Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File:                     QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier:          7ecv+lPOx25Il1JoPJJ8EXmxT9hQVS29eyIh5JyvKOA=
Subject key identifier:   A9:75:A7:37:89:41:EA:C4:14:47:34:AD:36:C1:08:67:35:C4:96:CD
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer:       /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial:       01962E2B2B9446696F23D2EF9941C10577CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: PbpHI1ZC_qh6Iqt-kTdMP4W_DEg.roa (hash: K3Udc58xv21OmQH+u7wn/kXbZhJ9O+Rk784GDSjalf0=)
                          2: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: n5Ct4f8SNfBoWAV/an0M2KzgTGI5SgLhjvMDlH2Q17s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:94:46:69:6f:23:d2:ef:99:41:c1:05:77:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=a975a7378941eac4144734ad36c1086735c496cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:8e:58:56:14:4f:16:e4:52:c7:d9:8a:4f:
                    dd:07:d8:e9:95:f0:55:fb:90:a6:4d:81:88:dc:27:
                    ac:fc:8c:12:5f:20:43:22:e7:13:c6:25:aa:53:3b:
                    2d:80:72:c1:80:50:1f:77:ca:e9:00:e6:f7:2d:82:
                    19:5d:57:5b:79:b5:3f:ec:2b:45:7c:bc:6c:d8:b6:
                    df:cf:24:55:63:1b:69:8b:d1:fb:72:ff:aa:3e:9d:
                    d5:ff:e3:5f:d2:1e:8e:5f:39:9d:f2:20:e5:ae:68:
                    ac:d6:e1:41:a6:e3:e2:19:af:1e:aa:0f:c3:b3:f1:
                    20:c9:0c:ce:42:62:6e:cb:86:b0:08:ff:b6:a8:62:
                    24:58:df:22:43:43:7f:17:0c:0c:49:2b:50:83:b2:
                    42:b4:d0:cf:b6:77:80:d2:c9:27:38:f0:6b:6d:0f:
                    e4:7f:a8:2a:1f:6f:39:00:ab:87:c4:c5:e1:e7:83:
                    09:d8:2f:fa:3a:8b:95:1e:08:a2:9a:18:3e:75:d3:
                    f0:82:30:41:3a:21:d7:ea:21:48:0b:4b:77:a0:46:
                    52:44:ef:60:85:d8:c9:e2:66:fb:b2:61:d1:39:b6:
                    21:0d:14:8f:b6:6d:12:20:6e:aa:7f:c5:20:ad:9f:
                    50:60:6a:b1:26:71:1a:5b:13:e4:82:90:61:91:f6:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:A7:37:89:41:EA:C4:14:47:34:AD:36:C1:08:67:35:C4:96:CD
            X509v3 Authority Key Identifier:
                keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:46:30:0a:17:26:72:9d:e7:43:ac:41:2d:9b:34:45:2a:
         23:01:c6:85:e3:82:4e:bf:14:f9:48:5f:ae:fb:4e:d1:7f:03:
         0f:8d:35:e2:14:a5:67:3c:26:9a:b3:71:bb:99:2c:3b:54:dc:
         74:70:ae:12:79:7f:64:2c:53:33:09:c9:8a:d1:37:61:34:d2:
         d1:e1:75:76:b4:72:56:b8:02:5a:39:5a:27:b5:73:4f:d3:3a:
         47:87:39:97:7d:ac:a3:6f:bb:12:26:f0:49:40:98:e1:10:aa:
         73:14:52:f8:65:38:43:3b:0a:23:a6:84:dd:19:f2:4a:45:8c:
         1c:30:9a:6c:50:43:45:39:b3:55:90:81:89:16:a8:65:ba:2b:
         45:80:3e:ad:f8:fb:69:be:e2:2a:9b:43:e6:46:ac:b0:a9:7b:
         27:ae:48:12:19:af:d6:54:c0:f6:db:76:51:58:9c:6a:4b:52:
         6f:42:6a:10:f6:d2:e7:4f:79:8f:d8:d3:bc:b9:b4:d3:10:75:
         19:91:04:a3:05:17:9e:42:49:bc:f0:bd:56:0c:2d:88:85:8b:
         48:46:13:4f:5f:04:66:f6:9a:c7:cb:24:9e:76:54:1d:20:d7:
         57:12:94:97:38:11:c9:d1:90:65:a8:af:db:9a:76:c5:c3:d5:
         9f:6c:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----