Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File:                     Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier:          ldg/UtHp4Z4c73FwLgZEq+tFa0AxF3fcv3Fs+HrAMIA=
Subject key identifier:   D0:8D:25:00:0B:44:11:14:3D:1B:76:3C:0E:1A:E1:25:CC:3D:04:DC
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer:       /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial:       01962E98C4BB9CD53407C654EED9EADC06E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number:          083E
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
                          2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: tziers9cQnQYQRXv0ZqvE5QjQBzVDEvo5hLbAFKVa/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:bb:9c:d5:34:07:c6:54:ee:d9:ea:dc:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=d08d25000b4411143d1b763c0e1ae125cc3d04dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:f4:9a:e4:87:69:6d:69:0b:e3:d2:00:85:
                    0e:a3:76:e1:01:5b:89:ce:8c:57:ea:1d:ee:16:cc:
                    d9:04:73:c2:76:37:39:dc:60:78:88:0b:60:ce:44:
                    99:dd:1f:3c:22:82:89:56:92:8e:76:bd:2f:31:9f:
                    f5:32:31:69:83:14:6a:f5:77:a0:c7:75:2b:47:44:
                    30:1d:1a:2b:38:47:df:4f:da:92:77:e4:ab:f6:a9:
                    d4:e9:68:5c:a7:89:0b:a2:4f:f8:62:2d:54:2e:d8:
                    ab:de:5c:22:c4:50:de:fb:5c:4d:80:bb:f1:e0:7a:
                    d2:09:61:e7:77:29:91:a1:a1:33:29:f8:17:af:e3:
                    fa:3b:a9:26:48:d4:7e:8d:9f:a3:27:51:72:06:c6:
                    56:74:f5:2a:51:84:e8:d6:46:a1:70:d8:b0:78:5e:
                    5d:04:c8:fc:e8:9b:8d:7b:b3:8f:c6:7f:0a:de:8a:
                    1e:6a:28:26:b7:99:40:4c:0e:6e:43:38:01:27:67:
                    e5:29:aa:86:a1:33:55:69:42:91:69:b6:78:65:ba:
                    12:bb:fa:82:46:4e:e4:f1:b0:7a:8e:fb:2b:1b:e1:
                    79:17:fd:3f:43:94:15:08:ef:2e:0a:85:5d:31:cd:
                    bb:54:d8:cf:d9:34:44:47:91:1b:65:18:3e:14:72:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8D:25:00:0B:44:11:14:3D:1B:76:3C:0E:1A:E1:25:CC:3D:04:DC
            X509v3 Authority Key Identifier:
                keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b2:9a:eb:3f:49:37:74:20:e2:28:0c:dc:92:e4:f3:7b:b8:
         79:3e:3b:00:5e:79:55:d1:d1:dd:22:0b:89:36:2e:d5:ec:c1:
         db:9a:1e:af:8c:70:54:a3:4a:29:ec:64:eb:59:9e:13:62:07:
         23:07:a2:1c:2e:0b:0e:ba:20:b5:e4:ca:fc:dc:51:66:79:f9:
         84:f6:ab:bf:04:51:69:e1:5f:eb:1a:4f:91:fa:3d:e9:b9:31:
         9a:df:c1:da:d2:47:80:2e:ac:ed:aa:b6:47:8b:49:8c:5e:66:
         f4:54:a1:dd:da:72:db:d5:18:03:80:a7:a5:23:31:58:80:40:
         fe:8d:d1:9b:50:97:12:c8:38:6c:b6:05:52:de:dc:6c:70:c6:
         9b:26:33:53:29:9f:16:d5:ad:3d:30:32:64:09:e5:84:65:3b:
         51:4c:b4:d9:15:52:dc:ec:6e:0f:96:53:b0:e1:42:3e:4c:92:
         6b:a3:c6:d9:49:e3:73:be:fb:8f:41:f4:49:9e:8d:e8:07:8f:
         8d:73:07:a9:1c:43:d8:28:5d:d3:3f:e3:00:2f:75:70:89:4e:
         9f:61:56:8a:ef:4c:b8:f6:96:bd:57:b3:24:64:73:13:cc:cd:
         90:59:41:f5:b5:5f:fd:56:c4:05:0c:26:98:be:6a:92:49:cc:
         d7:8c:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----