Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File:                     QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier:          JmhdpGq/5IOHihdBorHhtzhvIgcW+CXZM15cx8Pdbrs=
Subject key identifier:   F6:6E:69:6F:62:18:3B:D0:BA:4A:4D:92:57:5B:D8:7A:54:9F:C0:3E
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer:       /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial:       01962E2AC6AAE25DC1D4B8C309E184EA36DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
                          2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: jQMnn2iNLM0asQyupc4OTC5QcIxU0r9vwqp2Fx+FeNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:aa:e2:5d:c1:d4:b8:c3:09:e1:84:ea:36:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=f66e696f62183bd0ba4a4d92575bd87a549fc03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:77:87:17:bd:dd:f5:9d:57:cc:a0:c2:c5:
                    b9:3e:15:b6:fc:be:9b:ab:4a:e1:de:04:6e:40:04:
                    03:7b:fa:23:52:38:7e:69:72:c6:9c:5b:43:4e:59:
                    ac:6a:15:20:4a:b4:b4:f2:3e:83:2c:bd:76:ff:c5:
                    a3:80:61:00:02:8a:c4:27:9b:0a:65:18:00:4c:74:
                    df:3d:0a:6a:ec:a4:47:82:4f:87:c7:7e:ec:12:41:
                    21:12:6e:e0:d4:f4:1e:a4:ff:2b:83:e7:93:1b:99:
                    f1:da:87:e9:9a:06:c0:c0:4f:59:7e:a9:25:34:41:
                    6d:e4:8b:c3:30:bf:14:88:3d:f9:c3:d5:50:c7:38:
                    08:d3:5c:32:0b:bf:3b:95:5a:fd:65:44:2d:d6:39:
                    49:17:e4:35:30:dd:52:be:25:3c:b4:26:2e:30:89:
                    59:c1:b5:8b:f3:20:db:38:78:c2:29:4a:69:90:a7:
                    05:8a:8e:ed:2d:67:bd:52:0b:12:27:d9:f3:23:c9:
                    81:3a:7d:19:9e:31:a7:03:73:74:17:cd:99:50:4f:
                    8e:74:7d:0d:6b:9a:47:e7:d1:67:bd:3a:c4:9f:c2:
                    a5:e1:c1:85:dc:52:0c:95:1e:18:90:08:7b:b2:5c:
                    1e:94:b7:c0:cb:96:86:8f:b8:00:e4:d1:07:b6:58:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6E:69:6F:62:18:3B:D0:BA:4A:4D:92:57:5B:D8:7A:54:9F:C0:3E
            X509v3 Authority Key Identifier:
                keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:57:74:c7:bb:52:64:d7:e2:50:a1:08:7c:6e:0a:ce:e0:27:
         a3:be:1e:fb:9c:49:40:6e:0c:4c:1f:43:db:6a:de:c7:6e:8b:
         4a:44:53:9e:06:cb:b4:ed:de:b5:a7:05:f1:40:14:11:ea:70:
         09:ac:e6:af:c6:7b:35:d3:ce:6b:02:ad:5b:ec:cb:31:67:9b:
         bc:91:14:04:97:c4:1b:ce:5f:d1:df:31:ac:e2:e7:61:a1:bb:
         b0:5e:20:20:2d:87:dd:2f:90:24:97:b2:d6:e5:68:1f:0e:25:
         01:d4:d0:41:3d:44:39:f1:7b:b4:fa:5f:f8:68:cd:74:2d:dc:
         a1:2f:3a:63:54:49:73:5f:aa:e8:03:ac:e8:db:ce:e4:2f:17:
         0c:e0:d3:d8:41:67:7a:ae:9d:2c:f9:2a:ca:bd:7e:ce:9f:55:
         3a:9d:9f:d5:c7:eb:5c:84:14:79:06:e0:c0:31:5f:67:a0:9d:
         ad:3a:3a:ab:65:88:e0:bf:7f:a5:7d:e2:3d:0b:ef:49:03:b3:
         ff:8a:f5:31:50:d4:d1:32:f5:d0:0e:6d:c2:6c:fd:75:10:0b:
         d9:a3:e8:c7:56:76:af:12:10:9d:5b:c2:6a:b3:b5:f5:8a:09:
         24:2c:12:5e:d4:1b:ed:6e:10:c4:f7:32:0c:37:8c:49:dd:0e:
         8d:9b:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----