Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File:                     QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier:          9BKCYYt8lMKC993D6U9Q/nZ+cQstIRUIDXzX+am6q5k=
Subject key identifier:   BE:92:6A:0E:77:8D:B0:DB:6E:D4:8D:35:91:30:46:E0:9C:56:F0:1B
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer:       /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial:       01962E61ADC66E003AC800A29A686A3D5A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number:          03EF
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: Qo8KgR711ZmGYpi59R7qNfhUWd1nt+trtZqqJ8h8zP8=)
                          2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
                          3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:c6:6e:00:3a:c8:00:a2:9a:68:6a:3d:5a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=be926a0e778db0db6ed48d35913046e09c56f01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:f3:9f:93:66:47:a2:5b:45:8a:c2:4a:5f:
                    0a:c7:1b:49:dd:bc:28:4e:f3:a4:26:94:76:20:64:
                    37:d8:f3:12:39:c0:c8:85:f9:43:10:b1:d2:83:89:
                    e0:66:21:39:9f:6c:84:7e:b2:a4:ab:69:b2:c9:7c:
                    4e:44:54:38:8d:8b:ad:52:4a:00:9d:3c:a3:3b:df:
                    a9:e0:b9:89:06:e9:7a:4b:44:6c:d7:70:de:0a:d6:
                    64:93:d6:af:32:36:72:9c:0b:84:85:ae:23:5e:b0:
                    25:22:76:87:9f:38:2d:b6:66:01:9f:3b:38:87:0d:
                    f6:6d:56:af:d2:0a:78:57:a4:36:9a:f6:3d:dc:46:
                    c9:a8:a5:e2:8c:c2:2b:6b:3e:10:18:04:a9:f8:0e:
                    44:1f:49:cf:f0:6f:15:21:c5:c0:a9:16:33:ef:9c:
                    f1:d4:30:c3:43:ea:16:1f:c4:64:0e:b9:c8:db:ba:
                    d3:d7:cb:23:ce:e4:cd:b8:d3:66:71:34:29:40:34:
                    78:70:31:12:73:96:75:de:ae:30:4f:72:e0:ac:0f:
                    0d:36:0d:df:be:96:e7:c3:b0:de:b8:9b:59:a7:a2:
                    d9:92:2e:b1:55:8d:b9:a9:d6:30:09:6b:2c:a6:0e:
                    af:44:f8:28:0e:59:6f:7f:ba:f8:72:17:5d:84:87:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:92:6A:0E:77:8D:B0:DB:6E:D4:8D:35:91:30:46:E0:9C:56:F0:1B
            X509v3 Authority Key Identifier:
                keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:47:f5:a1:38:64:a9:3c:62:6a:e5:b5:02:7e:b5:b1:8f:
         aa:a5:5b:49:1b:10:d4:1d:e9:43:50:c7:4b:36:fc:63:28:70:
         02:b5:f6:0d:5d:c4:88:a5:4a:90:4a:a7:53:ef:eb:17:25:86:
         39:fa:57:15:12:a7:28:97:a3:fb:e9:c1:26:19:c0:3f:2c:9a:
         41:63:29:63:ae:7e:ef:3b:c7:d8:15:b6:20:ad:49:c3:47:99:
         2c:47:26:a1:2d:21:62:3b:e3:0c:35:e7:fc:7e:27:84:76:ba:
         41:8c:61:70:ff:91:57:df:f6:e7:37:4f:d4:ff:d0:7e:84:62:
         26:82:62:ba:23:6c:22:06:ee:34:7a:0d:e0:28:27:49:39:f4:
         fa:db:28:ef:6b:20:12:78:b7:d2:de:0b:5f:8a:74:b0:db:33:
         6d:90:ae:4d:c1:e0:f4:a5:73:b4:a4:ef:c3:fc:de:48:9f:e3:
         46:0b:7c:cb:00:46:59:b5:dd:8a:0c:b2:84:8e:74:1c:30:f1:
         04:2c:84:36:d8:ca:85:39:30:62:93:9d:82:0d:e9:94:b9:bf:
         a7:77:65:9c:17:d1:f3:3e:b1:c5:a0:9a:35:34:4e:86:23:27:
         a3:48:e7:57:2d:25:67:2f:e8:cc:b4:42:ba:cc:f8:49:84:f4:
         48:04:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----