Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File:                     Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier:          TyiZdLInD1OPiHyaCI7ZYMbA+rpHxDzN2UQA6uT4KjY=
Subject key identifier:   30:B0:87:C6:AC:55:64:BF:3B:C0:8E:7E:CD:C6:E8:00:53:B8:35:D8
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer:       /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial:       01962F06A4C10F9CB43E208F2321194D2860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
                          2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: OIY3h5pROJYHXn8jCA+/oQpLbdledwKkR0I0WSYuCNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a4:c1:0f:9c:b4:3e:20:8f:23:21:19:4d:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=30b087c6ac5564bf3bc08e7ecdc6e80053b835d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:ca:24:60:73:4d:0b:88:97:49:59:0e:fe:
                    19:53:0a:f9:a5:84:43:88:fd:e0:1d:9c:44:fa:4b:
                    da:8d:46:53:30:d7:1e:c6:fe:97:8d:11:dd:27:22:
                    9a:73:47:b2:fd:95:3f:d3:e6:08:b6:ba:84:2f:0e:
                    61:aa:3f:6e:fc:90:02:11:85:64:38:ac:a9:e9:94:
                    cd:22:3a:05:ab:25:76:f5:0d:30:74:4e:22:2e:50:
                    0d:1a:9f:c2:53:03:a4:5f:04:79:b4:03:cc:f3:6a:
                    b6:a7:5a:b3:6e:9e:41:bd:f6:13:e5:51:88:fd:74:
                    88:da:f1:50:d6:63:d8:22:80:3f:48:6d:c8:94:77:
                    81:4d:d6:76:8a:d3:ca:58:4d:6a:c7:cb:fc:0c:32:
                    f7:8e:7a:cf:ac:c1:6f:0f:11:b1:70:1f:b0:86:99:
                    5c:4f:6a:d0:70:10:ff:63:58:11:5f:83:18:29:a2:
                    92:7f:3c:e1:4a:13:db:6f:f8:74:29:ea:0e:6a:4e:
                    32:18:f8:4a:b7:14:50:dc:bf:37:b8:9f:4c:14:3b:
                    ab:f5:e8:27:f3:fe:e8:f2:b1:80:89:8c:13:4a:36:
                    2e:07:9d:83:4d:e4:23:49:d2:0b:db:95:e2:bb:af:
                    8a:be:f7:dc:c0:a2:42:ce:4f:36:f6:40:80:48:fe:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B0:87:C6:AC:55:64:BF:3B:C0:8E:7E:CD:C6:E8:00:53:B8:35:D8
            X509v3 Authority Key Identifier:
                keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:97:b0:63:45:e2:4a:8d:4a:49:ef:e9:ad:e0:78:dc:dc:
         9e:ed:13:74:4c:b4:5a:10:70:54:e0:ed:fa:ff:6d:49:22:33:
         5a:0b:ea:86:d3:12:c3:99:fb:14:20:70:85:ba:79:8f:3b:c5:
         70:f4:bf:c0:8a:b5:37:b0:65:f4:3f:7d:cc:a1:66:39:eb:19:
         e9:62:63:5b:14:fe:58:58:87:76:fc:56:05:f0:df:5f:0e:7e:
         84:ae:39:52:26:ca:74:ae:aa:30:78:ef:bd:cc:8f:52:c0:f3:
         69:34:43:77:39:e2:8b:9d:9f:6d:6f:4f:d5:60:5b:09:7f:8a:
         94:1a:97:11:e9:47:58:69:77:0e:40:0b:5a:3e:35:cf:a8:1a:
         b6:f3:2b:08:fb:13:63:22:c5:54:1b:92:58:13:a8:01:f9:ca:
         c8:e4:40:e8:43:6f:a9:5c:ad:5b:7d:45:ba:5c:d7:88:23:20:
         ed:b4:01:63:ae:55:8b:ba:e4:c2:37:fa:f3:4e:3c:28:06:89:
         f1:06:64:d7:e8:dd:36:77:1e:e1:05:95:52:fa:30:96:24:cc:
         ca:a8:11:53:44:35:25:9a:96:c8:a5:16:84:d3:8d:7e:90:6a:
         d1:3d:16:ad:5a:22:6e:1c:63:77:d4:aa:c5:55:28:b0:e2:28:
         fc:e7:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----