Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File:                     QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier:          g4DJybYoOJwQBi/WhsS1Egw4aAI2mkzmSdKIMfqoW6s=
Subject key identifier:   3A:0A:FC:D6:D6:08:8D:CE:58:65:C5:C5:02:A0:3D:DA:2F:9B:10:75
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer:       /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial:       01962F3D44F2C136D21F238A15F9D1806680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
                          2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: uz+vsk6xx/T8WaJe1zH/ddCMzIJkY/hFgqJrKEKZEn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:f2:c1:36:d2:1f:23:8a:15:f9:d1:80:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=3a0afcd6d6088dce5865c5c502a03dda2f9b1075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:88:95:f9:76:ab:47:9e:60:bf:cf:3d:88:
                    85:89:3a:90:43:db:06:b9:7e:d8:da:ab:92:fc:b9:
                    1c:9b:5d:19:de:71:9c:83:d6:26:ae:0b:d4:03:7f:
                    cd:ae:b5:a0:84:c3:08:e2:14:1d:fd:55:91:c7:7b:
                    27:a7:0d:ad:bf:80:67:c6:ef:0e:c7:42:40:2d:04:
                    a3:a3:cf:88:99:f5:ac:9c:c8:cf:72:66:2e:86:26:
                    f6:8c:f5:d1:54:a8:95:f9:92:97:42:11:3e:60:66:
                    e3:6d:61:d1:c5:60:fa:a8:47:0f:ab:1d:90:7a:81:
                    90:93:d0:84:9f:d7:84:f5:7b:f4:0a:65:65:38:e4:
                    a3:27:2e:7d:ad:14:6b:72:41:51:0d:5e:40:76:4f:
                    c6:22:26:cb:42:5d:63:e5:4b:ff:46:7a:2c:1f:a8:
                    a9:5d:c8:c4:b6:69:d1:03:49:45:2f:f0:a5:97:69:
                    bc:e8:8d:65:df:bb:cf:f3:4b:14:89:2a:c1:38:dd:
                    99:5b:28:9a:13:0f:0a:c0:33:91:53:b6:99:98:8c:
                    1e:76:3e:9b:a7:b6:71:37:23:79:33:0d:b0:d3:8f:
                    c9:1e:67:a5:c3:7d:ba:d5:e3:02:c6:0c:44:cb:5e:
                    9c:d2:99:c3:39:00:b5:5e:49:35:9e:25:b4:92:2c:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:FC:D6:D6:08:8D:CE:58:65:C5:C5:02:A0:3D:DA:2F:9B:10:75
            X509v3 Authority Key Identifier:
                keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:70:d8:89:30:b9:e1:ab:d7:5c:fa:7b:cf:0e:47:da:08:
         87:64:15:78:df:d8:4e:2c:0e:ec:fb:4b:60:2f:05:6b:fd:5f:
         6a:95:7b:fc:c5:69:1b:bb:21:74:7a:f5:87:b5:1a:5c:6c:91:
         16:b5:58:b6:41:50:c6:70:39:78:fc:d4:0e:36:54:01:be:06:
         8e:a0:36:91:9c:1e:a5:ab:90:84:64:04:1b:3e:5c:ca:04:0c:
         6d:e5:dc:2e:da:89:be:b0:ca:d5:c3:3b:cb:98:e0:1f:a8:45:
         b1:53:8e:98:67:f8:77:08:18:99:b3:14:41:37:5d:e0:09:89:
         ae:51:3e:2e:54:e4:78:20:b1:10:ad:72:40:32:95:ed:68:d5:
         70:cf:10:78:5e:40:4e:41:6a:03:c7:87:cb:c5:99:a8:01:35:
         40:39:47:82:ea:b7:44:f5:c0:36:75:82:50:51:6b:c8:bc:b0:
         bb:af:21:76:fc:21:1c:0e:c4:d9:ee:ef:bf:2e:32:a6:3f:ec:
         92:00:f6:a1:0a:6c:7e:cb:8d:13:cf:d7:73:92:b6:c8:26:9c:
         ec:f7:40:f5:28:db:56:e1:47:a0:70:50:c1:fd:18:45:ec:0a:
         b9:d9:46:14:e7:0a:e5:bb:f0:6d:ff:a9:1b:65:8f:47:33:80:
         33:8d:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----