Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File:                     QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier:          DMrUwmGaIsnbXhTSONlTwDP3gMvd3qTsObIiYHxj+xE=
Subject key identifier:   6A:B3:0A:10:12:B6:06:16:52:C4:D6:0C:2B:6D:F1:20:88:35:A2:5F
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer:       /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial:       01962DF3E31625A484BA110CA1DF38B433F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number:          14B6
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: qT1kSx1aTOp7j7PJmDHcjc9X7tcKS00ohM+yBTW28rw=)
                          2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e3:16:25:a4:84:ba:11:0c:a1:df:38:b4:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=6ab30a1012b6061652c4d60c2b6df1208835a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:2d:2b:12:21:e3:34:7d:3a:0f:d3:14:ab:
                    6d:b7:3f:ee:47:a0:06:92:1b:1e:f0:72:33:07:90:
                    b5:07:3e:c1:e9:42:37:2d:8f:88:06:61:21:43:89:
                    f7:e2:fc:bf:dd:82:88:25:b3:3c:8d:67:6f:3b:27:
                    b0:68:d8:e1:df:3b:e3:99:1f:d2:0d:aa:0b:c6:1f:
                    5c:4a:72:50:25:76:78:b3:ba:1e:1d:ee:33:bf:51:
                    a3:92:6f:01:0b:d6:0e:ff:3f:e9:57:de:08:f4:91:
                    91:ae:c6:47:ce:8e:5f:32:27:d7:53:54:fa:b2:f9:
                    1d:2c:93:93:cc:e9:67:7a:ea:4d:b8:2e:a0:35:ef:
                    f0:5d:8d:86:33:28:c2:68:95:2a:cd:0d:86:d1:24:
                    4e:3d:ea:70:53:8d:dc:5d:b1:8f:70:6e:56:b9:62:
                    2d:fb:90:d7:ee:65:84:07:5f:0b:86:e7:59:4f:a6:
                    7e:5b:f1:4e:7b:f7:10:1e:d6:88:97:f9:1e:6f:91:
                    06:41:02:bc:18:b7:04:66:4d:f4:d0:af:6f:b1:da:
                    b2:6b:b8:46:06:7b:83:5c:bb:cc:65:67:c4:cb:93:
                    01:69:9e:73:48:ce:28:80:a5:55:64:25:bd:76:29:
                    3a:c8:75:f9:8b:df:4d:17:94:5e:73:53:23:5d:80:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:0A:10:12:B6:06:16:52:C4:D6:0C:2B:6D:F1:20:88:35:A2:5F
            X509v3 Authority Key Identifier:
                keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4f:3c:a8:7b:3f:0b:9a:68:25:c3:e9:54:5d:b5:7f:0e:25:
         37:51:13:3b:05:4f:53:1a:1a:79:6c:8f:5d:ba:93:69:b4:a9:
         04:48:03:9f:38:dd:1b:15:85:c7:1e:b7:1a:c4:22:07:f9:fd:
         8c:4c:16:1b:e9:ec:52:9a:d8:3b:2e:71:5e:eb:17:76:12:a5:
         73:1c:9a:cf:7d:9d:95:f2:f3:59:d2:43:3e:5c:ed:9a:a3:49:
         51:44:18:8d:21:e4:54:83:14:4a:dd:69:28:8a:60:4a:3f:b6:
         73:28:4e:dd:08:e1:20:6c:aa:c7:56:60:75:3b:a9:a1:83:b2:
         0a:f4:eb:e7:f1:b4:8a:8f:c5:44:e5:2d:e3:2c:6b:47:28:b7:
         c3:dd:bf:79:46:8b:9b:8a:f8:7e:92:0e:6e:73:ba:3e:62:cb:
         b6:5a:97:68:21:b7:7a:06:d6:53:98:04:96:1d:51:06:94:2e:
         3d:f7:34:d3:6c:16:2d:3d:3b:c2:e2:21:e1:12:0e:8e:23:f8:
         97:50:fc:68:f2:1f:1c:de:a2:56:59:ff:c9:ac:85:ef:65:f0:
         ad:82:b7:62:41:30:a6:86:8c:74:de:00:b3:88:44:33:71:70:
         87:65:1f:df:78:f1:d8:bc:bc:c6:54:37:ae:a8:e1:20:48:f1:
         cb:ab:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----