Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          +6tdDzEwA/WNi5nT7WEN+YM3/iHxmGUk9CGGu+By3TU=
Subject key identifier:   E2:68:73:FA:A0:11:C5:B0:A9:1C:D5:C6:D1:96:BF:9D:89:DF:80:58
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       01962E98FCA316AC9AA0E8C4069DFAB4C95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0A7F
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: Nq3zzFTCI7VosWWrjfxIKzTB9IQk5bw8PO5NGXxJipE=)
                          2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fc:a3:16:ac:9a:a0:e8:c4:06:9d:fa:b4:c9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=e26873faa011c5b0a91cd5c6d196bf9d89df8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:b9:4a:60:dc:b6:75:c7:8c:90:8a:92:35:
                    4d:b6:a1:52:b3:63:ac:1d:dc:7f:1b:1a:27:12:5b:
                    2b:08:82:83:2e:6c:4a:04:3b:1e:97:ed:fb:47:10:
                    c9:f5:ee:a5:ea:64:50:65:4e:0d:64:17:d7:9c:6f:
                    85:55:33:84:a8:9a:d5:2c:b4:e4:97:5b:9c:59:2d:
                    b9:c1:97:63:b4:55:62:d3:54:5e:37:3b:92:3b:82:
                    75:5e:f1:f8:57:a2:24:33:7c:74:52:db:70:4d:a6:
                    73:3b:c7:b2:ac:88:ef:ed:13:a0:f8:2c:c9:3a:ef:
                    ee:3b:60:2d:75:7d:0a:e3:0d:cf:5d:08:d5:78:2c:
                    98:68:a3:85:cd:73:2e:60:61:b5:2d:e2:bc:8e:20:
                    95:cd:de:09:fd:d6:93:87:fd:cb:c0:f6:c7:90:ea:
                    67:3b:83:e0:41:33:2a:57:1e:22:88:1d:bb:15:69:
                    de:30:b6:94:34:8e:0a:c8:68:af:4f:ed:35:ac:dc:
                    6f:42:84:ac:5c:0d:f3:1f:99:dc:f1:31:8b:24:69:
                    92:cd:b9:1a:ee:9b:8b:b2:aa:5a:e0:79:d0:e1:c8:
                    28:df:0f:97:2b:06:66:86:b0:9c:5d:92:56:ec:5c:
                    25:96:d3:72:6c:34:05:a2:72:e7:17:1f:37:fc:49:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:73:FA:A0:11:C5:B0:A9:1C:D5:C6:D1:96:BF:9D:89:DF:80:58
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c4:ff:f0:27:07:3e:fe:0b:8a:5c:a1:79:b2:80:f1:39:23:
         2a:7e:b8:8c:bd:f0:e0:3f:93:c4:f3:e2:ac:e2:a2:7f:72:24:
         ed:1d:fa:17:6d:9b:85:f3:dc:de:4b:c6:3b:dd:9c:48:c6:c9:
         73:4d:b8:74:44:7a:b0:0d:11:bf:43:2b:53:f6:a3:af:8f:40:
         4c:bb:46:0e:10:d1:a3:52:68:d2:50:6e:cc:c2:0c:07:5f:b5:
         84:f7:ac:a8:8e:69:cd:67:c3:c5:4e:54:da:5b:04:eb:a2:a8:
         31:eb:69:52:21:e7:a3:09:26:e4:0a:43:3a:95:c2:29:d0:69:
         ad:eb:f0:bd:7c:d7:35:df:af:c6:9e:2d:3a:0f:56:b9:51:8f:
         ac:50:50:12:c3:fc:dd:28:a4:9f:41:11:e5:a9:bb:09:9f:bc:
         fd:b7:65:da:c5:2d:39:11:84:5d:33:40:75:1f:db:e0:05:2c:
         61:53:4f:18:7e:e1:17:4d:b8:61:97:ed:0d:56:ce:ca:61:9b:
         f1:1f:6e:d7:b8:e2:68:fa:72:a4:e3:fd:69:83:34:88:c2:70:
         21:a0:df:16:e3:e2:f7:d4:8e:97:3b:07:21:71:01:fa:da:90:
         b4:47:fa:48:de:ae:e1:4c:f7:68:fc:dc:29:de:6c:90:66:6d:
         5c:b9:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----