Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File:                     qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier:          +iD5fzLQxXzRNGgW/P7xjj2Cf9WaKIRa5EZpIfnoPe0=
Subject key identifier:   BF:99:BF:C4:12:32:3A:90:46:7A:33:AE:86:D2:38:04:21:DC:09:76
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer:       /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial:       01962F068E7C35124FC19D7E9CC62AFB40ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: uB+JQwLgngVJoc96HOIfe5ZDuheEEqDXvd/aA/DzkIY=)
                          2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:7c:35:12:4f:c1:9d:7e:9c:c6:2a:fb:40:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=bf99bfc412323a90467a33ae86d2380421dc0976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:7c:d1:95:25:08:d7:b3:d7:db:d3:95:b2:
                    cb:0b:f8:8f:b4:7b:fc:2f:dd:16:61:5b:ea:be:25:
                    ea:d9:c1:e0:05:28:d8:b2:0e:44:b8:15:7c:99:e2:
                    80:28:bf:f1:f5:6d:9f:f1:72:95:16:ed:d0:58:45:
                    9a:77:9a:ce:0d:a8:c2:d8:f0:e6:91:3f:04:d1:63:
                    25:c5:d5:2a:8a:40:10:fa:66:43:41:89:96:4c:a6:
                    bc:e5:7a:d4:62:44:0b:37:4e:b5:5f:5d:69:b6:e0:
                    67:f0:23:64:1e:b8:ea:b7:70:85:4a:7f:86:d1:b9:
                    05:8a:ca:e0:94:50:05:a1:7e:ef:d0:9c:27:7e:72:
                    c8:46:dc:f2:9b:6b:6a:92:75:c2:f3:fc:7b:b7:11:
                    f4:25:8b:32:97:7a:35:ff:84:5d:90:24:76:fa:fc:
                    20:cc:58:07:0d:36:31:ca:07:9e:bc:e7:d8:33:76:
                    92:6c:28:29:79:85:12:d4:aa:42:eb:25:9f:a6:70:
                    77:99:2c:52:d1:14:58:bd:b7:ce:56:ce:4c:25:3f:
                    fe:42:92:8d:39:fb:89:7d:51:41:79:df:54:93:5b:
                    1f:8a:a9:02:e0:65:3f:c0:a6:04:e4:f4:d5:7e:d0:
                    f7:63:4e:57:32:ec:4c:59:a6:21:4e:07:3e:90:5d:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:BF:C4:12:32:3A:90:46:7A:33:AE:86:D2:38:04:21:DC:09:76
            X509v3 Authority Key Identifier:
                keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:32:fc:26:86:c5:17:40:8d:11:ff:4e:14:5b:65:14:7f:
         4e:9c:4e:c9:fc:14:18:fe:71:88:1e:4b:7a:b4:44:6b:d0:4b:
         14:f1:73:f3:cf:11:6e:61:c2:fe:cf:cd:cf:c6:f1:9f:2d:4b:
         f3:ae:e7:78:37:9f:21:10:ca:d1:e7:f3:0a:9a:78:81:27:eb:
         31:ae:a9:6a:5b:af:a5:1e:53:c9:3e:66:1d:ea:e4:28:76:d6:
         27:e2:0a:80:5e:09:98:53:87:6b:c5:a4:56:f1:47:f6:81:b5:
         5a:5a:a1:cf:d3:68:17:a9:f6:8a:36:a2:03:ca:d3:36:24:b1:
         05:73:76:92:7d:b6:04:04:42:2e:f6:93:18:d0:f9:ff:41:2d:
         12:79:9c:72:0c:85:2b:44:c5:82:c8:22:34:89:d8:1c:d2:99:
         c9:a7:22:84:80:65:05:1c:ea:24:51:e3:71:de:d2:eb:63:99:
         9b:e4:e6:91:44:2a:ce:d3:1a:a1:33:b3:4e:0b:10:5c:04:59:
         04:c0:b8:17:b8:24:9a:87:39:68:c3:cf:32:e3:42:68:20:e5:
         83:fc:7f:f9:2a:75:93:6a:43:2d:59:71:c6:e1:71:10:8a:0a:
         74:6c:83:09:e1:b4:9f:93:d0:82:60:3f:6d:be:a2:9e:ac:e8:
         80:f2:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----