Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File:                     qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier:          VlVfm4C/zc2Ya96rLmi5nmNmXe9ej3pGFc81Ebzc/Jo=
Subject key identifier:   56:B2:B7:06:85:52:7D:73:0C:0B:78:FF:56:68:A5:CD:AA:CE:EF:CF
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer:       /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial:       01962E9907EFE6B72C12C01E5E4F4704DD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: Z6lKxuTXPyEIFwBwZSvMyuLEI6g25TgrNT7vTMMFo64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:ef:e6:b7:2c:12:c0:1e:5e:4f:47:04:dd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=56b2b70685527d730c0b78ff5668a5cdaaceefcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:62:4f:54:b3:b4:fe:44:7d:02:54:4c:ac:
                    2a:10:1e:54:5b:07:b3:a2:4d:b3:08:02:55:4f:f2:
                    43:17:e6:74:dd:a0:0d:c4:72:18:5e:e9:b3:38:eb:
                    8f:e7:51:05:f3:bf:bb:d3:ed:f9:72:1b:27:5e:95:
                    85:fe:33:d7:48:ff:4d:64:52:89:81:28:b5:dc:96:
                    9a:ad:cb:66:5a:9b:a4:b5:3b:86:3b:97:f7:b2:cf:
                    53:af:46:14:7c:c5:f4:a3:52:3b:83:f2:e7:8e:7a:
                    c7:b0:39:a5:b3:ea:dd:79:3d:20:2a:c4:54:b9:c5:
                    d1:35:d8:59:09:c5:55:92:ad:7a:b5:b1:c3:cf:1f:
                    82:e2:a0:7c:56:75:5d:a2:59:f1:69:01:d2:42:14:
                    54:d4:71:41:aa:5b:67:47:1a:71:5c:d9:91:a1:1a:
                    34:e6:01:79:47:1b:a3:d0:5b:f9:c5:5e:b9:cb:87:
                    4a:54:50:4c:22:56:23:b3:ea:40:b4:0a:1e:a0:4b:
                    9d:7d:c6:67:a6:95:1d:19:dc:6b:44:aa:a1:04:db:
                    72:54:8d:17:b2:a9:13:f3:a2:57:cb:c2:e8:cd:3b:
                    1d:f1:83:1f:68:b1:85:23:ca:ff:7f:69:7b:da:96:
                    6f:c7:5f:86:11:cf:a4:eb:d3:3e:22:44:06:1b:c3:
                    97:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:B7:06:85:52:7D:73:0C:0B:78:FF:56:68:A5:CD:AA:CE:EF:CF
            X509v3 Authority Key Identifier:
                keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:da:3e:c4:e3:6d:6e:6b:d4:66:16:fc:29:ac:b9:73:1b:08:
         6c:ca:ed:77:30:4a:6d:32:3d:8a:af:99:94:76:58:ea:23:0a:
         8c:0e:59:6a:de:59:23:ae:df:2a:e4:bc:83:1b:f6:f1:60:17:
         0e:a5:42:24:cb:d8:df:d1:2f:14:73:93:71:1b:65:d6:a1:46:
         e8:6b:dd:e7:d1:21:bd:f0:da:9d:e5:f0:36:1a:7a:f4:62:ba:
         14:a3:4d:30:3a:f3:42:d2:ad:5c:c4:f9:4a:be:ad:c8:32:b9:
         0a:86:ef:7c:43:78:c1:f2:25:ee:24:dd:c5:37:a6:97:85:f5:
         65:89:8f:8a:51:ca:18:be:64:01:7c:b2:76:21:28:4b:b7:49:
         94:92:5a:f1:4a:22:cb:8a:6f:08:44:70:ae:6d:5e:e1:1a:83:
         c5:97:79:db:06:36:31:bc:7b:86:ef:8e:1f:de:20:9b:35:43:
         46:d3:ed:73:8c:bb:44:19:dc:d1:c4:0f:5b:66:83:d6:fe:36:
         15:d4:0e:c2:5a:bd:c6:35:3e:7f:f2:6c:69:c5:98:61:2c:c9:
         59:b6:2d:20:22:00:73:26:3a:60:d3:df:cf:4c:ba:c6:4e:ab:
         ad:ab:60:3d:24:7d:8d:22:d3:01:97:cf:bb:91:d9:7e:2e:45:
         9e:32:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----