Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
File:                     QyExQaqTrYz4wmg3eFx4RUzbgYA.mft (raw, json)
Hash identifier:          /mVaxC6OiuE26oqmJyauXngrHc0y5lwlWJpolS7zPsA=
Subject key identifier:   46:05:06:AB:1E:33:FF:D9:F3:45:01:B5:3A:3F:86:01:D8:C4:DC:E7
Authority key identifier: 43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
Certificate issuer:       /CN=43213141aa93ad8cf8c26837785c78454cdb8180
Certificate serial:       01962E996F85AE0F4D2391E1A3BBECD745F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
Manifest number:          047E
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: QyExQaqTrYz4wmg3eFx4RUzbgYA.crl (hash: 02I40pIlR6Ph0exNLWj0EV8QgpRKWKUwDESEeJCv4fA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:85:ae:0f:4d:23:91:e1:a3:bb:ec:d7:45:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43213141aa93ad8cf8c26837785c78454cdb8180
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=460506ab1e33ffd9f34501b53a3f8601d8c4dce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:92:55:6b:e8:66:11:ee:1a:d9:49:9d:09:
                    73:39:ba:68:6b:80:0b:51:9c:32:eb:ac:33:88:4e:
                    d0:65:0a:5f:c1:60:00:af:a3:64:1f:7b:17:98:76:
                    02:52:88:66:11:27:97:14:3d:b1:63:ae:4c:e7:46:
                    36:40:fd:7d:28:6a:f1:83:14:49:23:fe:d7:cf:6a:
                    53:fc:4f:b3:83:52:d1:b9:34:48:6b:c1:54:81:dd:
                    6a:28:7e:e7:b2:99:c8:76:c1:7b:ec:d7:e0:0e:9f:
                    11:54:1d:2a:66:4b:79:bf:ae:dc:4f:da:68:2f:c3:
                    f5:e5:e3:5c:92:4a:b6:b7:be:78:34:07:1a:5e:91:
                    70:55:55:92:2d:93:58:09:18:a3:93:6a:b8:d9:27:
                    aa:20:18:1d:e7:ac:13:18:d6:9b:a3:e0:4f:4a:7a:
                    ac:df:94:e7:ff:b5:69:f7:e5:17:2e:bb:73:2a:f1:
                    31:26:f1:1b:50:0d:7e:5e:91:b1:52:5d:42:67:d3:
                    64:d8:47:1e:93:29:41:81:e7:d2:60:c8:56:a2:31:
                    be:cd:a3:f1:64:a0:cf:3d:c9:b1:39:2c:7f:e3:14:
                    89:67:f4:ce:33:9d:af:c3:4d:75:b5:a7:ff:54:ee:
                    d2:60:ea:32:62:ed:b2:99:47:9a:49:14:df:25:0f:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:06:AB:1E:33:FF:D9:F3:45:01:B5:3A:3F:86:01:D8:C4:DC:E7
            X509v3 Authority Key Identifier:
                keyid:43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:bd:03:1d:4e:4c:0f:31:df:aa:42:77:61:8a:10:8a:ad:6d:
         75:e9:ee:99:44:72:e5:17:60:08:f8:a3:14:4d:f9:c0:5e:9d:
         9e:4a:c4:5d:f0:dd:45:fd:d6:37:f2:20:a9:9f:06:04:9e:5f:
         11:28:2a:7a:28:cd:d3:95:9c:9d:74:04:f0:92:68:2c:cb:d0:
         9c:74:b4:ff:e1:47:83:3c:c6:9b:99:d9:c9:3b:6e:18:ec:d5:
         49:29:44:c1:2d:80:fb:3b:09:f2:1b:8e:28:df:b5:24:e8:25:
         23:7c:06:0e:7e:c6:69:57:cc:96:e2:1f:5f:66:46:29:de:a8:
         b9:a7:78:dc:74:c1:7f:7a:3d:29:f6:c2:7b:24:4c:43:3e:30:
         28:81:bf:df:07:2f:ca:f4:70:5a:f2:bf:08:df:e6:92:e6:9b:
         d9:3b:1f:16:23:89:cc:f1:07:85:90:7f:2c:9e:65:6a:34:42:
         b1:13:53:d6:bb:ea:bd:fa:b6:2a:e4:e5:35:00:29:3e:fa:55:
         6b:3b:2b:76:97:04:c1:b1:ec:57:3f:61:49:63:26:90:c5:d1:
         49:00:83:e6:39:3b:60:1d:de:45:bd:79:33:de:1a:d3:20:1b:
         02:28:fe:0b:39:3c:c1:21:00:86:b0:15:25:e5:ef:21:33:c4:
         e6:9f:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----