Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          iH2nJmh+nS3ZeT4xiMfeZdWF5WOvxQPSyHXnH8d0u54=
Subject key identifier:   85:4B:13:55:2B:96:3F:91:0C:9D:B1:DE:56:AD:1A:C5:CF:9A:22:82
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       01962F06ED7F12929AAE20B82DE480E18C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          1191
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: FIyTe6Z5c9SlUs06XwKmTie5dUo.roa (hash: uOWoCbldz8pcJx7RQheZzjsLIzs/KJyulSs2wwLgbgk=)
                          2: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: vAsJRZN5LC+E8zCK6IXIjZgtLo1F1Apnmc2tTEMxVHw=)
                          3: odf_RloZld2f_C46K0BxlJYlBTY.roa (hash: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:7f:12:92:9a:ae:20:b8:2d:e4:80:e1:8c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=854b13552b963f910c9db1de56ad1ac5cf9a2282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:01:08:8a:52:40:38:08:b3:a6:a2:38:ed:
                    a7:84:7f:53:5e:64:71:2a:a6:e6:c3:0e:6e:93:cd:
                    68:cd:60:06:59:ed:fa:77:f0:27:62:8c:0f:47:e3:
                    cd:05:09:1d:92:4a:cc:80:93:a9:06:12:57:89:b1:
                    57:f4:6c:a1:5b:16:93:04:3c:8f:f9:03:ab:ad:f5:
                    b7:d1:a4:8f:56:f9:d2:62:11:2a:04:9c:20:20:7d:
                    91:ce:bc:13:a6:ee:9d:6c:b2:cc:f1:a1:3a:a4:fc:
                    10:39:6e:be:64:79:ed:3c:63:d7:b6:a3:34:66:5b:
                    f9:64:90:97:61:2f:38:e2:63:c0:72:81:b7:53:de:
                    d8:df:07:e0:12:18:79:8c:bf:08:7a:5f:88:a2:df:
                    14:48:2d:5c:9a:e2:fa:c7:e0:93:bc:a9:7d:f8:01:
                    6f:13:52:37:d1:20:36:db:59:fa:28:e4:24:82:2b:
                    9b:46:95:18:08:15:4f:cf:b3:6b:f6:69:27:aa:a2:
                    0d:da:1a:c1:fa:5f:56:4c:47:ab:ac:18:73:0d:b2:
                    aa:d9:0d:5e:0a:14:7b:f4:b5:4b:21:db:09:bc:58:
                    bb:1e:ae:1a:2a:37:0e:be:10:3f:93:34:c0:e1:b8:
                    66:53:96:b6:ca:39:85:4f:7c:c8:3b:df:10:83:5a:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:13:55:2B:96:3F:91:0C:9D:B1:DE:56:AD:1A:C5:CF:9A:22:82
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:72:36:b5:d6:b5:31:f7:f0:f3:63:1d:4a:9d:3b:85:01:
         0a:c5:a1:fa:ee:7a:d8:2a:0f:7f:f2:89:88:51:b8:0d:6b:6b:
         7c:43:e6:b9:85:2c:4d:32:7c:8f:35:41:5d:d1:e0:fb:5f:ca:
         62:7f:41:72:4c:85:b3:16:6d:29:26:72:c7:be:b5:9f:04:88:
         81:4f:fc:e2:d1:35:01:bd:7a:db:c3:db:97:fb:14:91:45:04:
         db:fc:7b:70:3a:70:36:76:6c:11:a0:3d:7a:9e:75:cc:a7:4e:
         37:1b:0c:63:69:a3:16:0e:78:e6:0c:6b:30:09:b0:11:9c:c3:
         a6:45:c1:bd:ac:87:c1:2e:52:3e:74:a5:5a:f7:83:b4:75:73:
         f1:71:7b:5a:b8:6f:00:a4:86:02:4b:79:08:ee:66:ca:60:7f:
         d6:d4:00:81:68:ea:bd:ff:54:0a:b5:77:f3:7f:f4:36:ab:1b:
         25:54:fc:bb:ba:10:70:4c:7f:ff:c8:0d:f4:a0:33:23:b8:dd:
         82:01:ea:86:69:8a:6f:9b:c8:0d:d2:8d:a7:32:17:04:3c:aa:
         2c:9d:59:b5:1b:9a:0c:8c:7b:06:6f:d3:52:b8:c4:a1:7a:87:
         11:57:a9:b9:d5:51:e4:00:ad:3b:19:35:3f:b4:b5:2d:a8:94:
         91:44:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----