Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File:                     QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier:          VwcZMh1DKvf2NB/4Dfad71L0OEXD/zQafdxopbEQlc4=
Subject key identifier:   79:A6:EC:02:47:67:8C:66:6E:FE:AA:AD:B3:A2:A0:13:23:9A:71:09
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer:       /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial:       01962F74EFB5BB776391A2CCC8B8403961E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number:          01AD
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: ufShDYtH1his6eUCaWyl142M1bVme0ZxSnMpc31W21Y=)
                          2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ef:b5:bb:77:63:91:a2:cc:c8:b8:40:39:61:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=79a6ec0247678c666efeaaadb3a2a013239a7109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:29:42:4b:58:63:29:17:e4:10:d3:f5:66:
                    cf:ff:94:d5:c0:c7:fd:ca:96:ac:11:94:40:0b:bc:
                    62:1c:91:08:65:ee:fc:37:05:69:83:f4:1d:31:de:
                    84:8e:14:b9:51:2e:c6:81:a4:24:3a:64:b4:b5:a4:
                    59:86:77:e4:86:3b:fb:94:c5:d5:31:40:b7:e0:cc:
                    ce:10:fa:4b:36:96:d3:0a:25:61:e3:d9:4d:1a:42:
                    1b:80:21:90:c3:97:b2:92:39:0e:e8:0f:8a:07:11:
                    6d:a4:3e:97:de:04:30:1f:d3:c0:67:d2:30:2a:95:
                    54:cf:19:9c:3c:bd:56:8d:65:8f:fb:8f:a0:b3:b6:
                    a6:bb:cb:09:77:3d:9b:cd:70:6d:b0:c5:c4:01:c1:
                    c0:73:85:9e:9d:81:a3:cb:96:75:88:fb:da:b0:c6:
                    59:2a:0d:62:80:23:d4:81:33:ba:6f:71:39:d4:84:
                    9e:db:fd:92:77:78:d1:d1:39:ed:d8:1c:2f:f0:c0:
                    9f:15:fb:c0:8d:1b:ab:24:1b:0e:87:43:07:cd:f1:
                    e2:53:cd:5b:a9:9e:20:b2:b3:8b:11:a8:ad:1e:47:
                    9f:37:ef:75:55:3c:fc:62:c0:50:03:d8:9a:a2:f7:
                    ef:9c:20:3a:e3:cd:4a:c3:a4:58:96:f9:c8:11:6d:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:EC:02:47:67:8C:66:6E:FE:AA:AD:B3:A2:A0:13:23:9A:71:09
            X509v3 Authority Key Identifier:
                keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:d9:1e:f2:bc:f0:3d:35:06:51:13:4e:04:68:ca:6a:b2:
         a4:aa:e2:55:59:aa:d2:e2:c2:18:26:5f:09:da:5b:3b:67:e0:
         83:04:c0:71:d9:37:61:c7:1b:0d:48:40:0e:27:96:47:b7:87:
         df:36:86:7d:80:30:62:72:8b:d4:3e:3c:7c:45:14:cf:d4:a3:
         4e:d8:42:a9:13:40:67:c7:e1:38:cb:1f:4b:b6:21:6f:a8:a8:
         e5:11:6b:b0:8a:c4:4a:70:80:de:b0:4d:5a:ed:8f:48:ca:16:
         f3:47:f4:ad:aa:dd:c7:f7:f9:a8:6f:fc:18:d7:85:f7:14:61:
         df:98:5a:26:da:9d:cb:96:ae:0c:3e:52:6f:13:11:68:86:c3:
         1a:c0:95:1e:2e:d5:63:2d:bf:f7:23:09:c4:80:27:4a:aa:e3:
         22:f9:95:03:c8:e6:99:79:dd:00:a5:91:29:01:2e:a4:90:2a:
         b8:00:d3:79:03:99:0c:aa:a4:ed:2e:e0:9c:b8:ec:f5:97:82:
         15:16:80:77:08:f2:78:a5:29:80:67:e6:a0:5d:2a:89:f4:d2:
         7a:cd:a3:c4:0b:8d:4e:21:1e:98:f7:b9:37:d4:d8:2d:cf:b8:
         ac:21:8a:5e:89:62:e9:ae:a8:bd:22:6f:fc:e2:be:6d:07:14:
         2e:ff:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----