Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
File:                     QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft (raw, json)
Hash identifier:          6wKXU4pyg5MN/vRkIbO3Q/7/9sgwgHhj5L043TaBM2E=
Subject key identifier:   5A:5F:7E:46:E2:51:68:15:11:6A:9E:D6:8F:50:9A:51:83:EB:D7:B0
Authority key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
Certificate issuer:       /CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Certificate serial:       01962E98F87369866C728567E6D3968D7855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
Manifest number:          0C0B
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: Ci2nxFCN2-JFxhCGu2Re4yZAOHs.roa (hash: +bhZNarT7FFMkSZsUhSIu2eb8t+79YYtheiLS/N1UY0=)
                          2: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl (hash: 9K5AKjICGcfjTvRrx4cZkdvgRUyPexHYkjJOif0Uvyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:73:69:86:6c:72:85:67:e6:d3:96:8d:78:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa949d31c66888cb4758f23dd5f312141dec4a
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=5a5f7e46e2516815116a9ed68f509a5183ebd7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:29:a8:4c:30:0f:01:3e:18:42:1b:7e:23:3e:
                    74:bb:16:50:0d:db:df:26:c7:37:0e:1f:b1:76:e1:
                    08:cb:d0:f9:4e:66:96:ae:a8:6a:d8:54:68:a3:38:
                    dd:04:08:17:27:26:71:40:3b:17:8e:bb:24:c5:f3:
                    c9:c8:f1:92:d6:58:08:99:76:42:88:2f:b3:c9:21:
                    07:4d:e6:db:6b:23:fc:73:14:ba:e8:59:1d:7e:06:
                    9e:17:ad:7d:76:77:52:90:68:75:7e:36:a1:e4:31:
                    19:b1:7a:68:70:1f:4c:93:c6:f9:94:be:99:01:6f:
                    b8:68:f2:c4:c2:04:0f:6a:a2:cb:d7:c2:d1:d5:2e:
                    31:b8:09:01:0d:bf:67:e5:79:f7:ba:dd:92:b3:c3:
                    ca:53:94:57:ff:34:4a:57:1f:9d:18:ac:67:25:d8:
                    d9:90:e3:51:28:8d:30:d9:bc:21:cb:60:50:1c:7f:
                    5d:de:a1:7e:de:f7:ec:57:5d:4d:ce:f1:a0:6d:ee:
                    62:fb:33:a9:7d:d1:a4:37:0e:48:03:89:33:61:be:
                    42:78:71:56:a5:a8:69:4a:68:1e:40:ce:04:6e:fd:
                    aa:17:a9:e5:ba:94:1d:c3:d6:21:2f:41:ff:28:97:
                    e4:77:0f:c4:1c:ab:ef:ab:61:c1:8b:fa:09:92:62:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:7E:46:E2:51:68:15:11:6A:9E:D6:8F:50:9A:51:83:EB:D7:B0
            X509v3 Authority Key Identifier:
                keyid:40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:41:f1:af:d1:46:bd:14:d7:4d:fe:a3:94:89:bf:61:5b:53:
         76:14:ce:98:28:9a:ef:be:1d:0c:10:ec:52:96:b6:3c:89:c1:
         e8:6f:58:ba:b7:76:4c:78:42:e6:a5:af:ad:97:50:32:6f:43:
         e8:16:e3:cf:33:3b:0c:bf:7f:3e:23:d7:a5:eb:7e:99:b4:0c:
         c8:76:2c:41:fe:1d:1c:fc:1f:3c:4d:9a:d0:7f:3c:20:83:b1:
         03:97:03:8b:e4:19:95:7b:1d:2d:d8:64:0f:ae:df:b3:65:54:
         87:d7:68:48:ac:42:c4:84:8f:62:e5:7e:28:d6:f8:85:32:70:
         f6:bf:98:d3:51:cf:c7:04:59:15:b1:70:59:45:5c:2a:6e:a5:
         cf:e0:5f:da:3b:a0:16:4d:0e:8f:0d:98:28:ec:6a:bc:91:50:
         33:b3:ee:fa:3a:dd:6e:2f:c2:88:81:fd:f3:95:a3:64:a4:b1:
         02:e2:3c:1f:c8:e1:15:dc:9d:3e:ca:95:a3:ad:1e:0b:cc:b8:
         b2:de:67:f9:61:cf:c0:a3:2c:3a:b6:e8:78:ed:a8:40:40:f7:
         da:6f:0f:77:fb:3b:67:cf:3d:d7:45:3c:54:91:1e:60:08:4e:
         ce:1f:76:7d:86:ca:bd:23:13:b8:89:08:fc:a4:2c:3d:93:d1:
         5b:c8:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----