Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File:                     QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier:          xgSezNA/YxS0DXpRZhCGY3g2yvNOcjfQ2B3A0OIhCG0=
Subject key identifier:   C6:25:E4:2E:D7:1B:38:63:9C:C8:EB:8D:A7:02:FA:AA:C5:E1:CD:80
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer:       /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial:       01962F3DCB2233805A7FEC047398E69BC9AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
                          2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: srzPR3DjKzxu6YGfwNTCKbR4NqOGMUXjA36KHD5iy2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cb:22:33:80:5a:7f:ec:04:73:98:e6:9b:c9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=c625e42ed71b38639cc8eb8da702faaac5e1cd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:74:14:c1:07:2a:2d:45:b6:d3:de:31:82:
                    90:f6:6a:79:09:a6:d3:8f:db:9a:88:f0:72:76:3d:
                    5a:4c:50:dc:64:15:3c:ed:46:7b:62:be:04:80:c4:
                    26:1a:00:86:84:ce:b0:57:6b:ef:ad:df:fd:78:e2:
                    19:ea:5a:d6:dd:b5:c8:bf:9f:9e:a6:58:d8:1a:99:
                    7f:73:58:39:25:7b:0a:ab:d6:09:16:3d:35:24:ef:
                    56:01:ec:65:2d:d6:5b:f4:a8:e5:8c:76:34:31:d2:
                    00:49:8d:de:3c:4f:34:bc:84:35:9f:9e:d7:bb:1a:
                    b2:2d:f0:22:07:af:93:3c:db:52:ef:4c:2b:33:cd:
                    51:ff:ca:3d:67:d9:48:a4:c3:e7:85:7e:13:22:93:
                    be:0d:ea:ff:54:aa:09:ca:22:dc:24:11:13:59:d2:
                    60:6c:80:5d:07:f7:f1:22:ee:ea:a8:e6:4e:fa:ba:
                    70:6b:6d:b0:54:fd:06:50:65:69:4e:84:ae:3a:8c:
                    c7:51:a3:ab:92:26:d3:cf:5b:2e:ef:a9:1e:49:f6:
                    f6:a5:ee:46:a0:c5:c1:50:91:4e:f0:9f:3c:9d:37:
                    19:22:8e:a0:b6:78:3f:c0:66:8f:58:f2:57:2e:98:
                    0b:44:bf:14:08:48:64:71:9a:34:6c:e3:b2:f9:2d:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:E4:2E:D7:1B:38:63:9C:C8:EB:8D:A7:02:FA:AA:C5:E1:CD:80
            X509v3 Authority Key Identifier:
                keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:17:b3:b5:04:90:c1:3e:11:43:98:02:0a:b0:01:9d:c1:27:
         cf:57:da:11:5a:59:81:80:49:89:eb:36:4d:47:57:1f:27:96:
         77:22:38:01:a3:55:4f:3c:0d:7b:3d:d3:6e:7d:62:8b:74:b6:
         87:13:18:3a:d5:45:62:a4:be:03:d6:37:a3:e4:30:ec:b6:ac:
         28:75:7c:76:10:fc:73:d5:8b:62:e2:30:60:8b:6d:cc:6d:0c:
         8e:20:aa:57:8b:2f:00:63:44:3f:52:de:d8:5b:96:e1:b8:8d:
         67:34:2d:85:86:2d:d3:19:d7:78:8e:16:ad:85:de:dd:c5:79:
         01:87:31:38:68:59:a3:74:94:a0:9b:7a:55:ec:8a:f2:84:a7:
         70:3f:fa:38:d0:9d:0d:a0:b2:67:cc:89:9e:73:e9:99:b7:e6:
         ad:99:62:51:20:ba:e4:2b:0c:ca:8d:a5:2b:f5:55:71:bf:f0:
         11:e0:e3:3e:5c:27:32:79:26:9d:78:cb:93:ef:20:14:4e:71:
         f1:18:8e:1e:f5:f1:cc:18:d7:29:1b:fe:fc:e5:1a:31:ed:b8:
         2f:0e:c7:38:b7:ea:73:27:55:89:b0:fe:51:01:2e:1d:2f:94:
         af:11:87:5b:e2:8a:78:ba:26:81:e9:d9:ca:1f:f4:f2:c6:45:
         27:f6:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----