Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File:                     q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier:          9MlOjZD0qfdMIg+Feq4BugPvsdwkM8wCP1+GXy2GRMI=
Subject key identifier:   9B:3C:7D:D9:55:45:C2:4F:A0:9A:7D:14:41:E1:2D:B1:A8:83:D9:14
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer:       /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial:       01962E2B33E07316F5D23EC5093B297CE348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
                          2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
                          3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
                          4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: pxEHnYRhUOAt9PIFChCKc3lF4+n8vZ2X1buFNgbPJZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:33:e0:73:16:f5:d2:3e:c5:09:3b:29:7c:e3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=9b3c7dd95545c24fa09a7d1441e12db1a883d914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:54:71:9f:41:36:e7:cc:87:16:3a:e6:26:
                    71:74:c7:87:8e:a0:3f:5a:37:b4:ad:9b:6f:0c:9c:
                    de:a7:fc:fe:f6:e9:5b:2c:43:08:b6:aa:42:2a:ab:
                    d8:9d:64:ba:21:e1:fd:90:1b:08:a1:3e:59:3f:12:
                    85:d5:54:8e:d2:ac:4b:8e:6d:12:43:df:58:5f:4c:
                    2f:9c:25:40:c0:09:fd:c0:f5:23:40:66:dc:cd:02:
                    a6:88:aa:a2:4f:ee:fe:c9:e2:a3:7f:93:dd:4e:cb:
                    71:e0:f2:f8:bc:37:a5:3f:2e:5b:57:e4:22:5c:39:
                    bb:7c:06:20:9b:8a:bf:48:3c:84:29:f7:07:e7:1a:
                    a7:a9:b0:06:0b:79:6b:b0:93:6f:06:72:37:91:a0:
                    09:f6:3b:1d:89:fd:af:43:da:5f:5d:f3:48:32:41:
                    28:e4:4a:43:86:9d:16:3e:e7:22:55:cb:82:12:3a:
                    6e:de:f0:c2:f8:f0:12:3e:84:4c:6f:9e:05:0c:99:
                    f8:63:8a:a5:6c:b2:14:32:fb:fc:4c:5e:cb:62:e5:
                    9a:b2:0e:b3:fb:94:57:6e:a1:bc:78:1e:38:73:5b:
                    bf:7a:04:72:62:f1:ee:bd:ac:42:e2:3a:2c:66:d5:
                    ff:77:85:79:96:c6:cb:35:52:9f:92:a1:2e:7f:22:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:7D:D9:55:45:C2:4F:A0:9A:7D:14:41:E1:2D:B1:A8:83:D9:14
            X509v3 Authority Key Identifier:
                keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:c8:a3:6d:a3:6c:8f:ce:61:e4:47:00:c3:36:45:0b:5d:
         b6:f7:f1:b3:fa:e2:2e:90:de:e4:78:9b:9f:2a:f9:56:82:fa:
         01:7c:2c:7c:4f:9a:8a:7b:d1:a5:10:b1:09:2d:1e:1b:77:c3:
         b3:82:f8:dc:73:ba:46:e2:f4:54:08:49:c0:6d:a4:07:05:2a:
         a4:c6:1b:73:3e:e8:af:b8:e5:53:7e:85:4e:c8:45:b4:30:6d:
         36:a7:b9:bf:82:4a:90:f9:83:a0:61:fc:13:55:ee:4f:f8:bc:
         c8:1e:71:c3:80:6c:a7:27:9d:6e:f1:36:f4:56:65:e1:a2:c4:
         5b:41:37:b0:66:25:7b:38:9b:6e:c1:b2:a6:40:09:7c:9f:9a:
         8f:8d:30:1e:cd:77:36:68:82:b7:32:5c:51:e2:96:62:a8:0c:
         af:71:ef:27:19:a7:f4:7f:dc:82:92:29:5d:8f:75:d0:31:57:
         03:90:42:28:2c:4f:19:ae:5d:90:48:f0:91:32:95:b9:0d:67:
         8e:dc:95:98:6a:78:67:c7:a1:ec:9f:2d:67:09:0e:50:d8:2e:
         16:12:c3:10:16:86:05:9b:7d:36:e8:a0:fe:cf:11:f3:8b:77:
         ef:5c:95:a3:1c:db:b9:02:4d:16:7e:00:d5:c0:1d:19:95:dd:
         29:36:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----