Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File:                     Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier:          plaPpDNuY0WFxpycd5UIR2+mLznznj+HDGdupkbuhzc=
Subject key identifier:   D0:BE:17:14:82:79:3C:13:5D:73:21:FB:F7:2A:05:99:CC:66:95:32
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer:       /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial:       01962DF3A47B6F6D34F05A0DA214EA42582A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number:          09CB
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: F7ksRUr/pP9k6RUqLONf6QoqwaC9jksO4ozqJxfBupg=)
                          2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:7b:6f:6d:34:f0:5a:0d:a2:14:ea:42:58:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=d0be171482793c135d7321fbf72a0599cc669532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:f0:2a:af:49:75:ae:1c:7a:3b:59:67:bb:
                    a8:cc:d1:9b:e8:46:5d:b7:60:1a:0d:30:d5:06:04:
                    a9:e1:b0:50:5e:f2:9b:9d:38:f6:95:3b:74:24:b8:
                    fd:79:78:b5:85:fa:9d:c4:43:60:76:b6:dd:2f:de:
                    48:c4:2a:e0:93:61:56:0c:8b:04:4d:f7:b5:1c:72:
                    7b:e3:0c:4f:27:a7:77:c5:8a:45:0c:99:5e:5a:ac:
                    f4:27:5f:a4:be:fc:5a:30:c7:e5:2e:8b:65:ad:ad:
                    7c:7a:a9:6a:f0:53:c3:75:76:fc:fc:7f:d8:e2:b0:
                    9d:6a:e3:86:15:48:91:6b:cb:0b:b6:c3:8b:12:35:
                    4a:37:e0:b7:92:e0:64:3b:ee:66:06:4a:30:8b:f2:
                    42:99:33:ce:50:bc:86:5c:28:75:28:13:88:41:c9:
                    77:6d:bb:d9:85:9d:85:5c:aa:77:5d:43:55:e4:c8:
                    1c:c4:50:82:41:23:9a:b6:4c:fe:17:a0:5a:f0:53:
                    d8:8a:2b:12:2d:c0:1d:26:28:ef:58:1b:92:b3:1b:
                    7a:fa:54:4b:93:6c:bb:72:ed:00:53:bf:11:6c:8b:
                    42:d6:3e:e1:0e:7d:ac:34:a3:24:61:89:29:cd:09:
                    91:26:d5:a0:7b:b3:32:2d:01:7e:97:bb:88:de:33:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:17:14:82:79:3C:13:5D:73:21:FB:F7:2A:05:99:CC:66:95:32
            X509v3 Authority Key Identifier:
                keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6c:40:3a:5e:63:b7:bf:58:eb:ac:49:cf:6e:ab:87:48:a9:
         10:6b:97:76:b1:30:70:36:c1:9f:c2:b2:22:4c:d4:3e:97:1f:
         1a:04:34:d6:0d:c8:7b:fb:b7:53:88:4e:1c:15:f3:f8:2b:45:
         4b:40:f6:02:96:34:c2:b4:07:3a:1b:3c:7f:54:a9:a6:f8:18:
         ac:f5:cd:15:72:12:b8:66:bc:68:5c:40:23:92:56:2e:92:b0:
         96:15:17:b1:e3:1f:55:87:8e:e0:a9:33:9e:84:fb:a8:fc:fb:
         2e:8a:f3:ae:92:77:99:28:e0:cd:69:d5:b6:af:6c:d8:99:5b:
         42:4a:8b:d3:08:38:88:ca:98:54:1e:c1:a6:85:74:80:b0:16:
         54:08:6d:0a:73:7c:3b:f8:d2:95:7b:03:57:47:43:c5:4a:fa:
         5a:84:54:52:60:9d:fb:e9:c2:8d:08:f0:a2:f7:ee:ca:27:b4:
         cf:32:0b:74:78:58:31:ce:26:fb:79:be:b0:34:b5:a1:0d:68:
         56:55:6c:34:df:a9:3b:86:49:49:aa:58:71:d4:a2:9f:98:c4:
         87:48:a9:80:eb:d2:76:ff:f4:3a:e6:06:e2:8b:fa:8e:bc:2b:
         59:f6:77:fb:ce:b6:26:12:40:60:d5:cb:8f:ed:45:4c:d9:c7:
         bd:27:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----