Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File:                     QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier:          fg2Zt3j9nT/MHmYevBE2TlH0LcU23y6omFx+wuOfbe4=
Subject key identifier:   72:F8:DE:D4:7E:E0:B6:98:12:3C:CC:2E:90:CA:F0:EA:0F:A8:64:64
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer:       /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial:       01962E618D743AF02D939C3627B1608411D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number:          088C
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: iiPo94NyOcVR16530xJH67gjFueK/AQhFjLBE+7mik0=)
                          2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:74:3a:f0:2d:93:9c:36:27:b1:60:84:11:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=72f8ded47ee0b698123ccc2e90caf0ea0fa86464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:c0:35:0b:9a:ad:9e:42:53:6a:69:0b:e5:
                    e6:b1:0d:10:fe:5b:e2:45:58:31:4b:2f:22:a7:02:
                    c1:24:cf:26:1b:dc:9d:4b:55:71:b6:ac:c2:34:0c:
                    7c:96:9e:72:1e:e0:ca:e1:69:a3:a0:2f:f3:f2:ac:
                    74:f0:cf:79:ea:e5:98:5b:3d:10:38:b0:54:ad:96:
                    97:fa:6f:2e:24:db:3e:10:8a:1b:ad:07:83:da:84:
                    51:cd:dc:f4:c4:57:2b:81:f7:c7:36:08:37:d3:4d:
                    70:5a:1a:1d:0b:fd:8f:49:3c:7f:5b:fa:ff:64:56:
                    de:d6:35:30:fa:e9:a2:58:ba:65:a7:2c:8f:a7:e4:
                    be:ba:c8:b3:58:00:63:49:6a:7e:1c:b0:41:f9:7b:
                    44:c6:18:1f:54:b4:f6:7d:13:70:10:61:bd:3e:1a:
                    ac:c1:74:a9:11:ac:27:cf:2e:09:53:12:29:52:3c:
                    56:f6:25:0d:56:40:22:9c:4d:41:33:4c:a4:03:5f:
                    f3:53:49:a7:08:08:7d:c1:4a:36:ef:b9:2d:66:34:
                    46:02:e1:21:86:43:f4:0f:87:cc:0e:9f:32:00:8a:
                    f9:0c:0e:0d:6f:5a:6e:95:e4:9e:2e:03:2a:e2:9d:
                    2d:7b:f1:67:90:76:a8:14:6a:d9:e2:33:5d:86:35:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:DE:D4:7E:E0:B6:98:12:3C:CC:2E:90:CA:F0:EA:0F:A8:64:64
            X509v3 Authority Key Identifier:
                keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:56:08:e8:9f:fd:4a:91:ad:05:db:b7:02:78:21:7b:71:
         ce:80:ef:04:21:95:79:ea:1b:e6:87:4a:ae:fb:41:0f:4d:27:
         75:44:fb:10:3a:c0:10:c9:8b:75:9d:f6:dc:7e:11:9f:7b:9d:
         79:2f:07:48:0e:23:42:02:e8:52:eb:51:8b:ac:98:31:45:cb:
         e7:6b:e6:84:b8:3d:8b:74:af:e2:f9:32:d1:f8:34:1e:7d:86:
         b8:a2:e8:20:5f:10:4e:ef:2a:1c:0c:3a:93:f6:fb:4d:41:f9:
         bc:89:1e:0e:4d:ba:aa:71:13:d1:eb:18:2a:f4:35:80:ea:76:
         ae:1f:3b:f6:16:84:b0:db:2e:a4:16:8c:7e:6e:65:52:72:09:
         35:99:fa:f2:e1:5a:17:10:9c:fe:6c:e5:af:20:b5:50:a2:29:
         53:09:48:d5:d3:03:d7:54:1d:ad:c7:e0:9e:e6:65:72:60:7c:
         a3:98:47:10:e9:60:72:a7:59:bf:2a:ae:b2:93:2a:60:33:c0:
         e5:ea:7c:5b:97:15:a2:6f:4a:36:a8:a7:bf:da:b5:75:8c:90:
         ab:f3:49:5f:ba:67:24:0c:0c:9e:70:49:b4:e1:d7:26:03:18:
         c6:d9:f8:65:87:cf:16:b1:bd:08:07:ec:7a:f0:d6:7b:57:ac:
         67:bb:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----