Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File:                     Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier:          +3okA5OEj4alZm4qo2tlNO6AWgesmHlWU41eQTrvyAA=
Subject key identifier:   97:9D:92:28:B1:DB:2F:CF:E0:83:43:24:E0:3D:9A:D4:FE:6A:C4:7B
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer:       /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial:       01962F7481A3FA1B079E0F4C4C97A7BAC4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number:          0FC4
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: Ma+QteqoYwtNmPwL5p8cXmjT6f8Ig2OxbmUxLAlW7Qo=)
                          2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:a3:fa:1b:07:9e:0f:4c:4c:97:a7:ba:c4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=979d9228b1db2fcfe0834324e03d9ad4fe6ac47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:af:28:42:7b:da:eb:7d:ed:2f:ce:d2:48:
                    31:0f:47:2e:9c:bb:0f:30:1f:f3:31:7d:c8:e1:f1:
                    ef:d1:96:22:0b:e1:c3:b0:f6:de:0e:24:63:97:84:
                    66:c7:fc:07:ed:23:20:df:98:98:7d:80:c6:35:1a:
                    09:a1:f0:5c:76:65:a5:53:e6:e4:62:53:3b:e5:fa:
                    84:9f:93:f2:ff:94:40:81:6b:38:38:9d:dd:e0:c7:
                    36:71:90:8c:dc:86:24:5b:f0:16:95:14:4e:c6:37:
                    db:77:46:fe:70:b0:e3:59:ea:e2:f0:aa:06:7c:77:
                    39:21:1c:1d:e7:c1:b6:cd:b4:7d:f2:53:ee:e2:d8:
                    dd:3c:b9:e8:9f:95:c0:78:06:c3:f6:a0:8d:50:53:
                    38:4d:52:e9:f0:f6:e3:76:e5:c7:82:97:b5:e3:9d:
                    54:6c:45:9a:10:7c:64:8d:46:80:04:f9:f0:f4:16:
                    b6:b8:bd:1d:b9:24:b7:7c:1f:ee:1c:5a:ac:5a:54:
                    65:94:e9:3c:4a:2a:a0:f6:ee:e6:0b:00:72:bd:ab:
                    24:30:1e:32:f7:41:5b:e7:c2:87:f0:b7:d5:2a:ac:
                    7f:02:32:95:67:70:de:84:16:8d:ca:4c:73:fc:2a:
                    4c:4d:1b:52:0d:c6:a3:ed:ca:0e:68:ff:f7:db:3e:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:92:28:B1:DB:2F:CF:E0:83:43:24:E0:3D:9A:D4:FE:6A:C4:7B
            X509v3 Authority Key Identifier:
                keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:0a:96:db:65:31:30:16:90:60:f4:43:af:57:9f:96:e4:
         0d:01:24:80:d3:90:75:40:9a:d3:7e:23:3b:9f:a9:bc:63:41:
         7c:61:d7:44:ff:75:a3:a2:d7:ea:c8:36:a0:c2:66:20:3e:47:
         21:c2:16:17:6b:9f:e5:43:7e:9a:39:dc:7c:7b:d3:e7:09:e9:
         0f:96:7a:f7:e9:67:97:8d:b4:a8:0f:7f:d0:8e:8f:26:22:de:
         16:ac:6c:17:5f:75:58:89:7a:5f:cc:0f:18:75:3f:4c:63:8f:
         5c:cf:36:f8:08:eb:d1:5b:c2:38:96:07:df:15:dc:54:f3:59:
         4e:b1:68:47:0d:24:eb:2c:11:fa:de:8a:18:61:55:de:9a:8a:
         29:02:96:81:51:9a:f6:77:73:74:56:75:11:2e:96:6f:8f:69:
         39:76:0e:d5:45:20:15:6e:cb:13:32:cb:f8:0b:09:55:f3:69:
         2c:58:44:e1:73:5c:30:c2:ed:2f:2a:30:71:89:bf:93:01:b3:
         4b:58:20:01:f2:36:c6:08:51:c7:18:4b:cf:f4:fe:0a:fc:56:
         1d:a9:5b:dc:8c:5e:fd:13:c5:e6:03:b0:28:d8:98:31:f5:dd:
         f7:da:92:3a:0b:cf:62:f9:99:02:35:1c:76:f8:eb:fb:79:c0:
         ea:f6:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----