Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          2DX6MACc86WxkkpRHrmkZwyoyk5tv9hmNSjqG0MhEw4=
Subject key identifier:   A9:7F:DA:BE:45:F0:55:D2:43:C5:E5:E7:3C:41:5E:2E:F4:BB:55:3A
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       01962E98DDC8FDCAB37B06BD44052ED0B43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: xty506tCTR1kAWI0CRMxAqdjknWIvCHdMc9vnTSoWlg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:c8:fd:ca:b3:7b:06:bd:44:05:2e:d0:b4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=a97fdabe45f055d243c5e5e73c415e2ef4bb553a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:e5:36:e4:5b:fb:21:45:02:99:ef:94:f4:
                    a6:4f:62:fc:7b:d0:ff:f6:3d:2b:cf:75:65:67:94:
                    80:82:74:3a:2d:55:26:0d:ee:fd:43:77:33:01:ac:
                    b3:3d:64:dc:6a:15:97:28:d3:a6:28:13:07:22:83:
                    e9:6e:20:e5:cd:e4:e4:6c:88:44:f0:9a:66:14:da:
                    a1:e6:b3:2d:ee:94:fb:0d:97:cc:44:5d:41:ed:49:
                    12:ca:35:62:2e:cd:0e:89:05:70:1e:19:49:8d:d3:
                    3d:27:f2:d0:c0:10:1b:a0:2c:58:6e:94:93:68:17:
                    b8:72:32:cc:6e:b3:e9:3f:75:0c:a2:9f:9c:28:80:
                    36:21:5e:89:76:6e:64:6a:6a:4f:11:12:92:aa:b9:
                    7d:03:ed:9e:7e:86:cb:2a:00:0a:4c:4e:e0:0b:ae:
                    a6:e0:a6:c7:1d:00:42:45:01:31:fc:99:b0:1c:63:
                    96:89:de:af:bf:a8:b7:fd:d1:c6:08:f2:38:8e:c7:
                    81:e1:a9:0d:0a:c8:de:40:04:99:48:07:f5:2f:e1:
                    6b:26:18:b4:d9:b0:88:3c:ec:ee:d9:f7:4d:d7:d4:
                    1d:bb:f6:16:c1:1c:54:11:d9:b6:81:39:27:c4:0b:
                    a8:6f:f3:26:a6:fa:48:a9:8e:80:5b:cc:a1:00:63:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7F:DA:BE:45:F0:55:D2:43:C5:E5:E7:3C:41:5E:2E:F4:BB:55:3A
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5f:d0:82:20:ed:61:31:a0:2d:a3:24:4f:c9:21:c1:36:8d:
         e4:45:c2:f7:4d:df:66:31:89:d9:47:74:5c:3b:a9:3b:1b:cc:
         46:c4:11:63:01:b8:ad:d7:6d:ce:bb:73:4e:8b:4a:12:7d:5c:
         70:81:07:15:08:e4:49:11:a9:51:bf:fb:0c:b6:ea:e2:4a:1a:
         e3:d5:2d:27:e9:f9:5e:6d:4e:c1:a8:db:19:c7:fa:3a:4a:eb:
         79:fd:e3:6e:d2:2f:b3:d8:a6:12:10:bf:01:e3:28:a7:8f:fe:
         2c:63:0d:d7:66:8f:9f:11:29:a9:f0:e4:47:e3:4f:24:75:4e:
         e4:47:e6:a3:71:9a:18:a5:f4:a0:7d:22:50:29:2a:e3:84:0a:
         7b:f8:61:61:06:0d:1e:22:5c:4b:b1:83:59:19:2d:e4:a0:65:
         3f:2e:5f:02:ee:ca:c2:d6:cd:5b:2c:28:17:7f:c3:a5:55:89:
         a8:48:ad:87:8e:fb:28:cb:7c:a2:5a:62:86:42:49:8a:69:03:
         2b:71:00:07:c8:8d:ac:79:3a:14:88:a6:59:d2:76:28:13:74:
         8c:72:c2:1f:72:c9:66:2b:ba:cb:b7:2a:bd:13:f1:32:7f:b8:
         a4:97:c2:11:51:3d:dc:dd:b8:70:4b:cb:e1:c2:bc:d8:e3:35:
         1a:b1:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----