Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File:                     QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier:          1uV20Gg01HX7UOtwiujc3lvLs8cPe+0ZhXMGzprLmgs=
Subject key identifier:   AE:BB:AC:50:0A:F1:A5:61:B3:C9:68:02:21:10:A3:A0:D0:B5:1C:F7
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer:       /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial:       01962E999AC3FA57D2F907EAA0A89A7EB690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number:          0DC1
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
                          2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
                          3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: ulFzEwQHHwXfsuGfKEm///Wk0tMQdGsbMqNWIykxlgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:c3:fa:57:d2:f9:07:ea:a0:a8:9a:7e:b6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=aebbac500af1a561b3c968022110a3a0d0b51cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:03:44:be:cd:30:8c:cd:04:f2:84:1f:01:
                    bd:c4:de:1b:3c:22:a1:ca:e6:ba:56:f5:b5:3c:79:
                    82:1f:63:d8:f2:32:c2:32:ef:60:4a:16:13:32:ab:
                    70:f5:4c:6d:47:c1:b2:29:c6:8c:7f:77:48:86:bb:
                    36:10:a7:7d:8f:1c:78:f8:48:91:b8:18:b5:5a:70:
                    ed:36:c2:ab:4d:70:72:64:1c:2b:c0:d9:56:ab:39:
                    fa:ff:54:bf:2c:c5:77:56:9c:43:b2:a2:3c:ac:47:
                    42:34:5e:8e:e6:e7:fd:6c:93:76:8f:2b:2f:81:40:
                    e1:d4:4e:b4:b8:0d:45:16:01:56:f4:e2:b3:11:22:
                    18:51:54:76:ed:05:f4:96:b8:ff:b4:8e:20:ba:13:
                    a9:22:f5:8f:f6:72:0f:71:5d:63:25:c1:cf:fa:58:
                    b3:eb:98:eb:83:ac:bb:ac:ad:8d:0b:c1:91:77:47:
                    76:9c:87:f5:e4:6d:a5:26:44:88:b7:57:20:d7:b3:
                    cb:93:15:d3:26:d6:d8:cb:59:d6:eb:0c:6d:3c:9d:
                    24:33:92:47:ba:80:fc:9e:05:46:66:c3:83:8c:2d:
                    d4:bd:98:ab:75:95:ad:eb:87:72:c4:b2:f4:9c:4b:
                    50:6d:f8:f1:0d:e5:d7:e4:4b:e9:85:ce:fd:a2:e7:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BB:AC:50:0A:F1:A5:61:B3:C9:68:02:21:10:A3:A0:D0:B5:1C:F7
            X509v3 Authority Key Identifier:
                keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:c0:81:88:a9:20:e6:b0:fb:b7:7c:07:de:56:cf:79:36:
         01:8a:bd:8e:8a:ec:fe:03:7e:03:1e:42:de:0c:57:9a:00:26:
         19:37:2e:99:5d:df:2d:17:77:30:8e:2d:46:ab:28:c6:e6:4c:
         bd:8a:91:50:9c:4b:4e:6f:a9:29:b1:69:40:88:3f:ed:ef:a4:
         1c:ca:4a:fe:86:92:28:5a:f2:02:b4:a1:6b:bb:ca:02:a2:a2:
         73:07:07:93:4f:94:e2:ae:98:05:1d:57:3c:3e:9e:70:d5:dc:
         cf:e5:a3:68:c2:2b:63:44:7b:7b:5b:a4:45:71:cf:f2:6a:e2:
         f0:a5:a4:f8:68:44:17:0f:20:b2:73:0a:c0:c2:1f:d7:09:d2:
         52:0c:ab:0c:69:74:6b:d4:d0:95:2f:0d:bf:bf:9c:5b:71:e6:
         38:4f:31:b3:72:63:c2:1c:14:d7:a9:32:76:7a:9b:64:c4:97:
         6f:ae:1d:47:21:7e:5a:a6:cd:c2:93:1d:5b:91:5d:a7:c5:e1:
         b2:a9:63:4b:f4:36:fb:4a:a4:53:a0:b9:b1:e0:99:d7:bd:89:
         fc:2f:20:99:a4:a1:1e:fb:c7:b9:1f:bc:33:73:32:7f:e8:47:
         c8:1b:44:ce:8b:36:5b:9d:72:ba:64:26:c6:5d:26:f2:d1:2c:
         24:9d:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----