Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File:                     Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier:          9mWJRLws2a5VAA5qmZy7rb5R2Vdr2Q/ThLCkWNAw2Po=
Subject key identifier:   70:6C:F9:0C:6F:CE:A0:BB:29:E8:1F:4B:0F:03:07:9D:6B:F0:4A:F0
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer:       /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial:       01962E98AC6DFF9CCB1C2BF18D5929E5FE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
                          2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: Fbb7RpP+bjmOa+X6ybugHe7Fr+wlX3VVuBd19mXWXUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:6d:ff:9c:cb:1c:2b:f1:8d:59:29:e5:fe:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43c77b47363681378face466141d54cc88399cf5
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=706cf90c6fcea0bb29e81f4b0f03079d6bf04af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:29:12:f1:4c:7e:61:75:90:e7:93:27:09:
                    b2:7e:86:78:2d:2e:96:37:35:a6:69:99:ba:ff:ab:
                    7e:1d:5f:46:e7:c3:24:10:5f:9e:2a:d5:44:d2:74:
                    38:f8:be:d0:e6:5e:fc:a0:99:b0:45:2e:53:04:d0:
                    b9:70:29:fd:42:4f:8e:bd:78:b1:78:81:28:bb:08:
                    04:96:fc:ed:68:f4:ec:9b:d0:26:01:85:ae:a6:c2:
                    87:18:ce:e6:9f:ee:27:3d:82:f9:9a:a8:50:4d:c6:
                    ff:24:40:19:d5:db:3a:18:4a:71:6c:48:92:e5:32:
                    d2:fd:96:9a:af:db:56:48:0a:a0:fa:81:cd:8e:da:
                    7e:5b:18:e4:16:82:60:6d:5b:15:b7:e3:3e:22:7e:
                    d5:2d:e5:59:2a:6f:2a:fb:c9:6c:cc:52:01:49:b3:
                    15:c3:71:c9:07:4d:27:cb:15:a9:d1:57:de:00:1f:
                    46:17:80:96:46:94:d5:70:65:6f:9f:94:c9:bd:ee:
                    d7:a7:17:f8:a0:e5:cb:b4:3b:e4:2a:e5:6a:7e:6e:
                    da:fa:fc:b2:91:03:7e:7c:11:9b:00:21:f4:87:60:
                    68:a7:26:8c:90:89:b2:0d:50:1c:64:89:dc:a8:07:
                    88:10:b4:24:93:08:4d:eb:dd:5c:5e:76:43:57:9f:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:F9:0C:6F:CE:A0:BB:29:E8:1F:4B:0F:03:07:9D:6B:F0:4A:F0
            X509v3 Authority Key Identifier:
                keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:ae:84:4e:65:95:9d:87:23:77:8a:51:6c:75:90:e5:e0:
         28:3c:3c:2a:3a:51:b1:13:8f:ed:24:67:8d:ba:b0:d6:d4:ac:
         70:ae:a5:e1:61:12:ef:31:22:00:8a:1f:0c:93:bf:4e:87:82:
         27:d9:b2:6a:85:8a:54:f4:34:73:55:04:c7:51:c6:2b:51:ae:
         32:4f:03:71:08:9c:f9:3a:bb:3a:8a:b8:f6:fa:f4:74:38:5c:
         5d:e6:3d:7a:f5:3f:ba:e8:dc:ca:4a:c9:25:3a:cd:cb:d5:04:
         3c:4a:44:24:d1:78:0e:97:03:fe:92:77:38:b8:66:3f:35:bd:
         ee:d1:eb:49:25:a3:1c:3d:8e:48:7e:35:b1:1e:60:df:20:d8:
         9d:f7:34:ab:bc:68:e9:20:52:29:89:ac:e0:20:08:00:a6:ff:
         d0:fb:f0:71:7c:8d:1f:ef:5a:c0:41:4a:9f:22:2c:3d:17:45:
         fa:dd:b5:d9:07:fa:61:1e:8a:90:93:e1:6b:42:1b:47:d0:9e:
         3d:aa:74:3c:9a:63:a8:d6:06:06:0a:1f:f0:31:20:e2:e0:cc:
         53:70:1a:6f:73:f0:1d:30:20:83:91:3f:72:56:49:5d:ce:2d:
         a5:db:9a:f1:81:e2:19:c0:0a:9f:0a:7c:7f:55:91:4e:32:2b:
         35:62:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----