Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File:                     QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier:          K+Y5T5+NldVsyIZfdHvXfpJQPBv8Dr+HRLRsHcR7rBs=
Subject key identifier:   39:46:A9:6D:03:6B:4B:77:79:4F:7E:EF:4B:00:F8:F3:71:EB:66:B8
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer:       /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial:       01962E2AECEF4B6C9F7DDEAAD69F3A2B0A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number:          0145
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: Piu1c59oBMNavLvqdF+kv6poCnLyd6dC22+n/LgkPg8=)
                          2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:ef:4b:6c:9f:7d:de:aa:d6:9f:3a:2b:0a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=3946a96d036b4b77794f7eef4b00f8f371eb66b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:59:7c:96:31:b3:a0:f1:a9:ba:58:00:99:
                    f1:b3:82:f5:93:05:09:c1:0c:82:b5:d6:a6:93:a0:
                    2d:ba:3f:81:bc:04:80:07:76:fc:9c:11:1c:2b:d8:
                    c3:7e:81:4c:82:fe:56:04:02:51:31:07:8a:3d:2e:
                    9d:64:a0:81:c9:c9:9b:d8:12:fd:f4:cc:69:0d:a6:
                    11:b9:08:22:1b:74:85:4c:6e:4c:1b:9d:f4:c9:76:
                    96:89:9e:38:81:0b:da:8c:e8:c5:ef:30:5e:5b:c7:
                    bf:ff:23:92:d1:29:ef:00:ef:c4:1a:8a:1e:7f:83:
                    5f:52:6a:8b:d2:7b:22:77:d5:dd:b8:8f:e4:75:a9:
                    26:69:79:75:42:73:be:51:e5:d1:80:c3:3f:be:5a:
                    6d:8a:1f:63:1b:1e:aa:9d:88:6f:59:6c:e0:ee:0a:
                    cd:9a:a8:eb:2e:43:7c:60:a9:9a:6f:8a:8a:50:a2:
                    82:23:ac:e3:76:bf:1a:94:5a:70:0d:a7:d1:35:65:
                    db:f7:1c:ad:ea:e4:19:a3:91:71:a6:a1:ad:56:a4:
                    98:d8:04:66:91:99:8d:c6:50:d4:e2:42:76:c5:c2:
                    f2:cc:8d:ed:1b:ac:4a:24:ae:43:9f:38:9e:d0:80:
                    ef:15:e7:7f:42:7f:60:f0:78:6a:14:16:32:d5:cb:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:46:A9:6D:03:6B:4B:77:79:4F:7E:EF:4B:00:F8:F3:71:EB:66:B8
            X509v3 Authority Key Identifier:
                keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:93:51:ee:cd:e1:bb:d8:ed:08:cf:d5:63:7d:33:95:ce:a8:
         a3:98:4e:92:9d:14:10:3a:17:75:cf:fe:d2:8b:04:8c:c0:b7:
         ab:1c:82:06:27:82:cc:7a:f7:50:37:87:40:29:81:3c:57:1b:
         93:3d:d2:13:94:e6:2a:55:3b:3e:b6:45:3a:ed:2e:6b:2f:c3:
         84:6f:c1:a1:2f:5c:24:c2:62:4a:43:6b:75:8e:34:9d:00:f3:
         e3:81:06:77:e6:bb:33:71:69:1b:85:0c:f6:34:33:8a:85:6a:
         72:6c:b5:1f:4b:fc:b3:33:c3:0b:68:36:76:6f:f7:97:e0:68:
         45:c0:f2:28:ca:3a:f5:b8:35:99:c3:e2:3e:c6:a7:97:be:2c:
         84:30:bc:1f:ce:cf:6c:ea:8b:50:6e:ba:7d:a6:e8:b8:2f:33:
         4b:ee:1a:e2:5d:1e:2a:7f:5a:99:cf:6d:a0:c1:87:39:6c:09:
         99:73:33:bd:97:fc:9b:2f:a2:9b:3c:10:2d:98:1b:a1:8a:0c:
         6f:03:22:6d:47:c7:57:5f:eb:51:83:8f:06:b0:1a:5f:a7:4c:
         00:6a:fb:8d:fa:65:5e:ff:14:52:b6:0a:f6:6b:0e:be:79:c1:
         b4:77:a6:d2:01:c4:a1:12:13:af:b5:da:9d:fb:93:d0:f7:a2:
         3c:3a:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----