Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File:                     QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier:          EpZYsckxVsXvL5PBWrrNC66GpnkAemEWe2yXSQhZJAA=
Subject key identifier:   42:F7:B7:04:9D:34:EB:81:3D:4B:9E:91:18:95:A7:D4:FC:CC:10:8C
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer:       /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial:       01962DF3E6ABD5FBD1578FF7C0E2BFA7AD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number:          05BA
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (hash: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=)
                          2: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (hash: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=)
                          3: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: o3Aakx1DDZiUGNZ6cDJl3TuQPVqhOwl7OHuCPozCwCg=)
                          4: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (hash: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:ab:d5:fb:d1:57:8f:f7:c0:e2:bf:a7:ad:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=42f7b7049d34eb813d4b9e911895a7d4fccc108c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:e7:e0:72:bd:1f:de:7b:d6:a4:14:c9:c8:
                    fa:19:8b:c2:d2:11:e6:7b:e8:d9:d2:ee:f2:e3:75:
                    7d:90:2a:2d:6f:9a:d7:9a:89:ea:ae:f4:81:50:98:
                    50:e7:cf:3d:da:34:20:a5:e1:be:90:bd:44:08:06:
                    e1:4a:1e:dc:89:78:98:5b:1e:30:4e:17:63:b5:3c:
                    86:30:81:7a:fc:09:9d:fb:fa:c6:a0:6d:6c:ff:a5:
                    88:38:7a:73:79:cd:46:30:3f:3b:a4:3b:30:45:2d:
                    8a:60:8f:4a:0d:fd:2a:b4:49:c5:1a:09:c0:7c:1e:
                    5e:b6:e5:18:d3:3f:a6:fa:29:93:c1:9f:d0:3d:6e:
                    8f:73:19:7d:84:69:3d:ee:c7:43:70:64:21:c1:74:
                    0a:07:87:a3:fb:83:b8:be:64:15:4d:5b:fb:fd:93:
                    49:7f:c5:67:a5:f6:da:5f:38:63:60:04:cf:33:83:
                    40:99:50:44:20:bc:eb:1a:f3:45:19:87:45:b1:64:
                    ab:64:d5:3f:de:6d:87:cd:b4:ff:9e:f1:0e:05:cc:
                    f5:dc:ac:be:e6:25:26:d1:c5:47:e4:53:ee:05:a7:
                    e8:66:fe:19:7c:50:d6:57:10:d9:69:88:60:27:3b:
                    c0:9e:93:aa:9d:e3:e1:dc:44:6a:50:e8:d3:7f:7e:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F7:B7:04:9D:34:EB:81:3D:4B:9E:91:18:95:A7:D4:FC:CC:10:8C
            X509v3 Authority Key Identifier:
                keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:b3:1c:cb:6f:4b:11:66:dc:44:2d:73:2d:d6:a0:91:00:
         02:fe:5c:04:cd:e7:db:a5:a0:2d:87:14:70:dd:b3:f0:da:f8:
         18:b7:23:79:a4:6f:27:57:7c:bf:17:55:2e:7d:19:d6:ed:82:
         05:cd:8c:4b:4a:ef:88:4d:ec:10:48:aa:b8:55:4a:49:6f:fc:
         ab:9b:bd:08:60:b9:68:30:34:ed:c9:da:d8:6c:d9:b4:0d:5d:
         f1:31:95:af:f0:84:94:1f:6e:00:66:a4:08:68:5d:5c:5b:9e:
         34:32:a7:cd:4f:2b:33:0c:e0:1c:3c:5c:ba:ff:93:54:10:f0:
         00:86:6f:e0:83:f1:f1:c0:17:7b:8a:1a:e3:e7:35:19:fd:b1:
         c2:e7:74:d7:c7:5a:7f:b8:bf:41:1a:9e:71:53:12:78:67:2a:
         9f:2a:5c:23:fd:74:83:8d:3e:ad:1e:a9:06:47:29:b8:c7:7f:
         70:98:49:51:fe:51:87:d5:13:42:f7:12:4a:5e:2a:f8:c5:df:
         34:63:bb:42:11:35:7a:c3:46:90:d6:91:e3:4f:95:b1:ea:7f:
         a6:66:36:67:69:c8:99:5f:8e:a0:37:2a:ff:80:0b:31:f8:7c:
         62:40:54:2e:86:41:9c:43:67:7e:0f:aa:b3:5e:73:cb:84:28:
         e3:08:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----