Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File:                     QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier:          6mI6e80ZEpOC/moOi8rwhDcKof24ADW+XSayLkXqilc=
Subject key identifier:   83:A2:27:6E:FD:C7:E3:DD:6E:88:5B:E4:05:77:11:95:2C:AF:A6:AB
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer:       /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial:       01962E2AD30F2E902E1DE02862C787DD25FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
                          2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: VdyQS+6he05hBmJ8xlOnCr/TBjOfolBzWXhqiT6F/nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:0f:2e:90:2e:1d:e0:28:62:c7:87:dd:25:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=83a2276efdc7e3dd6e885be4057711952cafa6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:a2:bf:6b:ef:fb:94:bd:6c:1f:df:3f:05:
                    a2:4c:98:0a:35:c9:8a:c6:93:4b:4a:2b:93:58:ff:
                    18:d1:63:10:58:10:1c:70:50:3e:46:0a:09:cc:df:
                    12:2f:f4:2b:b1:6f:22:ed:d8:39:ac:2a:d7:68:9f:
                    06:88:67:5e:45:0e:b8:25:a4:93:ca:ef:e3:1c:45:
                    ef:f5:67:73:43:74:fa:fa:7e:ec:71:b9:6d:70:52:
                    7b:d9:fc:e2:0d:7c:11:de:03:01:b8:5a:78:73:0c:
                    65:18:2b:30:28:f3:e6:c7:64:82:a7:dd:a0:0b:69:
                    96:4f:29:31:61:8d:0f:c7:81:0d:79:74:c5:c0:f7:
                    b2:d5:06:00:27:2a:69:aa:bc:84:80:6a:6a:53:01:
                    12:63:33:8b:38:fa:5a:62:94:cf:10:96:65:a2:dc:
                    13:92:18:6e:6f:33:5c:e8:07:54:b9:3e:20:1d:75:
                    17:73:28:60:87:fd:7e:53:45:b1:e8:74:b6:01:63:
                    e1:cf:83:2c:c4:91:a8:b0:5d:1b:63:30:13:17:f2:
                    75:ce:19:08:e8:04:75:c5:f1:88:60:ec:f3:05:b8:
                    8a:aa:e6:9f:79:49:b4:a3:43:4a:13:13:78:30:7a:
                    41:92:db:25:54:c7:b4:53:88:1d:0b:0f:ff:ec:43:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:27:6E:FD:C7:E3:DD:6E:88:5B:E4:05:77:11:95:2C:AF:A6:AB
            X509v3 Authority Key Identifier:
                keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:29:6d:68:a4:b0:0e:3a:2c:e7:48:a1:06:d8:9b:b7:ec:
         a9:72:c2:1d:3f:bd:fa:fc:50:03:73:9c:6f:9e:e1:09:68:60:
         24:5a:3a:df:00:57:cb:e1:35:ab:22:33:81:c0:86:6f:51:cd:
         8f:54:32:f4:8f:e3:09:39:00:d6:ec:2e:37:8d:9f:ec:d0:c0:
         a9:cf:de:4c:4d:ea:c1:8e:86:56:0c:7e:9b:0d:11:2b:ff:b9:
         a5:e3:28:7a:b9:b2:0e:a3:ef:e0:ec:c7:30:df:c2:b8:5d:11:
         48:34:25:e7:a7:d8:1b:f4:35:c7:c4:6b:01:0f:21:b6:5d:57:
         60:32:bd:b5:ce:5a:fb:75:8a:5c:84:90:be:1a:7b:7f:89:b3:
         62:fe:3f:27:ce:20:90:16:3d:af:e9:36:7c:41:fc:68:d8:e8:
         b8:b0:66:18:78:fb:f2:4c:29:d2:1b:51:57:75:c7:4a:fc:68:
         77:1e:4a:d2:97:8f:e4:f5:7e:e7:0d:87:05:32:c3:4f:36:bd:
         09:c2:d1:1c:00:65:23:26:3d:e1:25:e6:39:e6:af:bb:94:48:
         bc:b1:a5:84:7e:1e:9e:91:ed:a0:d4:eb:c3:c4:a4:e3:bd:de:
         48:3a:e6:c3:6c:64:4a:37:13:4d:87:fb:71:ae:97:c7:c0:9f:
         46:44:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----