Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File:                     Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier:          67vrFSZqt7WfOr2q/tkeI5LFFg+6JcpQy3BN9Mc9zFA=
Subject key identifier:   20:64:5F:D2:6A:3D:04:4A:9C:08:DD:1E:2C:5D:73:1E:E7:FE:15:67
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer:       /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial:       01962F06FA56B981798EC85067727061A4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
                          2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: aglG9Z9Rc/mayuHr81D+D4Iy/SSUhQCSAj3LjUQu5NU=)
                          3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:56:b9:81:79:8e:c8:50:67:72:70:61:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=20645fd26a3d044a9c08dd1e2c5d731ee7fe1567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:3f:6d:8d:98:4b:79:9e:45:02:e1:80:a6:
                    92:46:df:49:05:7c:67:dd:d1:0a:5e:4a:8f:0c:2b:
                    c7:01:b6:57:d4:e0:5d:17:6d:e0:ed:59:de:c0:29:
                    8f:b7:f9:df:1b:5c:66:ee:6f:dd:8d:6d:17:da:79:
                    9b:03:cb:01:7b:86:29:78:07:d7:25:c7:60:43:ef:
                    99:9a:52:99:93:18:bf:22:00:b9:ab:c1:8a:2b:80:
                    60:ef:48:af:a4:ba:4b:99:9a:8f:71:b4:86:04:39:
                    58:33:1b:e1:b0:84:ae:c2:5e:31:7f:2b:ae:04:e9:
                    89:c0:be:d9:86:10:da:53:54:49:65:ac:3b:9c:5c:
                    7b:f2:16:34:5c:ac:f1:49:fa:a7:65:7b:77:63:e4:
                    1b:8b:c5:22:05:d7:70:61:af:ac:94:8e:0d:cb:c8:
                    6d:c5:58:e9:f6:ba:d1:4c:3f:25:4e:cd:e9:44:73:
                    ad:73:29:c7:8c:8f:b1:9b:a3:24:1b:b8:5c:61:ed:
                    b1:db:e9:13:e6:42:07:08:1a:b8:f5:be:89:cc:d4:
                    79:40:5b:60:2f:72:a9:ef:46:07:49:b6:8d:f5:e0:
                    3e:0f:59:10:fa:da:77:7a:c2:8c:92:99:60:ee:37:
                    22:b9:79:6e:48:1c:f9:88:c8:d9:59:9e:49:06:f3:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:5F:D2:6A:3D:04:4A:9C:08:DD:1E:2C:5D:73:1E:E7:FE:15:67
            X509v3 Authority Key Identifier:
                keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:87:0a:8c:9f:87:81:bc:d0:dc:fd:bc:f4:3b:6a:d7:04:39:
         25:86:84:6b:61:4a:61:85:3c:4b:52:bf:1d:41:41:d1:82:b2:
         67:82:c8:cf:de:79:e5:5f:0f:02:29:99:07:85:61:e1:bd:a7:
         f7:c9:a5:2e:66:c3:79:32:0f:8e:86:aa:a3:bf:e7:6d:30:52:
         a4:0a:06:a5:38:30:50:9c:59:af:44:72:f0:03:ef:63:00:ca:
         82:7d:e2:ed:ec:13:c9:46:ea:82:ed:9e:07:80:84:1e:cd:da:
         e1:ed:d6:5e:c5:a7:d1:6c:2f:74:67:8c:fb:cc:03:9a:e8:a8:
         0a:b2:28:2c:a6:d8:06:98:96:62:fd:37:c2:ba:0c:ac:8f:93:
         8a:0b:a4:9d:47:8e:8c:ad:af:4d:73:b5:5e:a4:1c:e3:89:ab:
         2d:0d:6a:db:78:01:3e:be:63:4b:28:0d:9f:b1:1b:c2:30:d0:
         f7:d8:03:aa:2f:e1:12:76:37:37:56:9a:2f:f9:2b:65:12:c9:
         a4:4a:7c:e3:a9:32:ec:bf:80:8d:4f:41:a2:68:19:c7:d9:20:
         73:e3:13:00:07:65:c8:9f:bd:f1:a8:e8:b6:7a:33:9f:46:fc:
         1a:11:71:a4:69:1b:ce:c2:36:1e:8c:e7:48:74:b7:a7:f2:af:
         06:42:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----