Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          ilevaRVHUKPpDAnAOXC3gexthVwrv+7CTeonecQMPWc=
Subject key identifier:   A2:2F:B2:77:26:DC:73:A4:B5:AC:5A:45:0A:FD:64:C8:19:D9:07:EA
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       01962F063DE2468C39D9C6ED547FC176E0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 1-RhDcNYEqAV9zgW384agcxQGvVQ.roa (hash: tYpbAh+cAHM1izV/ETf3AANIWRAFx9dkB7c17S/0d5g=)
                          2: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
                          3: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: OdHvusPlUNnQiCURjsRAtfE5IXCOvVuSx4pOHaZp+6k=)
                          4: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
                          5: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
                          6: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
                          7: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:e2:46:8c:39:d9:c6:ed:54:7f:c1:76:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=a22fb27726dc73a4b5ac5a450afd64c819d907ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:a8:b4:f2:af:9b:56:b1:d5:bf:47:69:35:
                    67:fe:68:d9:ee:fc:a2:61:4d:4a:15:93:94:f6:f3:
                    12:ac:d6:6b:e6:9c:e6:06:d5:f4:c4:99:d5:16:12:
                    be:37:64:01:c5:c7:d3:02:f3:8b:ab:2f:29:f7:ea:
                    23:5c:35:47:95:36:eb:7c:fa:9f:b7:74:13:29:1b:
                    96:e0:52:b6:9b:57:80:24:95:82:62:f3:a2:d0:ba:
                    af:9d:bc:a5:72:17:0a:e4:5d:49:74:19:7f:15:9c:
                    18:97:7b:b6:09:16:4e:3c:3b:95:f2:d9:81:d8:70:
                    2d:2a:a7:81:55:75:b0:3c:73:a2:c3:d3:54:4d:bf:
                    36:e1:09:ce:66:16:e7:e6:a6:a9:9d:03:c1:0c:48:
                    0b:15:60:be:50:ee:88:eb:83:4a:ad:5b:5b:48:d0:
                    38:67:c8:7f:55:55:37:5f:98:77:bd:0c:6f:1a:7b:
                    92:70:56:8a:87:9e:23:69:71:80:de:13:3d:c3:a5:
                    db:84:ed:51:41:76:91:3a:4b:23:d6:36:ad:e0:d6:
                    9b:5f:73:47:d0:c9:5b:82:5d:82:af:c8:cd:9f:f4:
                    98:f0:f9:65:c6:83:49:b8:c4:41:20:bc:54:1d:29:
                    4c:07:72:f8:e1:db:6e:b1:2c:3a:76:2d:20:84:96:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2F:B2:77:26:DC:73:A4:B5:AC:5A:45:0A:FD:64:C8:19:D9:07:EA
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:91:e6:7f:d5:60:39:ad:33:ab:73:a2:4a:7d:f7:aa:16:
         8d:c8:31:b2:24:97:af:33:13:fb:c8:33:0b:57:31:58:4f:b7:
         d6:1e:b6:8b:cf:7a:c8:c1:04:e2:df:51:92:f8:25:b8:16:6e:
         99:81:8a:e5:e2:82:dd:8d:9a:4e:f3:af:8f:85:ca:2b:48:b6:
         8c:9d:6a:bd:b9:b6:17:5b:bf:23:ba:6a:ef:1d:76:b3:0b:3d:
         da:2d:78:5b:a0:ce:1a:ed:40:29:27:c8:87:cc:f7:2a:fc:ff:
         cf:1a:4b:f7:ea:64:2e:6b:e4:c8:36:50:3e:11:6c:95:cf:3b:
         4b:4c:12:8e:c6:d9:6b:bf:9b:a6:5b:ff:3b:3d:88:06:bb:c6:
         68:d7:f9:15:49:d1:eb:97:ae:55:64:6f:e3:3d:85:d0:bb:9d:
         e4:0f:bc:1e:c6:73:0e:40:c3:e6:b2:e4:7d:4b:08:cd:cf:0a:
         8b:2b:d3:b9:e8:1d:08:2e:9e:d8:52:6a:14:69:03:33:fb:83:
         28:4b:97:39:f9:ab:00:8f:bb:bd:f3:3c:8c:b7:5c:7e:f5:3d:
         07:76:75:05:a0:41:8d:44:a8:e7:88:14:15:81:95:10:9b:55:
         03:1d:0e:f1:76:a9:74:bc:41:ce:15:66:f3:13:4d:03:de:8a:
         de:b6:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----