Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          OqBkhdRssmkHOlRMepKemleZvY/YaI8V8LN8aKwZYr4=
Subject key identifier:   2B:A6:1F:62:9D:FD:BF:C2:B3:BB:6D:CA:73:04:F5:DA:89:06:56:C3
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       01962ECF65443598800E9EE999C44B2DD53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          11C5
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: PPzEnn2NRGCJJFeTnlV/Z0cxWyhRVyuuJeI7KaEhK1w=)
                          2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:44:35:98:80:0e:9e:e9:99:c4:4b:2d:d5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=2ba61f629dfdbfc2b3bb6dca7304f5da890656c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:74:82:a2:cb:14:24:ab:6a:5d:10:9d:8d:
                    18:fa:bd:11:84:32:8a:88:f2:a2:d7:36:a6:b5:94:
                    eb:e6:b4:55:09:47:e8:98:79:4b:67:73:20:d6:dd:
                    a6:07:9e:24:d9:05:f2:7f:c1:75:7f:0b:6e:99:e7:
                    18:f1:3a:38:65:33:1e:26:da:d1:cb:71:9b:d8:80:
                    b4:20:5f:da:45:bf:e6:9d:5c:c3:6b:64:c9:78:b2:
                    73:5d:2e:4b:7a:55:f2:91:d2:3f:e2:4b:d4:37:19:
                    34:b5:e4:0a:a5:95:c4:c9:15:4d:fb:b5:5c:cc:68:
                    95:39:32:71:ad:c6:35:fd:39:00:9f:a2:cb:05:ef:
                    1d:23:99:ea:26:cc:8e:f2:aa:43:e6:b3:db:71:37:
                    57:1b:15:bb:e7:e4:bd:6e:47:40:75:ae:38:74:c6:
                    cb:f8:29:ef:b4:18:e5:9c:c3:4f:5e:af:dd:ad:0d:
                    e0:ba:64:9f:3b:a4:3d:9d:da:66:03:54:c1:4e:b9:
                    83:9e:55:bf:22:ce:f4:9b:b4:13:70:49:44:67:2b:
                    b8:e7:4a:d5:fb:20:ea:fb:c9:e4:71:87:b2:b1:c1:
                    73:97:d5:5a:68:5c:07:bf:61:e7:5f:1d:4e:95:54:
                    c1:b7:ef:ef:c9:9f:c3:93:33:81:50:d8:dc:11:1c:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:1F:62:9D:FD:BF:C2:B3:BB:6D:CA:73:04:F5:DA:89:06:56:C3
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:97:37:30:fb:d2:45:63:0f:99:8f:43:41:82:cf:52:5b:66:
         ce:34:6c:fd:f2:b5:d8:46:7f:01:73:be:14:30:87:ce:a7:a8:
         bc:71:3b:a7:9d:85:23:49:b9:6b:18:58:d9:99:6b:e0:6c:2a:
         7f:fa:20:12:37:73:7b:9a:b5:c6:3c:74:4c:88:fc:e6:5b:eb:
         b9:3a:98:f5:5d:a4:fa:56:33:68:a0:8a:39:4a:81:d2:f9:15:
         7b:17:24:1f:c2:d8:53:f7:80:c0:6c:55:fd:e2:a9:77:4f:a5:
         ea:9a:41:2f:4f:d2:9a:03:68:ef:91:67:48:52:ea:22:c2:04:
         85:e5:7d:80:b5:46:0f:93:44:33:48:70:76:51:2e:43:43:b2:
         11:69:60:33:63:02:bb:75:14:e3:b7:3a:ef:a8:03:b5:e9:34:
         2e:86:59:56:c4:f4:2e:ea:a8:8f:09:b1:4c:53:fc:0a:71:01:
         2b:ed:d0:d3:09:e1:60:b0:71:e2:cf:5e:f2:73:df:3c:12:75:
         75:9f:24:db:e8:66:f3:a6:ae:1b:45:47:7c:5b:6d:f7:19:9b:
         75:3f:17:e7:4f:ae:46:52:af:50:f3:80:a6:de:9b:df:db:a5:
         ce:08:7d:37:20:bf:6b:91:fc:57:62:65:58:7c:d0:c4:54:66:
         1c:aa:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----