Manifest

$ rpki-client -vvf rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
File:                     FF0595CB477C33B6B94C7E477213C842A6067D6B.mft (raw, json)
Hash identifier:          T5ZHbDdZDUnP8tVlVKdYuVTUJM0Brtzqz6aDosyDZ/s=
Subject key identifier:   C4:9D:66:EC:88:A5:F8:05:52:03:C6:71:5B:18:55:3A:98:0A:6C:B7
Authority key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Certificate issuer:       /CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Certificate serial:       6EEA659CD8D33680FA1236DD5ABD93F3A9BA8FA5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
Subject info access:      rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
Manifest number:          04FF
Signing time:             Sun 13 Apr 2025 12:27:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:22:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:27:01 +0000
Files and hashes:         1: FF0595CB477C33B6B94C7E477213C842A6067D6B.crl (hash: ZL3J6PnZTm0Uz4c5hbyqI1LHzI/dZT6TohEaNRPLNdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:65:9c:d8:d3:36:80:fa:12:36:dd:5a:bd:93:f3:a9:ba:8f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
        Validity
            Not Before: Apr 13 12:22:01 2025 GMT
            Not After : Apr 14 12:27:01 2025 GMT
        Subject: CN=C49D66EC88A5F8055203C6715B18553A980A6CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:2c:84:0d:2e:3c:12:1c:d4:92:44:e6:00:
                    75:a5:8f:fd:96:2f:c0:81:b2:76:f4:dd:64:59:b9:
                    2d:8d:37:44:53:29:76:57:c3:c8:94:30:80:aa:3c:
                    8d:7a:a4:2f:ce:2d:98:22:94:5f:44:bb:03:a9:37:
                    d4:e5:32:cf:61:e4:ff:dd:43:0d:1f:41:1f:92:f1:
                    1f:0c:44:a8:5f:bf:7f:48:d6:50:21:86:f8:4c:29:
                    58:25:13:cb:fd:74:64:49:65:97:a7:7a:f9:17:40:
                    0f:9b:83:27:68:55:0e:e2:f3:63:5d:0e:19:52:64:
                    39:8e:8a:c3:8c:c3:85:f7:8a:a4:fb:b0:2c:b2:dc:
                    dc:9f:0a:27:22:5b:87:e5:d6:85:40:0c:0e:7a:c7:
                    a6:0a:3e:99:51:9e:5c:5f:b9:b5:c7:9b:2c:ec:12:
                    de:8b:5f:51:90:48:44:a6:ec:69:06:e2:7b:6b:c5:
                    db:cf:67:f3:02:a7:5c:ac:79:e7:69:3a:7d:ab:20:
                    de:ad:d5:c5:18:6d:f9:ff:3f:fa:b6:29:1e:07:91:
                    08:77:a8:c2:c2:87:69:20:f0:f7:c6:f9:c4:86:9a:
                    ba:0c:55:bb:00:e9:0e:62:b0:1e:fa:3b:3d:83:2e:
                    7b:d6:51:a9:7a:ee:0b:98:da:e5:29:04:99:4b:c3:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9D:66:EC:88:A5:F8:05:52:03:C6:71:5B:18:55:3A:98:0A:6C:B7
            X509v3 Authority Key Identifier:
                keyid:FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:2c:e5:1e:ed:d6:9b:2a:e5:ac:3d:60:78:ec:d0:99:e0:
         ab:91:74:c7:b8:91:c4:67:87:94:43:a3:28:16:56:33:e4:92:
         d7:d5:36:ed:25:d7:ff:9c:33:c9:2d:62:43:6f:02:93:c4:63:
         14:51:8c:fe:cd:a8:64:3a:ab:bd:c1:25:47:40:9a:19:d3:a7:
         34:c8:b3:fb:b2:a1:ff:76:05:ae:b1:0e:fd:5f:18:f3:10:c9:
         60:1d:5f:47:50:25:3f:6f:e4:64:32:89:e3:df:67:a8:41:6a:
         14:09:4f:36:85:10:8f:8b:cf:11:cb:82:c4:bc:61:50:2e:f8:
         c0:71:f8:49:88:0a:46:bf:d6:1e:38:55:19:6b:ce:70:d1:53:
         36:f1:a0:41:08:36:7c:6d:80:f8:08:24:d6:d9:14:8f:dc:2c:
         41:81:34:ba:23:09:11:c7:a4:2a:ae:e4:f1:31:c4:18:e5:58:
         01:ee:a9:ed:7f:d4:6a:f3:a4:1a:0d:fb:ab:0c:33:14:db:5e:
         78:36:ea:e7:97:da:08:6e:6e:c8:9f:8f:96:00:74:62:1c:a6:
         17:6d:77:e5:4a:e8:f5:01:07:85:e5:5d:73:fd:a4:60:54:f9:
         e2:2d:16:48:81:1c:b6:00:23:b5:80:01:a6:cd:5f:53:4c:63:
         2a:36:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----