Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File:                     Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier:          adhAMGtvdMxk1gcDKugI3IdxDac6+6lqI4xXqJHijLk=
Subject key identifier:   1D:95:AC:69:E2:B0:0E:7B:C5:E0:F1:DC:3B:C5:A9:DB:09:D3:6A:D4
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer:       /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial:       01962F3D3B239A42E9B679B27A6DBE404CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number:          036D
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
                          2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
                          3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: 24ERXH2LyKpTNWMZuI5BLy8cZPqjEnoNFM5W6xj3kfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:23:9a:42:e9:b6:79:b2:7a:6d:be:40:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=1d95ac69e2b00e7bc5e0f1dc3bc5a9db09d36ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:12:7d:e9:6b:8e:e8:0e:6c:0c:5a:26:ae:
                    4b:98:ae:9d:93:d0:4f:1b:f1:9b:49:89:a8:56:4c:
                    73:d3:7a:98:b2:2f:89:21:d6:f4:65:e0:70:a8:49:
                    d1:88:1b:55:81:2f:87:d1:ce:80:37:fb:e2:67:1a:
                    7f:d7:96:68:6f:70:a8:4e:de:ba:43:e2:1f:57:91:
                    d1:9b:9d:03:15:ae:06:eb:b1:40:53:ce:6c:53:47:
                    2d:81:bd:94:05:46:04:5d:68:cc:19:0e:a6:1c:84:
                    fc:74:91:c7:95:ba:55:64:b6:6b:eb:1e:f9:c3:50:
                    c1:7c:87:f2:60:d0:8c:8b:44:56:4f:49:76:1c:5c:
                    7b:ff:0f:83:81:a3:49:86:a7:4e:a0:dd:27:0b:56:
                    5b:c9:d5:a2:41:f4:a0:00:47:60:fd:3e:6a:6c:a1:
                    a3:58:60:3d:91:8e:8a:a9:ef:8c:ac:ae:13:57:0c:
                    8d:1f:55:69:c0:8e:c5:b2:97:3e:35:05:e0:98:62:
                    3f:b4:ce:e3:ce:86:ee:db:e7:b7:ac:69:10:b1:15:
                    c0:78:82:ee:be:62:03:13:d3:b9:1e:00:f3:09:dd:
                    b2:85:07:a5:55:22:f2:b7:73:a0:63:04:e4:85:5c:
                    72:f8:1c:2d:3f:34:ee:ec:da:82:20:32:97:01:80:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:95:AC:69:E2:B0:0E:7B:C5:E0:F1:DC:3B:C5:A9:DB:09:D3:6A:D4
            X509v3 Authority Key Identifier:
                keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:37:c2:ec:b9:0a:1e:c8:95:20:f7:2d:bd:83:00:86:30:
         62:49:0d:b2:64:ab:b6:df:82:f0:a9:ed:8e:a6:60:9c:5f:7c:
         73:ea:22:4e:d5:f8:71:04:fa:2f:94:dc:fe:ea:96:71:db:86:
         13:06:7c:cb:70:16:66:30:02:d3:7a:44:d4:b0:d0:49:25:df:
         f4:17:da:fb:01:17:0a:bf:d7:da:89:32:16:6f:2a:b7:f2:80:
         6f:7b:d3:c6:54:32:ae:ae:0d:e1:6d:5f:d1:94:33:88:f7:cd:
         a6:e8:c7:d7:94:44:ec:2b:5c:be:5c:eb:dd:c2:f1:4f:e6:66:
         b6:0a:18:70:87:13:75:90:67:ad:fe:58:68:2e:62:89:11:44:
         cf:17:f9:15:89:56:a2:34:d5:8c:47:f6:21:c1:0d:9a:88:7d:
         de:7e:07:58:01:6a:77:91:c8:db:e2:20:14:b1:f8:be:74:2b:
         f0:ba:19:23:d0:18:ab:85:cb:4a:a8:9c:46:f0:a2:16:2f:14:
         f4:db:a6:0a:12:b1:e3:89:89:56:8c:b8:72:1b:b3:36:c0:36:
         87:47:1b:db:fa:6e:a0:9e:08:79:55:90:c3:b1:a3:f7:31:33:
         d0:b3:38:be:6e:04:8e:9b:7d:4f:67:62:2c:8c:22:32:0d:a0:
         bc:b6:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----