Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File:                     CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier:          Lb28g/N7ndnxmNZCvMgZngGRqR0mrQbNlL5gJh1rL0Q=
Subject key identifier:   BC:72:8D:33:37:D5:5E:A1:76:9E:B7:A1:A2:9C:9A:7D:57:7D:6E:6F
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer:       /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial:       01962DF3B35B4B219582B4FE2EDC66CFDFCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number:          137D
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: uhZD63/398AFAHZa4XoFWzq6Xm3AY7O81qMaa1POJM0=)
                          2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
                          3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b3:5b:4b:21:95:82:b4:fe:2e:dc:66:cf:df:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=bc728d3337d55ea1769eb7a1a29c9a7d577d6e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:c1:52:eb:6c:7c:a3:13:23:0c:e6:2d:17:
                    04:51:a2:e9:ca:19:23:4f:13:33:c0:c5:78:5b:6d:
                    32:bf:fc:65:70:45:81:cf:15:75:71:92:3b:01:ab:
                    91:30:0c:13:64:c3:54:4b:fe:bd:06:51:a6:4f:92:
                    6d:9d:74:10:2e:35:32:a9:4a:89:9a:70:ca:aa:9d:
                    d0:e0:58:78:1d:dc:05:ba:1c:9b:bb:b9:00:cd:e9:
                    ea:43:15:6a:33:45:61:ff:77:94:eb:70:d3:aa:d3:
                    2e:ad:c8:27:42:0f:66:71:d6:dc:74:71:fb:53:9a:
                    6d:a4:75:95:ff:09:67:74:e9:f7:f4:68:3a:96:ab:
                    5b:14:ff:9d:d9:0e:06:22:df:1c:7e:c7:48:74:d6:
                    d5:58:c5:40:d9:24:cb:97:9d:e0:66:1a:3c:e9:44:
                    45:ea:f2:49:74:f5:0e:51:00:c1:95:c4:01:dd:9b:
                    ae:60:22:ec:46:65:e9:7d:87:c4:46:82:87:06:58:
                    f9:f0:c6:b0:92:14:ca:5b:58:e0:4a:b8:a7:64:e0:
                    2d:e0:03:61:21:91:1d:b1:7a:ab:c9:24:b3:8f:eb:
                    ae:19:21:4c:10:2d:1a:fa:26:d0:38:43:5d:e8:ab:
                    27:03:6f:c8:61:75:fc:d3:aa:31:5c:73:f2:e3:d9:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:8D:33:37:D5:5E:A1:76:9E:B7:A1:A2:9C:9A:7D:57:7D:6E:6F
            X509v3 Authority Key Identifier:
                keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:77:49:1a:eb:1c:64:28:94:7b:27:f6:cf:a9:0c:52:10:90:
         5c:8f:da:51:e7:9d:cb:3b:04:fb:95:de:3e:db:b6:a2:30:44:
         d0:6c:d5:19:64:97:23:7f:5f:d3:a0:fc:df:d0:bd:0d:e5:2d:
         5f:6b:c4:23:43:62:30:85:b6:59:51:ec:87:60:dc:58:82:7f:
         bf:bf:da:73:23:e4:76:cb:9f:f6:6e:4e:54:dc:53:49:59:b3:
         74:7d:07:41:66:27:74:32:cc:72:c1:0a:42:70:9e:2a:b3:b2:
         97:18:de:a5:4a:78:c5:54:ab:d6:31:3d:98:9c:79:a1:f3:2d:
         93:96:88:28:a2:f2:3f:05:a0:a6:4a:38:ec:d3:9a:6b:09:2a:
         6e:ad:c3:5e:d8:9a:56:7d:5b:12:38:30:12:02:65:76:07:8c:
         3b:02:09:35:5f:8d:cf:6e:14:40:0e:24:c1:2a:5a:ef:37:f1:
         ba:52:33:87:f9:2c:28:5e:34:cc:93:7a:77:a2:36:d9:94:87:
         08:18:c9:6d:60:54:de:80:11:dc:92:4f:87:c5:05:3e:b1:91:
         c9:4d:8a:01:2d:fa:5c:50:eb:08:a6:fe:bd:c4:cd:17:e6:0f:
         36:55:d8:81:88:1e:37:80:5d:77:94:f7:53:01:34:31:40:06:
         77:24:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----