Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          J7VJDfKlTqO+eUYJpXPQFRET1SY30kBazTfm6Rwb+yw=
Subject key identifier:   B6:49:15:81:EE:97:98:3D:E7:8E:E9:5C:8C:9C:AB:EE:E0:ED:3C:29
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       01962E990013F73E65DECED35970F729BA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: W4k3hkqvetzT22gbaSOWXPSiTJNPpBQvbn/aqae6x+o=)
                          2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:00:13:f7:3e:65:de:ce:d3:59:70:f7:29:ba:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=b6491581ee97983de78ee95c8c9cabeee0ed3c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:1e:e2:09:6b:b6:e3:54:c1:b1:8a:50:21:
                    42:5c:f0:38:4c:73:de:f7:e2:fd:24:f0:3c:4d:9b:
                    9a:fc:5d:ab:bb:57:47:60:b8:29:ac:a3:5a:8b:41:
                    cd:a0:9e:41:88:3a:7d:42:3c:2d:a0:94:b7:e2:0b:
                    c4:8b:a4:dd:ae:8c:52:f7:12:ba:1d:a5:83:e2:e0:
                    14:47:b1:7f:07:d2:63:2b:fa:7f:cc:f0:6d:64:0a:
                    56:4f:81:2a:f8:4b:0f:49:7d:54:07:c6:a8:06:23:
                    8d:2b:1d:60:d9:c2:d7:65:ef:d7:8d:1f:3b:2e:32:
                    f5:26:13:70:f0:a8:1a:3e:72:ab:2d:18:64:8a:58:
                    9c:b5:6a:1e:55:60:42:82:6d:07:67:e1:4c:5a:6f:
                    3f:73:eb:c7:83:ba:db:fb:7a:5f:96:7a:18:6f:62:
                    81:6d:bd:4c:25:46:fd:ad:b8:54:43:e2:13:9c:c2:
                    51:52:7c:e8:39:58:de:6d:18:d8:10:1a:64:c6:94:
                    51:6d:fa:19:a2:75:26:7d:b1:c1:e7:55:63:83:32:
                    b6:6b:c1:58:da:bb:57:39:09:c2:60:10:2b:7a:b3:
                    7c:f9:9a:d9:b0:d5:71:99:a1:1a:c1:d1:ad:7f:b9:
                    78:98:ab:ee:ee:eb:ed:84:31:3e:3f:3e:9f:2a:84:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:49:15:81:EE:97:98:3D:E7:8E:E9:5C:8C:9C:AB:EE:E0:ED:3C:29
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:46:02:81:df:e0:54:34:1c:a0:f4:b5:d4:91:cd:ba:e8:98:
         68:38:a6:d9:c8:89:9b:4b:45:b4:21:a3:59:8e:6b:28:4e:23:
         5a:68:ab:96:c6:ab:3b:74:c4:a2:6d:cd:48:11:47:b0:c1:23:
         8b:92:16:87:e7:ab:ce:c3:1e:dc:a3:28:d6:4b:4d:aa:de:9b:
         be:be:b5:df:84:19:1f:15:05:51:78:f6:fe:4e:86:e4:bd:03:
         30:47:d5:79:37:4b:87:ba:b3:3d:7c:2c:31:c3:6d:6c:d9:c7:
         52:07:43:f5:a3:82:05:f7:54:c3:22:01:c7:58:37:e8:1e:b5:
         3e:48:ce:9b:1b:9a:59:3d:c3:5f:3f:c7:62:b8:d9:89:20:94:
         0e:ad:95:de:28:ef:32:e1:aa:bd:95:78:fa:cb:f9:5e:8c:75:
         89:4a:33:54:d9:f9:03:0d:15:d9:2c:5f:d6:29:60:fd:e9:3c:
         c9:9a:67:af:32:db:f1:3d:c9:77:93:ea:43:0a:15:d2:1c:87:
         55:59:9e:3a:2e:8f:55:41:51:72:b9:64:3c:55:ad:90:e7:11:
         cc:9a:24:b6:ae:50:44:f1:ee:75:bd:59:1a:1c:67:92:a2:39:
         b7:f7:25:a7:35:4b:de:56:00:0c:45:60:13:df:82:d7:10:09:
         d1:a4:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----