Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File:                     QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier:          LzFsJST34jhNU925mQ7FeXDHkIJltw+d93aG4EHTKE8=
Subject key identifier:   B1:BB:5F:91:15:6B:BF:68:B1:7D:B7:92:44:85:8E:4E:97:05:3F:CB
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer:       /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial:       01962FAB708381ACC86A07DC385BB5854E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number:          0C7B
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
                          2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: OWYed6AUnp5/ONal+RNzTSbLD7ehXvx9gbzIGLkxbbI=)
                          3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:83:81:ac:c8:6a:07:dc:38:5b:b5:85:4e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=b1bb5f91156bbf68b17db79244858e4e97053fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:fa:3d:02:7c:38:df:ad:45:42:68:93:b9:
                    d8:0f:6d:fa:0f:94:8e:ab:96:22:18:dc:12:29:3f:
                    59:b5:4e:13:dd:4e:03:4b:d3:b2:27:27:69:c6:12:
                    dd:a7:57:4e:e1:b4:b3:e9:24:61:58:48:72:e9:87:
                    9a:22:0c:1c:52:6b:bf:32:ed:5c:b6:e9:09:3d:6e:
                    5a:80:dc:60:84:e6:41:2c:93:24:63:1e:1a:81:d6:
                    f4:a0:5f:cb:4c:20:98:eb:e6:3e:99:45:35:23:ad:
                    44:ee:2b:3c:b5:51:2f:22:cf:da:e5:7b:76:d1:cf:
                    3d:d7:59:ad:31:b6:da:71:ee:1f:fd:a4:85:d9:62:
                    26:1b:90:f4:94:9b:7c:48:2f:fc:0f:99:3d:d6:2b:
                    95:81:35:3c:44:73:09:a7:67:63:39:a8:d5:1b:3a:
                    c9:13:33:01:30:2d:b7:9d:2d:00:3e:dd:bc:49:fe:
                    9e:3b:c9:6f:a5:e8:75:bf:00:7d:29:04:d7:bd:d2:
                    47:38:28:ca:36:5b:94:dd:87:a4:9b:7f:c6:88:1d:
                    52:1c:ce:93:ce:12:e8:1f:38:79:b4:40:0b:6c:6b:
                    c9:da:0c:e2:1c:67:63:81:fa:31:97:b5:fa:e1:a7:
                    cb:e8:3d:5e:17:cf:f1:a1:80:ab:84:35:49:27:19:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:5F:91:15:6B:BF:68:B1:7D:B7:92:44:85:8E:4E:97:05:3F:CB
            X509v3 Authority Key Identifier:
                keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:e0:0b:e2:6c:d8:98:18:35:ac:50:14:d5:ee:1b:3b:46:
         10:3d:51:74:57:67:ef:a8:04:75:e4:f8:50:8e:f4:5d:01:1f:
         c2:4d:75:fe:3b:72:c8:e5:c3:bf:29:52:8d:05:30:08:f2:0a:
         2d:82:4a:3f:cf:d0:eb:11:d9:f3:e2:ef:31:14:c9:9c:41:20:
         94:89:63:f2:2b:e2:e8:ac:68:fe:04:79:5c:b9:35:ad:ce:1e:
         92:63:3a:d4:45:51:7c:2d:ce:38:95:51:00:0d:66:c1:7d:e5:
         ef:e1:10:f4:a9:77:f9:bc:15:7c:be:33:a1:a1:36:76:cb:e7:
         39:e0:ee:f6:1a:4c:16:d6:91:12:65:bd:66:71:9e:22:44:7c:
         ac:21:70:dd:fa:d4:46:dc:b9:6d:71:77:da:c3:61:8f:4f:22:
         10:22:2d:02:e7:05:fb:77:09:47:74:e5:02:a5:8f:2e:69:32:
         19:61:c8:53:ac:3b:f1:61:84:73:47:c8:41:ee:83:cf:18:49:
         0f:70:71:b6:fa:f3:41:fb:71:01:c3:5e:40:50:cf:de:c1:ad:
         53:2f:4c:cc:be:ce:a2:8b:be:8d:67:16:3c:61:4f:94:3d:dd:
         53:a0:da:37:2d:1f:fc:33:40:4d:06:75:aa:4d:98:0c:12:44:
         dd:c4:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----