Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File:                     RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier:          3DZVllNfYta3Bbxz0SbT+bU48crCDKvYAT4V83BtuT0=
Subject key identifier:   14:3C:9E:C2:C7:14:0E:5F:03:9D:B1:EF:9B:AF:E7:4A:8E:D4:9B:65
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer:       /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial:       01962F06F53465240CD7B70C367CE0FA1696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number:          0D09
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: n800hXUVledrB34xcow0WJ2tfQ4z2z4Rccr7M4PjCn8=)
                          2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:34:65:24:0c:d7:b7:0c:36:7c:e0:fa:16:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=143c9ec2c7140e5f039db1ef9bafe74a8ed49b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:80:8a:84:d4:b0:f1:5c:73:d2:b7:9b:95:
                    cd:ae:79:2a:4a:75:b5:b5:a7:b4:a2:39:83:5b:63:
                    8c:84:68:99:75:88:2d:72:ab:44:61:3c:6e:d3:b6:
                    bd:c3:cb:86:33:86:1a:e9:ba:a3:77:84:4e:3a:61:
                    29:cd:dc:4e:85:77:25:14:7e:44:2e:63:09:e5:cc:
                    9b:28:b9:34:48:fd:b0:ac:de:85:fc:6d:95:5c:a5:
                    68:0f:9f:dc:75:c1:91:6a:b5:2c:96:b1:7c:3e:bd:
                    f5:6a:3b:f1:e1:a9:c9:5e:da:56:f1:e8:02:c5:e4:
                    ac:98:f5:3a:62:ce:b6:8e:30:cc:7a:13:f0:19:aa:
                    e9:8b:36:ce:49:a7:8f:18:14:ac:b6:23:33:5f:bf:
                    eb:59:4a:cb:6b:50:aa:e4:0e:7f:13:3d:df:e9:78:
                    3d:02:08:f0:f5:67:41:5c:18:74:92:75:21:1b:ad:
                    06:b3:ff:03:19:34:ce:a3:28:e6:4e:3e:f3:05:df:
                    e2:09:f8:02:09:69:43:f3:14:44:97:b8:de:79:51:
                    3d:33:8d:0e:23:a8:23:51:35:d4:f9:1c:d0:5b:73:
                    5a:dc:75:ba:c4:00:52:61:b8:7c:ec:39:11:d5:07:
                    9e:60:83:53:91:90:56:52:03:d1:9d:c2:ee:ec:18:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:9E:C2:C7:14:0E:5F:03:9D:B1:EF:9B:AF:E7:4A:8E:D4:9B:65
            X509v3 Authority Key Identifier:
                keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:59:14:8f:fe:71:ae:a1:7d:31:b5:9f:f9:18:4a:0c:21:3f:
         07:2c:61:6a:9e:d5:ee:ff:59:a1:b3:aa:ec:03:35:56:a9:c1:
         54:87:ff:47:f7:b2:f4:d9:50:3c:78:db:fa:51:c7:79:90:e2:
         9e:1e:8a:18:4e:92:48:bc:ad:58:e9:24:05:5c:73:eb:56:dd:
         c8:fb:9c:ab:4a:8f:8c:8c:d9:d3:c2:f4:66:68:d9:be:42:36:
         d2:15:2f:8c:54:c2:5f:60:33:4a:f4:dc:d8:8b:91:77:17:cf:
         76:a8:39:11:fa:54:37:1f:3c:3f:c6:01:55:4d:f2:1e:57:ad:
         3e:79:85:84:8f:dd:4b:14:00:68:e9:f3:c9:69:23:f6:e6:3c:
         f2:02:c4:9a:27:a0:1b:dd:7e:5f:19:68:57:d7:0d:52:db:eb:
         e9:9c:24:c0:4e:ee:ad:eb:f1:59:f5:c8:9e:53:d4:2f:8b:9b:
         15:31:95:87:be:b2:e4:9c:50:04:ab:f0:46:3b:73:f5:2a:30:
         b2:9e:18:13:9f:9a:14:cc:c0:bc:c0:dc:eb:51:4a:2f:5f:b2:
         11:f9:16:f3:47:13:ea:8d:85:76:d2:1c:40:70:66:a8:6c:cb:
         de:a6:d9:4f:38:02:4f:a3:f2:fd:c1:28:31:c8:6c:4f:ef:ca:
         f1:56:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----