Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File:                     Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier:          v60c4gu/jTxeZMZFSGLsp1Ir3Zk1ydEZn8EauvJ5AcA=
Subject key identifier:   1C:36:91:9A:73:0F:1D:20:54:5E:11:1F:B8:5D:BF:CD:DB:10:37:D3
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer:       /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial:       01962F068351847AA72B0847DFB03402DBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
                          2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: suvNEYHoU/+ufuEkLXSc71vUHSZthyNVD3XnyIkDN88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:51:84:7a:a7:2b:08:47:df:b0:34:02:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=1c36919a730f1d20545e111fb85dbfcddb1037d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:fd:38:1a:f6:5c:04:b8:78:46:84:ed:29:
                    36:3e:f7:ea:b1:93:7a:1a:07:6e:88:57:06:1c:e1:
                    fb:c5:80:c2:90:56:fb:40:2a:07:ae:0a:9b:ae:97:
                    23:e7:ca:dc:1a:b0:97:fd:b6:96:b9:c9:c6:12:f1:
                    b7:66:1e:27:39:1c:d0:96:86:1a:91:2d:9c:95:63:
                    b3:8c:cd:76:71:d6:9c:e3:d9:43:a5:43:df:4e:5e:
                    fc:51:39:4a:3e:26:cc:d5:2e:bf:2e:23:81:7b:62:
                    ab:24:a1:8a:91:1e:fd:79:c6:cf:75:90:08:79:dd:
                    bc:c4:e3:7e:1f:63:b5:44:ec:57:4f:c0:7d:ca:a1:
                    a5:a6:33:f6:88:25:09:60:4c:db:72:12:5e:59:60:
                    ed:66:88:2f:a9:a7:98:09:36:62:ec:1a:0b:27:ef:
                    5b:3e:dc:2f:b2:f7:cf:87:83:f3:8c:f7:e4:6e:42:
                    d4:82:f5:27:01:9e:26:62:30:b0:12:9d:40:ea:1f:
                    bb:13:da:4f:22:37:4a:2b:d9:3d:01:ba:54:ee:20:
                    7c:02:5f:56:e9:6c:e8:fb:f5:51:29:02:14:eb:df:
                    2a:36:2b:9d:5a:a6:a7:b3:19:d3:86:89:f6:8f:5d:
                    2a:8f:e5:43:30:f5:88:02:b9:c5:1f:4c:34:8a:19:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:91:9A:73:0F:1D:20:54:5E:11:1F:B8:5D:BF:CD:DB:10:37:D3
            X509v3 Authority Key Identifier:
                keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:37:d4:73:d0:7a:2b:db:15:0e:9d:a2:40:5a:bd:6f:63:45:
         cb:dc:e8:bc:e4:39:10:e7:34:3f:9c:56:3d:42:5c:d9:9b:98:
         3d:40:51:82:b0:3a:64:f1:6d:a0:0f:56:2c:a2:58:34:32:02:
         3c:e9:6e:19:03:70:b0:8e:c2:ba:57:0e:64:34:fe:53:d2:0f:
         f4:7d:6e:af:66:bb:a3:d9:ab:5c:0d:d6:de:02:c3:92:9f:36:
         9e:ff:8a:8a:0c:32:24:55:ae:02:84:e3:9a:9b:b8:8a:2a:27:
         32:8a:b3:74:77:43:7c:96:e6:de:2b:40:55:a5:ed:57:60:e9:
         57:95:00:19:7f:0d:38:0c:36:ff:f0:88:b0:86:09:f7:ed:32:
         2d:08:52:34:14:c4:13:f7:29:8d:6f:ae:6d:f0:55:27:5d:e1:
         33:88:54:ba:12:93:3e:c2:ff:0b:1e:95:a2:8d:13:58:1c:f7:
         bc:ed:c4:50:de:27:74:68:49:72:74:26:b8:8e:7a:be:23:b6:
         7e:cc:5e:4e:50:98:53:51:41:b9:d9:23:6f:c7:da:d0:0c:7d:
         d8:5f:59:b9:9f:66:bd:16:2b:60:1d:c6:ce:fe:bd:4c:e4:2d:
         c2:8b:8d:e5:42:e9:8d:0f:dd:00:1b:9e:f4:b2:2d:b0:ad:af:
         fe:9f:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----