Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File:                     QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier:          usUQw/ZaSAcnmCaPqePDr4FU6G+GzSdv2pzFyCWkyII=
Subject key identifier:   1B:5C:60:E0:C3:2A:16:D5:E9:40:23:56:8F:90:A5:13:74:B3:5D:3C
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer:       /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial:       01962E98ACF3134610FD71A06B9F01DA296B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: xGEhTU36R7pbPsBv416FQiIc6oURMwgcANuwG038MYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:f3:13:46:10:fd:71:a0:6b:9f:01:da:29:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=1b5c60e0c32a16d5e94023568f90a51374b35d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:6b:c5:91:53:a9:4f:d8:85:b7:7a:d6:6a:
                    96:8f:f6:63:6d:16:ec:3d:98:54:18:d7:3e:b9:cf:
                    a2:73:ef:03:f6:83:46:f0:20:19:92:28:38:ec:f8:
                    01:95:bb:38:69:66:04:27:20:2e:4e:be:8d:99:e5:
                    ad:44:48:2a:a0:eb:bf:53:69:a4:f3:84:d4:8e:71:
                    0e:49:d9:27:c8:da:90:4d:2e:a0:26:cd:e6:7a:40:
                    d5:ef:6a:ce:95:88:f5:5f:8c:ee:36:03:be:01:a1:
                    8b:17:e6:b7:01:56:47:c1:5a:ac:ee:b8:f2:22:c4:
                    90:14:0a:cf:9e:6d:06:8c:d8:bd:8d:1b:9d:30:14:
                    37:df:cb:74:cd:3e:bf:c3:f5:07:fc:6d:1a:8d:1f:
                    8a:1e:5b:a2:95:39:48:5c:7f:1b:6d:8c:fe:36:ed:
                    cd:9f:02:90:1d:c8:ed:f4:d5:b7:e2:36:8f:ec:3c:
                    18:40:c0:62:65:25:ea:58:5c:86:ae:d5:8d:17:77:
                    a0:99:74:54:6d:1c:44:be:df:0d:4c:33:c0:f0:c6:
                    cb:24:35:4a:55:00:c2:8e:e5:76:8a:ad:4e:f2:bc:
                    d4:54:98:ce:ae:f4:52:79:ae:e0:86:ea:84:54:63:
                    7d:eb:d2:f3:97:c5:75:76:24:e0:b5:da:ff:dd:37:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:60:E0:C3:2A:16:D5:E9:40:23:56:8F:90:A5:13:74:B3:5D:3C
            X509v3 Authority Key Identifier:
                keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:af:92:2c:ec:ac:df:20:52:3f:40:5d:3d:a7:4a:e8:19:
         bb:ca:1e:c3:12:d7:66:ea:0f:2c:82:d6:d2:84:ac:4d:67:7c:
         4a:22:dc:6b:44:50:b3:45:45:60:cc:58:84:45:6c:66:48:1b:
         51:f5:01:f4:a9:40:d7:6c:98:bc:00:30:97:16:91:fc:ab:49:
         26:f3:26:ed:3e:1c:28:c5:7d:e7:31:95:81:b1:30:c2:f3:dd:
         97:b3:af:a3:fa:c0:1a:57:aa:8a:4b:fc:b8:0b:e2:54:3f:b8:
         89:b4:af:ee:80:4a:a8:07:21:f7:2c:75:59:b6:22:e6:0f:eb:
         a5:39:5a:06:5b:e0:df:d9:dc:b5:a2:40:f8:4e:87:ac:55:00:
         ff:c0:c9:21:b0:db:76:d6:22:bc:6b:52:ef:c6:5c:b1:13:85:
         43:98:70:e5:b7:9f:0f:57:df:69:8e:ff:48:f6:20:e8:ba:82:
         3a:82:6c:89:b9:bc:c5:12:bd:9d:db:5b:6a:25:3c:0a:7b:f3:
         7c:27:49:66:b4:a2:35:b8:a9:28:d3:e7:94:30:60:a3:24:ab:
         07:3d:ba:ff:48:40:e8:b6:9f:e1:b2:3c:08:45:79:f5:79:2d:
         7d:7f:f4:ad:59:b1:db:dc:71:96:83:f7:ea:a3:99:08:7b:80:
         df:31:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----