Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File:                     qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier:          N9DXCg8a/yhkvAQ8XjEcWDfVcL6zCOmT7CTpP9wle8U=
Subject key identifier:   30:71:E5:2C:F4:32:2D:F9:D2:85:A2:3C:68:2A:5E:1C:60:6A:5F:8E
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer:       /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial:       01962F063DE83EFC19B574A5BE0F3D7EC67B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number:          05D3
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
                          2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: 1HSa6wx1OHldt31j9H5QDP/TkXmk+HyWZju5Z5MFIhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:e8:3e:fc:19:b5:74:a5:be:0f:3d:7e:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=3071e52cf4322df9d285a23c682a5e1c606a5f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:c9:b1:e9:56:51:8b:61:2a:cf:a6:ba:97:
                    1c:70:b1:60:cb:5c:52:b3:42:12:bf:26:22:d3:b4:
                    4f:4e:56:7d:46:ea:bd:a7:88:8b:f8:af:13:1a:37:
                    78:d2:bc:b7:56:3e:5e:ce:b2:8c:a5:8f:3c:38:e3:
                    39:c8:66:56:e9:46:3a:f8:4a:50:69:85:d9:04:72:
                    6e:55:42:ae:15:c5:61:f9:3b:7b:c7:58:bc:23:25:
                    80:9b:2a:a5:12:31:7a:7f:84:3b:41:c9:29:65:35:
                    27:2e:a4:48:d4:5a:53:66:d2:49:f5:49:7f:a1:93:
                    6f:ec:e8:40:51:46:60:5d:19:de:28:1c:4e:7f:cd:
                    36:ea:12:2a:0f:b8:b2:55:f2:1f:cc:e2:be:ed:b4:
                    54:0a:f7:16:8a:7e:2e:f2:f4:99:32:62:77:fa:cb:
                    86:a5:15:42:67:b9:dd:c9:f5:10:63:46:69:cc:93:
                    ad:09:37:eb:fb:fb:db:16:f0:db:5a:07:41:4e:b1:
                    0c:1c:3d:ec:fb:b2:1d:97:9b:9d:e3:5f:37:bd:26:
                    6a:4a:2b:b7:29:b1:f3:66:50:69:5c:63:0f:30:64:
                    1b:94:1f:17:39:db:6d:42:68:b3:8b:01:14:3e:5f:
                    a4:23:30:72:2c:0c:6e:aa:65:ae:ce:8d:d0:1d:e5:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:E5:2C:F4:32:2D:F9:D2:85:A2:3C:68:2A:5E:1C:60:6A:5F:8E
            X509v3 Authority Key Identifier:
                keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:31:de:91:62:9c:a1:39:f3:c2:05:c3:3f:b0:5f:d8:00:
         84:2a:20:49:b3:a0:61:91:fe:2d:46:d5:d0:32:3f:f8:3d:64:
         83:74:be:ed:34:a0:49:e8:57:21:f5:ec:6c:69:11:03:df:cb:
         bf:83:ea:11:b5:ee:39:97:89:39:16:5c:b6:37:1d:49:ab:90:
         2e:f0:34:1c:e6:8b:e6:96:ac:d4:17:0e:02:30:60:ce:fc:91:
         3d:1d:cb:0c:a1:c0:a8:33:7d:3a:62:bd:af:a3:5f:2d:ac:93:
         8c:b5:bd:77:e7:b7:98:71:71:a6:27:b8:d8:b0:6b:c3:e6:5b:
         b6:ee:6f:12:a6:84:10:37:a8:86:ae:d9:93:31:ca:49:d0:ce:
         e1:82:4b:e1:6f:07:82:a8:8f:8e:f4:cd:50:a9:a3:8f:57:e7:
         ef:13:e4:81:7b:ff:a7:8b:22:bb:e7:7c:1c:39:4f:79:da:ca:
         82:f1:ee:50:2e:3b:bb:f9:35:d3:9a:43:7b:0a:ff:0f:8b:48:
         4d:c7:6f:df:c4:3d:4b:db:b0:b0:1d:90:57:d1:90:93:6d:77:
         dc:32:c4:2d:22:8b:0f:73:24:bd:af:d7:fd:07:08:b9:b9:f9:
         44:ac:95:bf:05:8c:97:6b:68:a0:05:a6:48:da:2a:fe:26:7a:
         1f:5c:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----