Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File:                     QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier:          SqFvRUdqgbxrZrYero2eKyrmZx5N91RrUVknlgaFWpE=
Subject key identifier:   53:8A:26:2E:F5:0A:26:3C:6A:23:84:52:19:2C:24:76:15:DA:B0:B9
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer:       /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial:       01962F3DAB8E1FEC4627F85E79DAFECCD951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number:          040E
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: TWEK/CAM3Z6EV/N5IdPSAerqMHGg+Y8yKTZqNQTF4jU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:8e:1f:ec:46:27:f8:5e:79:da:fe:cc:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=538a262ef50a263c6a238452192c247615dab0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:19:85:28:95:a3:5f:ce:bf:fa:b0:03:f5:
                    fb:6a:b9:31:95:7e:e9:ab:04:08:f2:fe:b0:2c:3b:
                    98:24:40:61:bb:c9:8a:00:b2:8d:f2:bd:03:55:7f:
                    f8:42:c1:d0:98:d4:f2:aa:ef:d7:00:12:4b:cd:e2:
                    3f:ac:57:bb:f7:23:e5:fa:2f:85:dc:ae:a4:ba:63:
                    2b:00:5b:7d:39:ae:e4:6a:6b:bd:60:3e:c9:ea:23:
                    51:58:0b:3e:ce:77:d9:9f:93:c0:a0:be:e6:8d:58:
                    3c:27:15:85:a0:69:c4:a3:c7:06:7c:8a:f1:cb:31:
                    63:55:e2:8f:ef:b1:34:9d:cb:ad:b6:e7:7d:18:ff:
                    d8:8b:d8:54:d1:55:b0:dd:5b:06:84:81:ce:b7:81:
                    27:02:98:44:5d:53:1f:dc:f4:46:3f:ae:bd:93:4f:
                    7a:10:ea:95:13:0a:e1:d5:a6:d7:4a:5e:77:10:ee:
                    0d:6d:49:20:da:21:de:73:22:7c:69:9e:75:5c:cd:
                    4a:5f:76:a6:79:22:c8:0c:27:3d:a8:c9:a8:85:9a:
                    96:e6:83:f6:35:10:82:47:23:ef:52:7d:aa:78:3f:
                    ed:31:54:35:7b:26:d5:5d:7c:fe:80:b7:72:77:ab:
                    8c:7f:57:1f:fd:43:e9:90:e5:50:29:ad:76:22:a0:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:26:2E:F5:0A:26:3C:6A:23:84:52:19:2C:24:76:15:DA:B0:B9
            X509v3 Authority Key Identifier:
                keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:cb:67:01:69:43:52:00:a9:89:cb:ed:1f:45:d8:c9:b1:
         38:9f:26:82:73:00:17:54:9b:df:38:89:e7:75:2d:ca:68:6d:
         ed:69:e8:62:04:1f:68:bd:78:ce:d7:3a:b3:6f:18:e9:31:33:
         a0:43:36:4b:ca:af:dc:b1:f6:b7:c5:ff:1e:a5:45:71:f4:31:
         0f:9c:d4:65:4d:cc:ad:b1:57:1b:28:18:f6:d8:65:f2:98:8a:
         aa:68:5d:66:dd:fb:34:0a:cc:4b:39:27:33:73:7a:37:96:7d:
         a3:9d:09:f6:57:69:00:2a:7b:14:04:0f:fb:bd:e0:58:7e:7e:
         71:5e:2c:b2:0b:2d:eb:5b:86:27:80:e0:5c:47:58:c0:45:51:
         5a:65:6a:8c:98:35:92:1d:f1:c1:43:4f:e4:58:d9:57:ea:99:
         aa:ca:6b:ae:9b:09:0b:c9:0c:53:35:18:41:d2:46:b7:c0:70:
         28:15:3c:89:7c:be:a4:9b:ce:16:d5:05:a4:00:0a:d3:2e:a8:
         45:42:1e:38:cb:6b:69:b2:fd:b9:80:c0:97:55:1f:f1:00:6f:
         da:0e:ac:57:59:16:ce:e9:78:74:22:6a:7a:d2:32:48:c2:ba:
         64:1f:a5:49:44:e2:d8:d1:71:07:d8:3d:e4:93:09:9b:70:bf:
         3b:19:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----