54:ef:64:d5:cc:9f:f9:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:62:BA:33:29:30:F0:12:A3:65:07:5F:F6:DD:19:1F:8F:6D:5E
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:9e:35:f1:3d:d6:e0:ed:04:c8:5a:a1:46:7e:cf:06:1f:
         6d:79:b2:57:aa:82:a2:07:7b:20:a3:70:e5:0d:65:a8:3d:ed:
         d3:65:e0:a8:be:b6:47:90:a4:cd:7a:e7:11:49:38:01:2b:40:
         74:c9:5e:d8:c3:13:d2:b4:33:ab:b7:d8:34:6c:a4:6e:6c:ba:
         d1:d7:c2:0f:01:6a:96:cd:56:fb:ce:6a:7c:0a:39:11:6d:97:
         24:f3:73:48:bc:d1:08:fa:21:42:cb:d1:56:35:f4:83:d1:c3:
         89:36:6f:26:2b:61:83:90:05:86:c0:9f:4f:96:80:3e:a0:1e:
         c1:9c:f5:af:8f:f7:d2:e4:8f:28:b1:d8:d7:9a:7b:6a:93:99:
         6f:82:15:1e:a1:b6:26:0e:3a:66:45:b0:c3:24:ac:6d:69:8b:
         fb:d9:c3:d6:fe:e9:41:22:74:c2:6f:2e:7d:b9:1e:74:44:13:
         db:50:7c:33:93:64:39:b2:b6:86:f9:bc:22:48:a4:1d:fa:7e:
         88:a1:e1:d6:01:1b:e2:1a:dc:71:52:2e:80:d5:59:3a:c2:55:
         66:10:2d:78:5b:b5:1d:12:68:23:e8:d4:1b:9f:64:26:35:eb:
         21:69:32:dc:2c:a9:be:dc:d7:e5:c1:7a:a7:1a:f9:14:c4:ff:
         22:eb:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----