Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File:                     pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier:          mTFaCJ303p5aJ7mbZIdJAlQ9PrgBlTniNHOJ1rjH6y0=
Subject key identifier:   A4:40:2B:A2:59:C1:CC:2C:37:33:C8:86:34:DD:CC:84:01:03:42:8D
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       01962FAB9F339FA818C2B25F783B2191F673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
                          2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
                          3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
                          4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: 7pEXQY+Xfi0C/akuWSk6ZEd5+Nh6cG07SmQfhUHZDP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9f:33:9f:a8:18:c2:b2:5f:78:3b:21:91:f6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=a4402ba259c1cc2c3733c88634ddcc840103428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:3a:e6:21:a8:cc:84:f1:39:67:85:35:44:
                    df:2b:8a:43:a8:28:df:7c:f4:2d:2e:f1:42:ae:f6:
                    f7:c9:45:b5:2c:52:ad:8f:26:74:61:f2:89:6c:05:
                    f3:1b:c1:b9:26:df:57:c3:cf:9f:b5:86:5f:89:00:
                    0e:8d:6f:be:9c:f2:82:d2:3a:08:f0:2d:53:1a:9d:
                    47:e9:2d:45:48:0b:8d:a2:0a:bd:83:e4:a1:39:b3:
                    e8:8d:6a:67:e9:69:2a:33:86:01:b6:27:7b:d6:89:
                    2c:21:5a:64:5a:cd:fa:3c:77:fe:3d:f2:12:2e:9e:
                    bc:ba:11:01:86:c7:0f:93:74:36:da:49:81:91:54:
                    70:f5:25:60:75:bf:a7:c8:a9:78:fd:e2:31:ce:db:
                    3c:81:13:7e:68:e9:9e:ba:77:a9:68:5c:a3:56:7f:
                    e1:75:ce:76:d7:5a:55:f6:ce:df:67:b7:2b:c2:36:
                    58:36:cf:f5:7f:94:ac:82:7c:6c:02:80:d4:52:3c:
                    18:48:7a:97:61:c0:27:f6:ad:4a:eb:5d:19:95:87:
                    15:6f:00:2a:af:f3:df:a8:0a:19:66:59:14:37:c1:
                    05:a3:38:6d:db:1d:9c:c1:97:f1:8b:9b:0b:e7:ae:
                    1a:60:3b:bf:f2:d2:ef:8b:d2:9a:e5:b2:2d:7f:08:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:2B:A2:59:C1:CC:2C:37:33:C8:86:34:DD:CC:84:01:03:42:8D
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:75:4f:65:74:91:45:62:34:95:ef:44:37:c1:62:cc:bb:
         9d:8a:b6:1c:ab:58:72:eb:6b:46:2a:74:7e:d7:4a:7b:77:61:
         6e:3b:29:e9:2f:26:fe:1b:8c:11:6e:1c:5c:a1:71:3c:ea:f0:
         3c:4a:ac:e5:e7:34:41:27:75:92:f0:18:3c:03:64:12:cc:66:
         d6:96:b3:9f:88:cb:db:dc:30:36:a8:8b:93:46:be:fb:09:f3:
         ba:0a:9a:66:43:6c:4e:18:2f:40:28:1c:d4:7a:bd:eb:af:81:
         0a:28:ab:2a:a1:5b:ed:fa:8b:db:5f:e4:1d:ce:24:2a:83:48:
         28:71:54:1d:7d:ad:e9:e6:b2:73:87:24:6e:64:ee:f7:8e:48:
         48:fd:b6:02:ca:ae:f0:0a:e3:2b:b6:65:31:7e:0c:b9:4b:ec:
         c9:16:21:7a:8f:46:14:99:03:69:09:a3:85:61:5c:30:0f:36:
         ae:46:cb:54:6f:0c:06:c3:69:c2:e8:ef:23:2a:78:81:1d:ba:
         2a:2d:18:48:a0:46:ae:7c:a8:ed:2c:7d:66:9f:6f:3f:e3:20:
         78:84:1b:a3:15:5e:9d:97:ce:9d:0a:76:33:f9:cc:c7:e7:3f:
         b8:75:3e:93:97:40:88:ae:16:26:3b:00:51:02:12:ff:72:2d:
         3d:ed:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----