Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File:                     0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier:          6qyTatFYH00zQsOwa8mB4Rk73ud45NkKnOMMjHdvwNs=
Subject key identifier:   82:6A:91:B4:94:98:E2:82:1F:93:7A:3D:15:01:AB:63:B9:89:F2:D4
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer:       /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial:       01962F06D66A1296928523F378CB3AFC7C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: MVMVdbvVJpVN9ti+lTEzlPpbAu7Cy18M6YLMjcZCttI=)
                          2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
                          3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:6a:12:96:92:85:23:f3:78:cb:3a:fc:7c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=826a91b49498e2821f937a3d1501ab63b989f2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:2a:29:ba:87:49:ce:9e:fe:2b:b4:66:19:
                    c1:dd:3e:09:cd:7c:e4:5f:8d:e5:d0:7c:b0:8e:08:
                    91:91:bf:42:42:61:9a:8a:ca:8e:33:87:e9:7b:af:
                    3d:49:e0:2a:ca:02:8f:35:3e:0a:c7:62:bc:91:d3:
                    24:c5:2a:9a:dc:20:b1:bc:bf:cd:52:cb:97:ad:a8:
                    8f:e1:9f:18:d5:a0:9e:b4:b0:60:f2:a3:2f:ac:a1:
                    50:0a:25:1b:fb:4c:f8:e9:57:f1:5b:a2:e4:9d:02:
                    27:5b:07:e9:3e:f3:c9:dd:55:6d:d0:51:55:03:73:
                    13:1b:dc:61:11:ad:4a:13:e1:cf:63:49:9b:e5:55:
                    b9:81:91:8d:ce:a6:63:5f:8d:cd:35:1a:c0:2a:cd:
                    d0:99:c4:35:da:b3:de:1c:d8:30:0d:c5:e5:d5:0d:
                    4a:4d:c0:a1:8f:9f:57:81:4a:bf:1c:3e:10:46:ce:
                    bc:9a:c0:cf:45:ef:75:78:e5:4d:68:0b:a9:4b:51:
                    d0:7e:64:80:0c:2e:25:80:1d:b6:03:38:50:2e:01:
                    23:f4:fd:47:c9:50:1e:3a:50:2f:2a:21:cc:09:4b:
                    4c:cf:ce:23:ce:56:99:e9:58:77:70:d6:be:40:84:
                    ae:45:53:6a:e2:bc:ac:c5:a9:b1:6d:71:35:a2:2a:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:91:B4:94:98:E2:82:1F:93:7A:3D:15:01:AB:63:B9:89:F2:D4
            X509v3 Authority Key Identifier:
                keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:60:d2:0e:a6:89:37:ae:ef:14:a0:4a:8b:5b:77:12:fb:
         29:70:a7:83:8b:11:bf:9e:52:c7:23:d4:d1:ec:36:bd:38:99:
         6b:a6:be:4c:54:ee:cf:a5:75:6a:5a:8e:ff:a0:d4:01:95:a2:
         9e:e7:14:bc:7d:17:47:72:51:4d:e6:ca:2b:90:38:93:19:23:
         b9:b3:d8:3b:ac:04:92:72:d1:fe:00:c7:4f:db:b8:a6:85:46:
         27:32:05:94:b6:da:6f:3b:88:7c:7b:fc:a0:af:cb:b6:3a:29:
         3e:af:23:fe:82:6a:e0:80:e1:d0:c6:f6:cf:df:b7:29:07:f7:
         98:1c:89:9d:1f:a0:34:24:81:8e:44:2b:4e:81:d0:69:f9:87:
         58:87:56:80:d3:47:48:ad:48:ee:b3:74:04:8f:dc:e4:1c:f0:
         7a:ff:a1:28:5f:c6:71:b0:ed:6d:04:46:c7:c7:e6:42:53:73:
         57:35:12:72:15:b6:ae:44:16:3c:bd:67:04:cc:90:fa:08:2b:
         9f:8b:49:9e:ec:6b:fa:e1:44:ff:73:b9:20:f1:9f:87:bc:a2:
         21:6f:38:21:2d:da:97:bb:ac:ab:45:e0:c6:5a:9f:bf:78:9e:
         70:28:7e:ab:aa:31:49:80:e1:17:85:23:04:d2:70:ca:be:90:
         23:3f:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----