Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File:                     QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier:          QrDYqzHo/Q7o39//3rl8GEpqRckMGjWsgly/cGXd6n0=
Subject key identifier:   69:99:D1:3A:3A:A8:94:85:8F:B2:A9:A3:C7:CE:85:87:A4:52:28:50
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer:       /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial:       01962F06BDE8E73D497D5DB75A0457C83344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number:          0FE8
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
                          2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: H0+LReO4RQM4amP7HQUz33UV+rLX2tVvjTZRX6WAsk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:e8:e7:3d:49:7d:5d:b7:5a:04:57:c8:33:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=6999d13a3aa894858fb2a9a3c7ce8587a4522850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:fa:37:c4:89:74:e5:58:50:f6:cc:68:0e:
                    fc:dd:9a:86:29:26:4c:54:a2:d7:45:7b:48:8c:11:
                    8b:0a:e0:6d:0f:7a:49:a8:31:3e:98:63:88:05:78:
                    61:e3:6f:6f:8f:64:5e:38:27:ff:81:09:ab:87:be:
                    66:b2:6b:6f:15:bc:e5:16:c1:2a:63:6f:89:f8:28:
                    64:9c:89:7e:b3:3f:ea:43:15:e4:55:5c:0c:f6:03:
                    cb:c8:d5:c2:f1:75:54:3f:04:9b:b0:55:d7:f2:84:
                    d8:d6:38:51:97:0a:6c:a7:ed:2c:ff:10:e4:67:ef:
                    b0:68:74:c3:fa:46:07:2f:6e:57:8a:58:4a:65:92:
                    af:02:26:40:28:94:98:ed:53:72:de:fd:97:98:2d:
                    83:c6:fd:2f:7b:be:6a:9f:99:32:a8:58:ec:5f:66:
                    49:c5:bd:4e:c5:69:5b:88:85:c9:85:60:c4:b3:80:
                    35:c1:a2:21:72:51:b6:6d:99:df:6a:48:bc:ef:a0:
                    4c:0c:07:91:43:c4:b1:9f:f2:4d:ef:79:45:01:40:
                    ba:d3:a4:fd:bf:74:9d:df:49:e9:14:f4:6a:81:64:
                    21:0b:41:d6:1f:72:be:01:e7:cc:08:5c:82:c1:04:
                    4b:ac:6f:61:7e:70:d2:44:9c:d6:bf:03:ea:b5:5b:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:D1:3A:3A:A8:94:85:8F:B2:A9:A3:C7:CE:85:87:A4:52:28:50
            X509v3 Authority Key Identifier:
                keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:ad:d9:bb:de:c8:4d:07:97:4c:d5:d8:54:d7:32:26:34:
         8f:7f:76:d6:f1:01:5c:f6:b3:51:1a:57:1c:49:58:75:f3:4e:
         10:03:9b:e1:1e:6a:f8:b9:a2:09:07:01:ec:37:44:a7:49:4a:
         6e:9b:cf:8b:87:e3:3a:57:94:26:22:8e:61:89:01:5d:b7:63:
         b7:4f:cb:c7:1f:ef:e9:9c:fe:88:8d:e8:fd:93:b0:e3:77:b3:
         b1:44:40:1e:b1:b6:87:4e:78:7b:a1:84:2b:a6:0b:cb:f4:45:
         40:a4:bd:01:69:c4:c0:86:9a:18:da:9f:30:67:77:a0:81:fc:
         cc:c2:04:9d:1c:ac:72:27:68:ab:98:ab:80:f5:82:33:8d:b5:
         fc:a9:8d:ce:98:14:44:6a:5d:f5:7e:c0:0f:34:77:0a:2c:d7:
         75:a8:15:1b:26:18:fd:de:c4:71:48:4f:02:35:be:bd:79:94:
         10:eb:8e:61:1b:91:7a:4f:0b:37:09:49:2c:1c:c7:c4:f1:a6:
         96:48:3c:ff:95:00:ea:33:b4:18:ac:2a:9b:b2:58:6b:d1:ac:
         1b:b2:a7:94:9d:a1:f0:55:ad:4b:a3:3d:8c:d9:1c:0c:cd:de:
         9f:07:ff:3a:0c:ff:1f:0e:fd:65:37:03:47:51:71:d2:de:f9:
         66:cd:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----