Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File:                     QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier:          t2Tv4vi3J48iqxQRMJQUkx2kOyjToYuMchRoGkZ6XEw=
Subject key identifier:   3A:08:87:4D:0B:77:F7:00:C9:37:D0:83:95:FA:41:47:CE:73:BA:E5
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer:       /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial:       01962ECFDA54A71E474011502C450CEE2061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number:          11A3
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: 9K1oH3Sn2ycIZGJqZqY7h4vyo2/86/45GzYacy/OwKE=)
                          2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:da:54:a7:1e:47:40:11:50:2c:45:0c:ee:20:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=3a08874d0b77f700c937d08395fa4147ce73bae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:94:e4:63:09:db:4b:84:71:b8:db:57:b3:
                    fe:35:5b:f4:ad:db:91:68:b7:61:7c:b4:51:ce:28:
                    de:97:cf:11:e2:53:0e:a2:75:80:58:03:b1:2f:d9:
                    ec:9b:9d:61:3c:fe:00:34:ee:5a:dc:e8:4a:33:a5:
                    e5:4e:ea:c1:04:e5:4e:7c:67:b1:29:73:d4:0d:ae:
                    fd:39:6c:e0:88:92:d9:fc:f8:02:9a:80:b2:65:e6:
                    fd:c2:e9:7e:87:dd:0b:d2:d8:1e:13:c4:d3:f5:09:
                    44:d2:c7:d0:95:9c:74:df:6c:c3:f8:a6:ba:4b:c7:
                    9e:06:c1:d2:69:e6:5b:0e:7b:6c:a9:7c:75:91:41:
                    8e:93:c2:43:16:f8:a3:65:7b:9a:9e:c3:dd:ce:bb:
                    7e:fc:99:cc:70:79:57:c1:f3:65:91:d8:a6:d3:1a:
                    7a:ac:c2:ac:7f:07:fe:3e:98:8e:f9:34:38:dd:99:
                    0c:c8:a9:ac:04:16:c1:b7:cc:2c:c1:07:fc:ee:7a:
                    95:8b:11:54:b8:63:bf:2e:d8:f9:17:1a:82:68:b3:
                    29:2f:80:4b:6d:e5:fb:87:f4:b3:7a:14:bf:51:72:
                    09:66:41:1e:d7:e7:e2:12:bc:82:6b:fa:31:2e:4d:
                    63:0d:4f:51:bd:d8:8f:3b:1f:b6:84:50:0b:b5:82:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:87:4D:0B:77:F7:00:C9:37:D0:83:95:FA:41:47:CE:73:BA:E5
            X509v3 Authority Key Identifier:
                keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:7d:7f:13:d0:55:87:57:b7:d5:6b:0a:fe:53:9e:4d:37:
         bf:8d:fc:4d:be:ac:45:a3:17:66:19:05:63:6f:ca:b9:d8:de:
         cb:d9:19:73:50:79:bc:d1:8f:23:19:22:93:51:8a:9d:ac:2e:
         00:dc:75:de:c1:6e:47:15:7f:f2:ae:3d:5e:a7:f4:63:2d:fa:
         19:02:81:65:98:c3:3a:56:7d:d0:7f:a7:52:d2:b7:95:df:3f:
         73:39:ca:88:c7:42:a7:3b:ec:49:03:22:85:f9:c4:74:f0:0b:
         4b:e5:9e:68:c8:d5:e0:9c:c6:03:92:e4:a9:c5:e1:b8:db:18:
         99:ff:e7:88:5f:36:91:9b:d8:16:a0:d1:1f:bd:16:e7:4b:31:
         fc:c7:7d:7f:56:7b:73:8a:7a:18:d8:ce:32:6f:30:2e:b7:ef:
         0c:04:de:f5:84:0f:e3:07:98:af:fd:5e:60:19:b3:15:1d:9f:
         a6:6f:e3:a9:27:ff:16:e1:38:3a:f3:ea:94:b8:92:af:cd:1c:
         3d:b3:12:4f:49:96:f9:2d:a0:2f:ef:4d:47:4e:75:c5:3b:d2:
         24:2a:61:86:9d:25:4a:2a:70:56:dd:1a:e6:86:62:27:bb:d8:
         8e:da:05:3d:bc:3f:bd:37:9f:9b:5f:cd:67:40:d4:f1:e6:31:
         cf:f0:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----