Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File:                     QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier:          nIhcpe4VM0Nqyt2YBkIU37P+wD1KEaamBax/TtFOSEA=
Subject key identifier:   0C:D3:2A:A6:2A:C9:F8:D1:81:7E:B3:57:DC:4F:25:DB:CF:9D:2B:B1
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer:       /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial:       01962F3D54303F337C5201AF15666CBA90F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number:          13DB
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: OrmqvSGhmDLu8RDOGMfeEcOa57Z/NgkIm8X36jtGIMk=)
                          2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:30:3f:33:7c:52:01:af:15:66:6c:ba:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=0cd32aa62ac9f8d1817eb357dc4f25dbcf9d2bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:80:8d:6a:b0:3f:69:e7:01:00:f5:33:32:
                    66:06:e9:ef:2e:3b:37:40:fc:85:a6:b0:52:c1:7c:
                    51:7b:5a:9b:fb:8c:de:67:ff:12:13:89:58:53:27:
                    50:c3:f2:ea:be:6b:1f:8c:97:07:06:70:80:ec:8a:
                    38:27:03:6a:bc:6b:7c:95:18:b5:37:6b:20:ff:54:
                    9f:c6:fa:c1:ff:31:b4:4a:57:ee:e0:e2:c1:44:99:
                    89:86:6c:99:86:a2:97:29:75:70:4a:47:ca:b1:dc:
                    47:33:78:ee:7c:47:ca:fa:d5:89:a6:e7:88:13:af:
                    40:72:98:32:0d:a5:d7:37:c0:02:2c:15:52:b7:08:
                    9f:18:a4:c8:47:2c:e6:4c:08:a1:30:a1:0e:3c:07:
                    5c:8e:21:88:d6:13:12:32:a5:ed:60:09:f8:f9:96:
                    1d:9f:ef:6e:96:b1:fe:7d:dd:af:5c:83:84:93:e0:
                    e0:e3:59:a9:9c:ca:ab:87:ef:45:21:29:40:da:4a:
                    f7:d6:22:e0:f4:d0:f4:0c:98:ab:86:32:e5:8c:aa:
                    62:c8:09:a7:59:17:40:6e:2c:90:9d:83:b7:db:af:
                    98:34:63:be:a5:77:63:0f:a6:03:0c:0c:3b:7d:0f:
                    d4:88:a6:26:3d:4f:f2:85:00:e2:03:11:f0:72:44:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:2A:A6:2A:C9:F8:D1:81:7E:B3:57:DC:4F:25:DB:CF:9D:2B:B1
            X509v3 Authority Key Identifier:
                keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:08:b7:8e:cd:8d:69:a9:b3:e2:3c:1f:32:48:3c:a8:a7:
         3f:15:6d:b4:e5:b0:17:fb:ef:2b:de:42:26:60:f1:b2:30:27:
         ba:ff:c0:32:1d:51:3e:ce:18:31:6c:fe:4a:6d:51:d5:8b:10:
         94:cc:39:46:c0:3b:c9:0e:3a:a9:51:3a:a4:d5:7f:ee:ea:6a:
         40:58:f6:14:00:af:e7:70:65:72:91:40:71:6b:0c:44:54:6d:
         49:4b:7b:11:e1:5f:37:5f:e9:19:1e:d9:cd:62:2b:25:a9:87:
         42:62:ac:41:97:8b:00:a9:20:87:c8:33:ae:41:79:99:c1:d1:
         fe:48:62:42:82:1c:7a:9b:82:e8:d1:d6:80:36:e9:e1:c1:84:
         6d:fd:95:49:c8:92:a4:11:15:c6:fa:c2:59:a6:ae:ea:cb:61:
         d8:5b:c7:62:48:eb:38:94:d1:be:97:ff:e6:54:a3:b9:8b:60:
         a3:9a:c6:fa:34:bb:13:79:fb:ed:94:1d:0a:45:42:e1:50:94:
         f8:48:f3:d0:b5:af:6b:84:c3:0f:4c:d7:48:f2:05:4b:28:d5:
         27:ff:6a:53:10:8b:eb:08:37:14:88:f7:9d:81:32:8b:1e:50:
         65:b3:d2:d5:0d:a7:c7:63:5e:0f:5f:b3:27:6a:0e:b3:05:c0:
         a7:dd:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----