Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File:                     q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier:          7SzrYzJd9vu1tw3DIkBYMwzVMkjLccPZUlDwAKZNZw4=
Subject key identifier:   F8:ED:79:E6:F2:41:CD:BC:80:E0:F4:76:00:4D:CF:B0:AF:3C:77:18
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer:       /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial:       01962F74D3E43F0363093D82E8F5DE9DAA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
                          2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: 1d9N2P7yvhUOVlxEsBXh+61cE+G43c7tX8kTfEOUJzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:e4:3f:03:63:09:3d:82:e8:f5:de:9d:aa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=f8ed79e6f241cdbc80e0f476004dcfb0af3c7718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:5c:23:43:ff:df:96:c2:3a:e6:83:c3:95:
                    5c:c1:20:ed:07:e8:fb:16:02:ac:0c:d5:bb:40:7e:
                    64:ff:82:4b:35:4e:6d:52:a0:28:a1:6e:3e:7a:4c:
                    78:f5:5a:f6:46:bb:d3:a4:19:7f:4b:06:9e:66:f3:
                    8f:ec:b6:9e:f7:c0:dc:52:1f:b5:ad:e9:55:28:68:
                    b1:fb:e8:8d:95:13:fc:66:da:cd:ee:ae:ca:b4:40:
                    98:51:87:ad:35:8d:83:b2:2a:32:44:a9:40:c0:83:
                    fb:5b:bd:5f:01:32:ae:87:0d:a5:49:25:e1:3d:6f:
                    71:85:96:3e:40:fb:20:c5:35:9a:4a:c7:c5:4f:db:
                    8b:26:c4:31:34:9f:71:c3:d2:94:c0:fc:65:4b:0f:
                    ea:94:7f:a8:48:25:de:cf:07:2c:91:1b:fb:b4:26:
                    76:c6:c3:04:76:21:a0:ee:78:44:60:bb:d1:31:1b:
                    46:85:19:90:5e:9b:d0:f9:a7:56:f9:f8:79:a8:f1:
                    df:59:02:dd:39:45:92:f5:61:cd:f4:af:aa:86:8d:
                    24:16:39:9b:60:e5:74:f5:1f:64:7a:38:ac:b9:5e:
                    46:e8:5c:35:09:af:bc:e7:54:2d:34:a1:5d:5b:d6:
                    3b:25:1d:ad:45:89:3a:29:4d:e0:5d:a7:6b:62:90:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:79:E6:F2:41:CD:BC:80:E0:F4:76:00:4D:CF:B0:AF:3C:77:18
            X509v3 Authority Key Identifier:
                keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:9f:55:5e:ea:02:09:5d:a5:80:a9:2b:2e:f4:36:31:aa:
         55:5e:97:94:5f:7b:5b:a8:bc:1e:52:39:38:e4:8e:1b:37:b8:
         b0:0a:51:7d:d9:ee:dd:3e:08:de:56:c1:c8:ed:e7:e0:1a:99:
         3d:9b:fc:82:43:08:78:2f:93:0f:46:0e:1e:59:a1:8f:95:54:
         97:83:05:5c:b7:cf:eb:25:ef:e5:fa:66:a4:53:9d:87:f1:24:
         eb:7b:b9:c3:f1:de:b4:4a:eb:1c:13:70:5e:0e:d0:51:f5:38:
         c1:5b:d4:5e:e7:d8:47:91:39:25:a2:b7:88:d0:87:e5:42:32:
         14:3f:48:2a:d0:db:9f:b7:90:fb:0a:f8:0b:d4:29:a3:ac:e8:
         5d:84:74:77:af:ec:0f:bd:1b:f3:9e:1a:0a:25:3c:58:7a:ea:
         e1:71:f7:f1:90:d3:41:d6:87:6b:2b:f9:95:34:c0:1b:ec:30:
         41:3a:02:60:94:45:2e:b4:0a:c2:96:5c:41:e3:d2:67:5d:ea:
         c4:9e:eb:6d:cf:5b:c5:be:1a:e9:e4:8c:7b:e0:18:a1:1c:5e:
         d4:1e:92:a1:52:37:38:56:69:6b:4f:5d:28:1a:ca:4a:d2:1d:
         b7:9a:62:19:35:73:63:1d:28:4b:b3:69:10:94:41:e8:4c:b2:
         6f:c0:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----