Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File:                     qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier:          +Ja0NhtcDsG2vGwIjTBtxMwVovYFiv33wVDeUELbyUQ=
Subject key identifier:   A8:1C:23:9D:41:97:E0:A5:9D:27:B7:DE:21:85:16:A2:E7:17:95:56
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer:       /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial:       01962FAB903F9896A2392280029F9BB5EE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number:          103D
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: ltg0K+1TvYXCNiJFvVqjhCOSGu9k84PhuNT+FbaUo6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:90:3f:98:96:a2:39:22:80:02:9f:9b:b5:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=a81c239d4197e0a59d27b7de218516a2e7179556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:f0:fe:83:62:e1:84:82:b8:27:ba:91:6e:
                    85:21:59:c8:f7:7f:ea:42:d4:00:69:29:bc:89:1e:
                    5f:1a:1e:4a:1a:4d:b0:d3:92:d7:56:f9:3c:ea:9d:
                    10:27:8b:44:fd:ff:b5:77:c0:8f:7e:40:a2:2d:d4:
                    0c:1f:98:15:b0:9a:b5:f7:c0:62:05:31:6c:37:73:
                    f2:7d:c1:ef:76:12:a4:1f:fa:11:2c:b4:d4:dd:70:
                    0a:fd:b4:e3:14:4a:14:7f:92:ee:4a:5a:fb:3e:0d:
                    4d:36:3e:ba:6c:07:36:d2:2a:b0:be:c8:22:d3:31:
                    2e:fe:bf:5f:26:34:1a:01:c3:2d:ba:6d:74:13:fb:
                    74:22:d0:fc:16:91:fe:e8:c9:d8:10:ae:53:e3:ff:
                    ac:d5:2a:3e:98:7f:51:97:e7:c5:99:2f:06:67:8a:
                    e2:8c:c1:3f:79:ab:08:0d:4f:48:61:4f:a9:53:27:
                    b4:50:1c:15:71:4d:92:16:32:2e:ab:1c:33:c0:05:
                    21:2b:c2:11:6c:5d:3c:d0:89:3f:44:a4:bd:c1:52:
                    58:09:c0:b6:df:e7:cf:5e:f9:8a:d8:86:39:df:01:
                    a1:8a:36:8c:5d:19:ee:61:a1:69:d7:4f:0a:10:5d:
                    2d:b2:21:99:a1:46:c0:5c:f1:85:39:91:82:ca:cd:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1C:23:9D:41:97:E0:A5:9D:27:B7:DE:21:85:16:A2:E7:17:95:56
            X509v3 Authority Key Identifier:
                keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:27:a5:1c:35:79:67:d0:e6:bc:0b:ef:87:4d:fc:01:d5:
         da:ec:83:ee:5b:e9:3d:1c:4b:d6:47:81:4f:46:e0:0f:a5:99:
         c5:cd:92:6b:82:cb:d5:cd:25:32:b1:d9:3d:fe:3f:70:87:7d:
         01:47:6f:ee:7e:d4:5a:d9:66:9a:e6:39:4e:dc:81:ca:b4:06:
         19:4d:4f:37:0d:74:0b:8b:27:35:87:a0:06:c2:33:63:92:b3:
         71:ed:06:72:12:d9:d7:12:7e:2e:d0:f7:5a:6f:46:cb:c1:a5:
         6e:22:64:a5:41:33:32:ca:34:d7:1e:ad:7f:2c:d3:ab:5c:85:
         f8:91:d8:7e:24:88:c4:83:76:23:45:6e:af:29:58:f6:e1:b6:
         08:f3:a6:41:ea:e9:17:17:5f:3f:3a:7e:1d:82:57:ce:32:55:
         39:9d:24:a7:2d:6f:84:ed:6f:6f:32:9e:ff:38:e9:d8:d3:26:
         58:1d:08:d0:18:da:80:2e:44:d1:15:47:a1:8f:f4:2c:3a:48:
         ff:36:f3:a1:69:6a:93:4a:f4:e2:a0:ec:5f:93:dc:dc:49:69:
         75:f6:fe:c7:e0:8a:ea:af:67:5e:53:34:f2:06:b5:fd:92:4d:
         62:fc:d6:9e:4c:74:93:73:f2:2c:6e:d7:b8:c8:af:d8:d2:e7:
         e5:b8:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----