Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File:                     Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier:          W44gwUR85lpoSQxHqb6FwgcpE1iSgjkYXQWWvOMr2wQ=
Subject key identifier:   E2:1E:5B:7C:6B:E8:C6:76:4C:FB:23:DC:D6:8A:D3:FB:DA:5D:4D:28
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer:       /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial:       01962F74B210CC65F9AA4DD3B812ADA37313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: LV0PrwUwApuyDUZikJDi74P4PbM.roa (hash: CRURkBwcTmvzFW2izVL5pwlfr/5l3k8aD0Pamg8MVGM=)
                          2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: dCP0YitpGYH2ODa2tMNhIJEcEsDOnPmqLg3ysYb1z7c=)
                          3: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
                          4: z3CwNMmW91OeZadetIEGWrLgAV8.roa (hash: TBa7E7IHnq9QvWerYacnX6IUM0n0LVVjA36Ue+17mgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:10:cc:65:f9:aa:4d:d3:b8:12:ad:a3:73:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=e21e5b7c6be8c6764cfb23dcd68ad3fbda5d4d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:2a:63:4e:7d:90:bf:b3:51:82:90:4e:73:
                    d2:35:bb:ad:51:c6:e7:b9:b9:91:88:40:62:bc:3d:
                    f2:b4:9c:53:3f:20:ef:00:8a:16:e3:7f:c2:24:6f:
                    8e:bd:c8:27:64:ef:dc:44:ac:a6:24:b4:6f:38:52:
                    69:bb:3c:1b:2a:c3:1a:76:34:0e:f1:56:f9:50:02:
                    e1:25:2f:5e:bb:a7:e9:bf:5e:e1:2c:ad:4f:67:c8:
                    0a:27:a9:d5:ab:c3:14:36:cc:2f:c0:77:50:6b:5b:
                    50:d2:96:e8:98:18:2d:a6:74:06:59:d7:8a:a4:10:
                    5f:f7:71:70:d2:29:2c:01:37:5e:ca:02:09:dd:ee:
                    f2:66:cc:a9:3c:73:c6:68:e0:36:0d:2e:04:92:1e:
                    8a:bb:fb:a6:a4:f9:85:c9:eb:52:6b:21:d0:2d:c7:
                    55:bb:27:ab:27:e7:67:5f:14:91:c9:bd:d0:c2:28:
                    b2:69:7d:b3:39:b3:65:40:28:e0:a7:cc:e6:85:45:
                    17:33:e4:86:99:a5:5e:fb:66:b8:12:cc:c4:38:88:
                    41:db:09:70:67:c5:c4:4f:a2:cf:1c:28:87:95:42:
                    04:0f:90:a5:ab:50:8f:ea:95:32:53:73:78:b1:73:
                    41:ad:d0:49:24:3d:1a:31:1d:34:3b:0f:83:e4:1b:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1E:5B:7C:6B:E8:C6:76:4C:FB:23:DC:D6:8A:D3:FB:DA:5D:4D:28
            X509v3 Authority Key Identifier:
                keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:e8:ba:35:62:7d:14:6d:ed:d9:b0:59:dc:41:e5:e8:b9:
         01:96:d0:a5:8d:a6:cf:ab:b1:6f:a4:7b:03:c8:87:40:a2:78:
         9a:74:a1:79:9b:bb:55:6c:f0:53:11:e5:88:1f:b4:02:8c:e8:
         6b:f8:56:35:0c:06:ab:a7:61:be:0f:da:cd:f2:c1:c3:6d:94:
         a6:66:48:d2:72:4a:d8:1b:96:2e:f9:10:31:f0:f1:85:a1:9c:
         7f:45:2a:22:1c:13:37:5f:f2:11:ce:42:ef:4c:ab:b2:29:fc:
         fc:b2:58:a3:d1:ea:ab:6f:68:0f:fa:1d:13:68:9a:33:18:41:
         fa:cf:95:75:f2:ce:32:2b:39:c2:8e:3f:8f:e3:89:8b:63:e9:
         4f:97:cd:16:41:6f:4c:fd:51:9c:47:f5:96:0f:6c:1d:5e:e5:
         95:cb:86:56:8b:1e:2f:cb:bb:c7:31:2d:50:7e:bc:49:1a:d7:
         dd:91:bd:d2:1c:61:d3:b9:b5:83:60:cc:51:c7:00:36:c0:dd:
         b7:00:4b:c6:32:b9:b1:fc:22:9c:c6:55:7d:40:66:4b:38:5a:
         42:c7:a1:6a:13:46:51:77:86:fa:65:36:84:71:f3:25:d4:58:
         da:99:39:57:a6:e2:6a:74:0f:af:24:1a:75:8e:ca:69:8f:ba:
         d3:3a:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----