Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
File:                     QAnHa7ftKz0UTNhVpewajrfU3pk.mft (raw, json)
Hash identifier:          afAs34n5K4VWIF7d/tcC0CIdc+LMqj/JYPKaqalorXA=
Subject key identifier:   DD:DC:E6:2E:BE:AA:4F:FD:82:C0:EB:E6:30:F5:D7:66:49:D8:CF:F8
Authority key identifier: 40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99
Certificate issuer:       /CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
Certificate serial:       01962DF3C10A78C227D8BB947F25DFDA0C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
Manifest number:          138E
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: QAnHa7ftKz0UTNhVpewajrfU3pk.crl (hash: z4W4Wtec38e2pcJUgGFm2F71ry1v5F2llTuyV0go8AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c1:0a:78:c2:27:d8:bb:94:7f:25:df:da:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=dddce62ebeaa4ffd82c0ebe630f5d76649d8cff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:ed:3b:1e:d0:68:d4:c7:a7:5c:09:5e:65:
                    e9:76:be:db:10:bd:38:ce:99:3b:0f:0f:35:db:e3:
                    75:b5:78:bb:e7:d5:95:d7:6b:41:fa:48:fb:89:dc:
                    f2:1e:fe:ca:b0:1d:7d:ab:9e:34:ef:69:53:6d:64:
                    f6:ff:ff:7d:ec:81:92:39:13:c5:96:18:62:cd:7d:
                    2e:92:25:38:40:48:79:5f:50:6f:10:e2:95:41:48:
                    e3:ea:91:89:06:4a:76:35:58:79:d4:46:8c:fd:b7:
                    09:ec:f7:d4:d9:91:09:26:8d:93:6a:07:1e:73:d4:
                    08:35:fe:80:16:62:e9:88:35:09:2e:6c:72:73:d2:
                    54:5c:d5:e5:58:fd:3f:2e:5e:2b:39:20:38:c8:b1:
                    6a:96:50:69:f8:ea:6b:8e:90:fe:97:2c:93:62:3c:
                    c7:9f:54:30:fb:af:85:47:5a:af:d4:e2:9c:75:2f:
                    ad:e8:57:77:66:a6:ce:e6:26:b4:6e:bd:a0:ab:9d:
                    84:61:17:1f:cb:82:8c:78:35:de:3f:29:e5:30:54:
                    67:51:c4:1c:2e:04:31:56:2f:ae:f7:24:25:84:1a:
                    35:78:20:25:35:a4:df:5b:f0:3a:d6:df:9f:4c:ac:
                    1b:88:91:82:f0:dd:25:ea:36:ba:2d:1f:1c:fe:7b:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:E6:2E:BE:AA:4F:FD:82:C0:EB:E6:30:F5:D7:66:49:D8:CF:F8
            X509v3 Authority Key Identifier:
                keyid:40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:a3:31:bd:db:97:42:69:88:4a:39:78:ef:8a:f2:7e:f8:12:
         46:25:e9:b7:90:7a:5e:06:a0:15:ef:3f:ea:da:c8:a5:f9:98:
         71:08:a9:91:1f:df:ab:fb:b3:73:d2:4a:2d:a1:7c:38:73:29:
         90:48:e9:73:65:84:c9:2d:0b:62:92:9a:e4:10:e3:70:8e:ad:
         40:03:ee:23:0e:fc:a2:e3:be:47:bb:75:5c:01:be:d9:b3:21:
         24:c3:75:5e:09:c2:e7:68:62:05:87:bb:60:ef:11:aa:6c:3c:
         72:2b:96:ea:75:af:3f:61:bf:f8:5c:72:b9:c4:e3:74:c0:d7:
         98:73:78:55:36:0a:a1:02:7d:9f:7d:60:57:e3:8f:f8:56:52:
         08:45:f1:04:0e:2c:eb:20:1c:25:71:86:ac:8e:67:90:a6:a2:
         2d:81:fa:a0:3f:b0:5f:e3:21:24:cf:d6:fe:d5:63:ae:55:cb:
         60:46:c7:7e:0d:78:cd:2d:78:2a:a5:4e:ed:3f:b0:32:8c:82:
         d9:00:7a:85:de:74:38:68:9d:1b:f8:e1:6b:a2:b5:2e:c6:d2:
         39:28:97:a4:a4:d5:77:b9:00:63:16:aa:98:9e:a4:4f:7b:ac:
         36:74:7b:d6:7f:e6:5f:37:cc:ea:e9:2f:31:4d:e2:80:80:4d:
         e6:3b:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----