Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File:                     Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier:          w+4SIApoVA9aMw7nmMg3XLoiI0mVMS6YkZ9Fvq8EXDY=
Subject key identifier:   21:D8:23:51:ED:55:21:60:40:A3:49:83:4C:91:5A:8F:8B:9C:24:BF
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer:       /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial:       01962F06A077B42005A7B367F41AFCBFD025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number:          0E7D
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
                          2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: cCRAe6S+tu4RMR3xhJ4/WwLuqWxgtYh8TGzyVvzcQqk=)
                          3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:77:b4:20:05:a7:b3:67:f4:1a:fc:bf:d0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=21d82351ed55216040a349834c915a8f8b9c24bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:af:ce:73:ea:b7:70:63:5c:e7:b7:71:cd:1d:
                    c2:f6:bc:91:f7:9c:d7:df:f2:31:c0:37:be:99:1e:
                    07:71:1b:9f:6c:34:f9:44:ee:d6:e2:d8:e7:bd:fb:
                    18:57:25:0a:41:9b:15:3f:fd:d8:27:13:ea:6d:3f:
                    7e:32:8c:7a:27:37:f9:82:5e:ab:94:5b:c6:f9:62:
                    82:53:67:99:bd:bc:f0:56:f9:f9:9f:da:f9:50:84:
                    64:4d:65:78:40:e5:8c:9b:35:9b:ab:cb:de:58:9e:
                    19:63:7f:45:d5:c8:8b:92:b2:5e:c6:11:91:ea:bf:
                    d7:46:63:4b:6e:2a:1e:e5:ed:7b:b1:44:16:05:c0:
                    29:74:3d:cb:bf:cc:9a:72:d5:4a:31:fd:cf:30:ce:
                    5f:4b:3c:a3:36:e5:1e:f8:2f:85:72:09:12:70:70:
                    1f:ea:08:d6:cb:e3:3b:32:ee:ce:e6:25:b8:96:c1:
                    a5:1e:16:5c:8e:f4:40:1d:18:a5:4c:83:fa:7f:99:
                    9b:bc:18:9a:8b:eb:cb:cb:bd:54:6c:db:f4:50:c2:
                    58:0a:b6:c9:60:89:22:6c:05:81:98:aa:50:6e:02:
                    d0:03:67:cb:08:0f:70:db:9e:ac:b1:e6:8d:6a:22:
                    96:df:d4:a7:2d:7e:34:3c:10:36:d2:ca:08:7c:dd:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:23:51:ED:55:21:60:40:A3:49:83:4C:91:5A:8F:8B:9C:24:BF
            X509v3 Authority Key Identifier:
                keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:65:af:20:cf:31:d6:fc:9e:b3:60:2e:72:57:db:f6:b1:
         39:02:36:76:3d:dc:15:ed:ce:2f:af:74:df:08:77:0f:79:e6:
         04:99:64:e8:65:74:29:30:54:8c:92:a6:95:fe:1c:22:98:7c:
         69:a0:5a:da:67:f3:4a:14:72:22:f4:78:33:26:0e:5b:4a:90:
         a8:c0:b5:fb:d3:9b:8b:11:fc:b7:4e:e6:dc:6e:b4:64:8d:0a:
         0a:7b:cb:3f:39:b5:f1:b4:60:09:5b:00:92:72:a4:bd:03:ae:
         03:75:d9:c4:bf:8a:c7:e8:a4:13:21:d7:e5:df:2a:31:0a:b3:
         db:ff:00:30:5b:c7:c7:18:be:72:76:cc:2b:56:7b:be:54:a4:
         e7:21:39:97:a4:94:31:43:08:37:5a:dd:be:bb:40:f9:9d:81:
         e3:6d:b3:85:02:1e:e1:69:83:fb:c3:ba:27:48:d1:93:f0:d9:
         45:e4:4a:fa:19:2b:ec:98:96:3d:70:e1:69:81:42:cc:ee:fc:
         29:ca:52:87:42:c1:b1:a1:32:ba:b7:c0:7a:53:5b:65:a5:eb:
         97:e3:ff:65:39:9f:02:73:ca:98:61:b4:1f:72:82:f7:90:73:
         ea:1a:05:2f:62:c4:44:b9:48:22:8b:77:83:f8:9f:2b:3f:5e:
         f0:ff:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----