Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File:                     QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier:          jbEp/UF/1ulgVodyBJhsfP+CrugxArcsIZIvQWm+UiY=
Subject key identifier:   84:40:42:0B:93:CE:0E:6E:2A:5E:A6:40:B5:05:7D:67:5F:29:46:B4
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer:       /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial:       01962DF3AC17DB2E01D4414CFB0A290D9722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: kxYTbnBThs7ofzCCvJd4CNQ1gIxOXiSO0OAqcPGApdc=)
                          2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:17:db:2e:01:d4:41:4c:fb:0a:29:0d:97:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=8440420b93ce0e6e2a5ea640b5057d675f2946b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:4b:20:e2:bf:c8:ac:be:ba:41:92:90:39:
                    e5:94:64:31:1d:d9:42:6c:fd:65:b7:18:f0:49:50:
                    68:1e:0c:3b:89:bb:77:18:81:0b:c2:43:39:c3:87:
                    9e:3f:ba:d3:09:2a:9f:dc:35:fb:ad:38:f9:ce:ce:
                    ad:c3:c7:71:63:9e:24:bc:c0:7c:29:af:b5:99:27:
                    38:8e:72:09:99:f9:13:d5:57:df:1e:2b:2c:8f:f3:
                    7b:d4:1a:3c:20:67:10:bf:92:5f:c8:df:1c:02:d8:
                    b4:b7:1f:b4:b6:21:a0:60:96:bd:a6:a1:e0:70:a2:
                    92:22:03:58:77:1c:a6:4d:71:8f:33:8a:c1:c0:d3:
                    c2:fd:65:11:df:66:9f:d0:99:b1:5a:c7:14:aa:8a:
                    49:38:86:84:51:79:f9:93:ba:96:b7:f3:2e:9f:e2:
                    54:ea:ab:48:ea:c4:c6:0a:31:d5:76:75:ce:a2:e8:
                    c2:38:dc:33:8c:27:59:67:75:f4:ff:f2:9b:87:92:
                    9f:dd:47:72:fb:c8:be:3f:9e:ef:f9:84:23:cb:8f:
                    63:38:3a:0d:0a:6e:2a:5f:93:16:0c:97:e5:3d:69:
                    93:09:78:5e:1f:4a:de:fe:6d:1a:58:0f:08:95:e0:
                    27:a1:ac:07:52:d6:3d:0d:1e:8d:3b:18:59:e9:6b:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:42:0B:93:CE:0E:6E:2A:5E:A6:40:B5:05:7D:67:5F:29:46:B4
            X509v3 Authority Key Identifier:
                keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:b5:bc:2c:9c:3f:5e:5e:2d:01:06:9a:86:13:dc:e5:4b:
         f4:cb:aa:b4:32:eb:de:b7:21:f9:c7:fa:dd:52:0a:7e:11:b0:
         16:bc:5c:4c:f0:cd:77:a0:d4:58:24:8e:e0:cd:ad:e2:b7:77:
         df:b8:39:50:1c:bc:f8:aa:a0:a5:85:4b:82:0a:52:6e:fb:84:
         73:4b:f4:47:46:25:4f:2f:b1:c7:22:52:36:c7:94:f4:99:db:
         3d:f5:e6:b6:66:5d:0d:58:3d:dc:41:93:09:6d:57:e6:1c:7a:
         ad:d7:2b:f4:a3:1c:27:5b:ed:95:e6:44:7d:5d:9e:ef:47:86:
         a1:cd:f1:ce:b5:eb:59:61:cf:be:cd:37:71:da:1f:59:5d:dd:
         13:33:ec:4d:22:f8:09:89:ad:77:cd:ed:e0:22:c8:a2:09:3f:
         9e:34:ce:36:e9:92:c8:e7:27:e1:5e:e7:e0:91:fc:a5:08:b8:
         93:fe:66:79:cc:ae:b1:7c:d3:dd:0f:b3:69:11:ab:f2:a2:c5:
         3b:ce:42:6e:4e:ba:91:d0:ea:16:d4:75:06:9f:8d:71:d9:98:
         2a:ad:d8:88:25:76:94:33:36:c6:26:db:d5:17:0f:6d:d8:3e:
         15:c2:2b:2c:a4:c8:1b:1f:bc:0f:80:6d:73:56:94:3c:de:41:
         0f:71:1b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----