Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File:                     QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier:          oT6hQolxyM0f2okrdJW4tk6woLSS/PnzmfMBTB+1/zQ=
Subject key identifier:   C3:1B:CA:C5:23:D0:7F:00:2E:B4:C3:3E:65:7A:90:D7:58:FF:DC:7B
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer:       /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial:       01962F74F94A3BFB9B2E8CF614FDDF52DB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number:          0447
Signing time:             Sun 13 Apr 2025 14:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:57 +0000
Files and hashes:         1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: fZuJ+KY3LaBomRw4G2G9m4rCOCgZQyps2iM5/hokSMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f9:4a:3b:fb:9b:2e:8c:f6:14:fd:df:52:db:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
        Validity
            Not Before: Apr 13 14:01:57 2025 GMT
            Not After : Apr 14 14:01:57 2025 GMT
        Subject: CN=c31bcac523d07f002eb4c33e657a90d758ffdc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:b7:4f:82:b1:68:c6:a3:b1:e2:bd:bb:9a:
                    e8:90:80:e7:2d:dc:f2:eb:d1:cb:6a:ef:87:68:42:
                    97:8e:2e:9b:e7:e3:07:4a:a7:18:d0:d3:44:8a:ef:
                    ab:c6:80:69:c6:4d:dd:fa:51:0b:4a:77:f6:c7:9f:
                    cd:4e:10:56:f5:d2:9e:43:5e:55:49:21:ce:90:6f:
                    d5:ca:c1:e5:dc:c2:ce:51:dd:e8:75:a6:51:7a:0d:
                    bf:35:be:e4:9c:97:fd:b3:6e:cb:45:07:2a:a5:29:
                    10:ba:c1:2c:4a:3d:15:ce:ef:2e:2e:a2:d7:cc:ad:
                    db:43:04:87:a5:2e:d0:5a:9f:a1:d1:87:0f:b0:16:
                    7b:e6:34:f8:b7:3d:e5:7f:06:7d:af:bd:94:2f:60:
                    f5:49:29:42:18:60:72:5a:8c:c6:67:e1:5c:2e:b9:
                    7c:03:2e:37:d5:aa:21:67:d5:db:86:6e:f2:ab:d8:
                    e7:4a:af:37:f2:01:15:93:1c:f9:6f:1e:66:7f:66:
                    ea:49:27:4b:59:2c:4f:c0:66:c4:cf:6b:f0:09:f0:
                    71:d2:fd:fd:66:1b:d3:2b:ea:26:5f:6b:d0:96:80:
                    96:bf:f7:66:6a:83:83:b4:f4:0d:7c:87:1e:5b:a2:
                    88:8a:52:ef:d6:60:8d:cb:90:8f:fe:bf:1a:04:78:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:CA:C5:23:D0:7F:00:2E:B4:C3:3E:65:7A:90:D7:58:FF:DC:7B
            X509v3 Authority Key Identifier:
                keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:9e:58:6b:1a:41:ab:e0:28:47:78:f7:35:f7:7c:1f:ee:
         a0:75:40:d7:f3:ff:b0:3f:d4:3e:31:3d:ba:92:8a:73:2c:ef:
         4c:0b:2f:d0:7f:97:ce:78:c7:1d:81:af:9d:20:78:3b:3f:30:
         0f:5e:6e:5e:ad:12:9d:42:1d:d4:7f:5e:3c:b7:94:fc:b8:5a:
         1e:08:cb:e7:92:02:ac:4c:02:aa:68:4e:f9:62:55:63:ac:89:
         11:d3:a9:e7:c9:e8:d6:d6:1a:0d:68:d1:d0:26:9f:73:fc:34:
         b7:49:aa:f6:6c:28:fd:d8:3d:82:28:50:8b:1b:fc:b0:f2:8d:
         15:c2:ae:fb:4c:ba:ec:55:f0:70:5e:08:e4:e7:ad:18:a0:25:
         a2:e7:6a:6f:9f:85:75:d3:a5:a3:20:9f:ee:43:00:8a:df:90:
         d5:10:0b:10:93:88:8d:63:e6:de:5f:df:ca:ba:9a:57:cd:67:
         47:cc:12:bc:29:ed:8c:88:c8:59:a9:d3:d1:41:7f:6c:09:fe:
         73:d4:69:5d:1c:8f:da:25:90:ab:82:db:ff:a5:0c:ec:f6:82:
         58:73:61:8d:5c:4a:a2:0a:da:bd:7c:50:4a:01:da:72:c5:cf:
         a9:2f:64:50:9d:37:a9:fa:c0:4f:d4:29:41:9f:9e:9f:d8:1a:
         11:40:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----