Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File:                     qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier:          mNfbN7WHGHR8lygaAWvyLfbHNXavX10Wyc5IRiJojHA=
Subject key identifier:   19:E0:11:8A:94:22:12:73:0B:95:09:82:9D:8E:A9:7C:20:17:1C:63
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer:       /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial:       01962F068B00E0F041254987AE645E961559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
                          2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: XMX5OuMLG5JTXQHUb2Ki0qg55t97ZMFuzSunKTrj1Ns=)
                          3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
                          4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:00:e0:f0:41:25:49:87:ae:64:5e:96:15:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=19e0118a942212730b9509829d8ea97c20171c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:65:05:d1:f6:db:1e:fe:ab:ac:ca:1d:fb:
                    d5:80:33:3a:42:16:24:c0:a4:36:e5:d0:ee:65:6e:
                    5a:00:52:2b:a0:12:41:06:c8:60:60:fe:06:71:39:
                    92:a5:1d:64:79:b9:4f:8d:2f:ac:78:26:51:d3:b8:
                    3a:21:5e:2a:9b:f9:08:87:68:8a:a5:ae:3b:6c:db:
                    06:ae:de:c3:9a:97:46:ea:52:61:76:70:ae:2a:a7:
                    f6:9d:ad:2c:82:f4:b7:fd:1d:ce:ac:91:42:14:2d:
                    a7:ac:af:08:2d:20:4f:08:ab:a4:59:09:e9:e3:d6:
                    c3:5f:e8:ba:0a:8b:87:aa:94:4f:cd:43:4f:95:8e:
                    30:9d:6c:b6:37:40:bb:e6:b3:df:6d:be:0d:41:99:
                    95:18:4a:7d:a2:35:5a:85:c8:ea:81:f9:e6:98:f8:
                    a8:15:66:8f:9c:c2:b5:0b:7e:ae:14:b4:c0:c7:e8:
                    8b:8c:f5:86:f0:65:6a:e4:b0:d7:a6:94:8f:3e:7e:
                    42:5a:a2:6f:1c:59:60:91:7c:df:c9:46:df:ae:af:
                    29:8b:af:2c:56:b5:c6:9b:99:de:41:22:82:02:8a:
                    33:1f:d2:a3:c6:88:8e:d0:17:d4:14:e5:10:fe:94:
                    ff:fe:ad:9f:b1:67:11:e6:13:27:b6:ba:17:16:1d:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E0:11:8A:94:22:12:73:0B:95:09:82:9D:8E:A9:7C:20:17:1C:63
            X509v3 Authority Key Identifier:
                keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:e5:18:03:6f:1f:6d:3c:91:29:34:85:8b:6e:bd:48:a7:
         e8:37:b7:bc:9e:13:53:8d:c0:8c:46:a5:06:62:6d:a0:87:fe:
         ab:2e:6e:19:27:66:df:39:1d:d1:b3:69:f8:32:06:ea:c5:e5:
         fd:40:43:4a:58:80:72:4d:06:fb:4b:79:13:39:f4:0c:f8:a7:
         7a:48:ca:85:6a:20:0e:5c:4d:ad:2f:29:33:9a:b7:b8:08:0b:
         95:d1:61:6f:4a:22:f5:92:83:b3:89:67:aa:0c:7e:f7:22:7d:
         d9:56:c0:43:64:72:cb:9a:18:8a:a1:aa:34:a3:05:77:3a:fd:
         cc:b9:fb:1b:09:87:ce:65:f2:e8:c7:36:54:54:54:39:11:ed:
         13:d0:2f:ec:b8:60:42:63:7f:72:d0:23:bf:69:16:b7:51:39:
         c5:04:2d:94:ac:a2:5d:29:7d:ca:13:75:95:66:6c:59:95:dc:
         08:cf:31:7f:c3:ac:e3:a1:0a:c5:af:32:80:08:d8:2d:c7:3c:
         ac:68:88:1b:6d:93:1f:00:38:fe:74:a9:2b:e9:18:32:f6:2f:
         a4:d7:be:49:c2:49:d0:e9:72:61:d7:8b:7c:8c:9d:28:05:15:
         bb:1e:6d:e2:41:e9:c8:b5:ac:77:ec:72:98:b6:37:87:e6:39:
         04:89:fe:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----