Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File:                     QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier:          iJu8cj/4Ue+TtjpOBILNApwtTcvSXO6jbEZGH2hzVeA=
Subject key identifier:   1B:F8:FA:EA:03:D6:5C:71:59:8F:86:86:7D:68:BB:5D:95:56:BC:E0
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer:       /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial:       01962FAB98071AEB4B065EA7507E9DEC060B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number:          1198
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 6KpfPRVUGyFsCkAEFBqf-wSXAyw.roa (hash: kWhiEuOzAfB/QvRqngqpda0Xfcej2KhLVFQbnAjy7tQ=)
                          2: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: 8c3KIbR5pMK6Sfpshairjw9HlHPs5NKQfop/vt8JWh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:98:07:1a:eb:4b:06:5e:a7:50:7e:9d:ec:06:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=1bf8faea03d65c71598f86867d68bb5d9556bce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:fd:60:9a:38:81:c4:bd:a7:a1:d8:6b:ef:
                    ae:ea:83:a5:a2:55:04:1c:9c:a5:8f:98:5d:fa:44:
                    10:5f:77:ac:ee:e9:12:a7:21:20:11:09:15:ca:31:
                    19:f0:33:1d:6b:fe:43:8d:56:81:4b:22:bb:4d:de:
                    b0:f0:2e:e5:8f:b1:db:4b:c2:e6:c1:46:a7:2f:ff:
                    a1:bd:94:e2:3f:5a:3c:9c:7b:19:5a:93:32:50:c8:
                    68:1d:93:6f:42:64:e7:b2:ff:70:12:fc:c0:b6:d8:
                    eb:da:71:bf:7c:5a:c0:05:dd:95:49:58:92:a4:db:
                    b2:2e:b6:f2:a8:8d:ef:34:de:d6:e2:31:ba:7b:94:
                    73:42:13:60:a3:10:f0:64:f3:51:6c:8f:be:c8:18:
                    30:b5:31:15:18:60:c6:99:c9:41:63:40:02:9f:15:
                    70:37:a3:67:25:a9:1e:00:ed:4b:07:c3:65:43:c0:
                    36:85:be:fe:ce:0f:cc:5d:cf:43:b5:7d:6d:26:07:
                    c0:17:0c:4c:f2:d5:23:dd:39:7c:56:ec:27:2f:b5:
                    77:f6:26:5d:b6:3f:a4:e8:d4:36:25:4b:75:75:a0:
                    98:8d:7a:5b:49:da:2d:6f:fe:83:7b:20:78:24:ee:
                    71:9f:33:40:48:19:63:c3:27:75:53:71:c1:b6:5c:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:FA:EA:03:D6:5C:71:59:8F:86:86:7D:68:BB:5D:95:56:BC:E0
            X509v3 Authority Key Identifier:
                keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:ea:04:75:a3:43:75:b3:57:2a:c9:c0:eb:43:38:2b:f9:
         08:fd:97:71:aa:59:51:5a:ec:ed:8d:41:f9:b7:0c:67:74:ce:
         fa:c7:2d:65:30:8e:2b:b5:30:30:bb:fc:17:fd:0c:9d:e1:aa:
         41:63:af:1f:67:ed:be:34:34:d5:0f:30:16:11:26:dd:f0:f4:
         12:fe:9f:98:57:d9:97:5c:e9:6d:27:ac:7d:9d:b5:06:b1:dd:
         01:5a:b5:c8:97:39:98:76:72:73:4c:95:38:bf:29:2c:6f:61:
         0d:32:74:4a:d7:df:96:59:17:4c:a8:14:ca:03:2f:20:f9:c1:
         e3:e8:ce:b2:f4:ca:03:4f:74:b7:2f:a0:bd:f2:07:9d:86:7f:
         56:74:e4:59:bf:d9:54:9c:ae:49:12:82:05:c8:da:c3:48:d8:
         f8:1b:02:37:72:c6:7a:88:63:c5:c1:60:fe:c0:fa:a3:f1:cb:
         3b:0c:c9:06:ec:43:23:a9:d6:9d:2d:55:68:88:e7:c2:73:b8:
         d5:63:01:95:de:00:02:3d:be:77:ba:2b:52:dc:59:0e:d9:bf:
         66:07:53:f5:60:08:af:f3:db:ee:a0:30:62:6d:fc:50:0b:be:
         8a:ec:2e:55:4d:95:d9:05:23:14:c8:82:07:79:8a:c4:99:d7:
         70:cf:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----