Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File:                     qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier:          1GDtd7h/LSZU8i3kZPzGJQQcf0aGScSZY/ijoNpdWpY=
Subject key identifier:   A5:BA:BD:61:3A:E2:75:F4:7B:2E:FB:C1:06:86:78:E3:39:79:CE:FC
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer:       /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial:       01962DF4437839FE0B8479D3D22BE9188CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number:          1071
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: L4GT8gOEuL97CVEc6SLYv27uQGY.roa (hash: oA7pIDoRQZCeRvmX/JuwXtCGqvbpngo/uRvoynK93P8=)
                          2: Y_LE7fqvC-DJjpGE04PAiZiS4sM.roa (hash: /iG8f1CjLF+Lu2JxpQ3C4TbNa9Jv5YP2v7PLHqXyCAI=)
                          3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: ZiRW1Pg7Sq3zDe1ms6106pK4aulQTrguJQCKpi6y4M8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:43:78:39:fe:0b:84:79:d3:d2:2b:e9:18:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=a5babd613ae275f47b2efbc1068678e33979cefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:9a:66:49:ae:69:71:8f:0e:a1:31:29:7c:
                    e2:55:30:4b:44:7b:c2:ab:cd:de:9c:43:df:5c:bf:
                    44:32:0d:3b:62:a2:6c:92:e5:2c:b6:31:c9:43:37:
                    81:79:30:b0:73:5f:22:e3:34:64:f9:e8:59:fe:df:
                    9a:55:c2:1e:3a:b8:43:5e:88:6b:67:18:70:5f:db:
                    91:1d:9f:ae:79:88:d3:8d:a3:d4:6d:f1:ef:a1:64:
                    ea:42:a6:4b:0d:ef:82:e8:e4:2c:f9:a0:47:2f:b6:
                    7a:bc:09:8a:77:60:f7:02:53:2d:da:9b:ce:a1:8f:
                    48:eb:61:cb:2a:54:52:8e:02:97:a4:9d:cf:f4:37:
                    3e:8e:2f:67:17:36:ff:7c:89:35:1c:d5:2c:c0:1c:
                    3a:2a:32:45:4b:3e:2b:e6:ac:82:a1:6e:6e:36:4a:
                    12:49:67:4c:01:bc:9e:88:02:b1:a7:2b:5f:56:4f:
                    44:83:46:bb:bc:6f:50:57:01:9c:ef:01:b1:47:13:
                    b0:f4:13:40:40:fa:dc:7f:e6:fa:a3:2c:c8:a2:64:
                    e1:c7:f6:18:02:fb:cd:0b:2f:cb:cf:4b:43:c1:76:
                    01:72:0d:bd:dc:b5:23:c7:1b:08:9c:bd:cb:d9:7d:
                    4b:ce:fa:17:f8:65:1c:c3:dc:e0:36:bc:a4:b0:3f:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:BD:61:3A:E2:75:F4:7B:2E:FB:C1:06:86:78:E3:39:79:CE:FC
            X509v3 Authority Key Identifier:
                keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a0:a2:5c:76:05:59:bb:52:d9:84:12:1a:40:7f:cd:64:c6:
         be:eb:d5:4e:61:2a:7d:4a:ad:ea:7c:44:43:84:bd:10:e8:77:
         67:44:28:1a:95:36:a3:2a:db:a2:da:29:af:c8:39:eb:96:02:
         c5:19:72:2b:81:4f:ff:a9:41:c6:8f:52:b0:8e:58:92:a9:53:
         58:d2:af:9f:cb:aa:db:34:e3:4d:16:73:87:07:ab:13:e5:7c:
         f5:a0:04:ab:6e:ab:b3:18:c8:c8:fa:51:ac:08:73:53:ed:3f:
         97:92:5a:b7:f5:e7:36:c5:40:0c:8d:51:e2:8e:1f:19:9c:f9:
         03:8d:d0:b4:96:77:89:bb:60:c7:ad:ad:d2:54:b4:4c:fd:df:
         01:90:5c:c5:1b:7e:ca:f0:77:39:da:df:c3:01:5d:f0:26:7d:
         73:08:13:57:6b:68:31:56:a6:38:1c:94:59:00:62:b4:46:01:
         0a:ac:8c:d9:a9:43:cd:2a:19:36:fe:fa:88:e8:52:e1:36:e2:
         32:3a:05:27:6c:96:3f:ea:0d:ad:94:a1:09:b9:51:b9:ab:8b:
         cc:0c:39:2b:97:7c:60:1f:e4:27:25:17:51:64:9b:30:bd:ae:
         23:76:61:fc:a3:24:b3:24:ad:e8:63:d5:ea:6d:b5:02:85:48:
         f6:3b:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----