Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File:                     QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier:          ZWQDCUy9Np+tV8WVXIGB11wHdadzsM/GQR0H9YblH4A=
Subject key identifier:   D9:CF:65:19:1B:6B:1B:65:45:4A:8A:B9:9A:E7:AD:D6:1D:3C:6B:2F
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer:       /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial:       01962F06914A890A73239E600F9387BEFA40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number:          10BA
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: 5PeIEDq23OORSHkpgnpr/JJ4L7oONpaQxlOQQ0sQ7fI=)
                          2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:4a:89:0a:73:23:9e:60:0f:93:87:be:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=d9cf65191b6b1b65454a8ab99ae7add61d3c6b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:99:c2:0e:b7:91:76:94:82:e5:e0:11:d3:
                    35:01:c8:89:b7:71:92:25:5a:6f:c7:e7:d0:30:23:
                    1b:6d:83:b4:92:7d:d6:be:f6:dd:04:61:8f:25:22:
                    7e:3e:63:5d:89:3a:2b:03:41:dc:ef:e3:41:59:64:
                    50:e7:c8:99:fb:86:a3:2f:77:45:29:c1:9c:c1:43:
                    9c:a0:78:09:67:de:41:54:2d:5d:c6:9d:2e:ac:f6:
                    5b:1a:35:ec:c0:58:02:83:53:74:8f:09:b6:8c:76:
                    22:3d:58:f0:17:2e:27:2c:c9:5c:82:70:2d:11:81:
                    53:d6:44:39:1e:7a:54:0c:92:58:43:ae:39:7f:99:
                    cf:de:41:2b:22:cc:87:f2:32:6c:94:37:6c:fc:34:
                    7b:7a:1e:b9:72:1c:7e:a7:84:01:f7:75:13:7e:b1:
                    af:87:c2:79:84:60:eb:0d:73:29:01:bf:de:80:54:
                    ac:e3:36:57:c4:d8:68:f7:0c:fe:55:4a:27:b1:71:
                    85:3a:71:e2:e8:de:87:3e:93:8c:d1:8f:25:ce:c7:
                    62:ee:73:87:27:13:57:72:b1:45:39:b9:9d:79:81:
                    68:d4:b2:e5:78:ef:18:79:72:a2:37:7f:a5:46:85:
                    50:bc:60:32:15:2a:b1:af:e1:b7:45:27:56:01:78:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:65:19:1B:6B:1B:65:45:4A:8A:B9:9A:E7:AD:D6:1D:3C:6B:2F
            X509v3 Authority Key Identifier:
                keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:fa:2a:9e:ca:9e:16:e1:da:a7:0f:3b:13:fe:88:3a:9b:
         14:68:ab:5e:14:52:61:88:b4:d3:87:a2:15:5e:69:c2:77:65:
         8b:b7:78:ba:f2:ba:4b:6d:bd:f0:b7:54:9e:f5:16:80:df:34:
         83:7f:f7:69:e9:0a:19:4d:46:56:2c:49:ed:84:95:a0:f1:92:
         d4:68:bf:b2:5b:c1:0c:c6:7a:ba:f3:d6:a4:1c:79:18:e8:57:
         04:b6:d8:51:32:cc:d0:1d:4f:36:e3:72:b4:cf:01:23:9e:57:
         45:f3:f9:3a:ec:a5:96:3a:5a:97:fd:ef:bd:81:97:7c:10:d8:
         2c:f7:aa:7c:cf:b6:fa:61:7d:cc:ec:44:35:df:bf:f3:2f:09:
         5e:4f:5c:81:85:27:a4:d6:8d:4a:62:85:86:56:c0:d7:7b:59:
         eb:58:cf:6d:bf:38:63:33:ee:b9:5d:a4:75:f6:05:7d:7e:50:
         de:36:44:36:f1:10:4e:5c:c7:8e:e1:28:20:ca:04:17:87:8a:
         71:b1:48:bd:4c:a0:23:4d:44:26:a2:1a:1e:49:7d:ad:fc:8e:
         68:9d:17:c9:4e:2c:e0:13:f2:eb:36:ff:15:81:8d:da:33:6a:
         04:99:9b:c1:61:8c:dc:c4:31:52:e6:fa:eb:d5:d5:6c:97:5b:
         d4:0b:d5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----