Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File:                     QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier:          mSnWW8KQpyFRkbch870Oc0xfHN7Cx8MrA2Ee1kBpjnY=
Subject key identifier:   6D:74:03:0B:5C:6D:09:3E:DC:2A:DB:C4:A6:9B:7B:3D:7D:8D:09:B6
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer:       /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial:       01962FAB15BE47E96123DDDC32ACB72370AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
                          2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: 8L2ctFBV3I82lvPCFwCsTaZoEMGg1lRqMkUwUz9+rCE=)
                          3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
                          4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:be:47:e9:61:23:dd:dc:32:ac:b7:23:70:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=6d74030b5c6d093edc2adbc4a69b7b3d7d8d09b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:b2:a4:1d:5f:eb:1a:07:24:5b:bb:9a:a4:
                    4d:4a:d3:4c:6f:ee:23:c5:5b:49:54:e5:5b:d5:0f:
                    e0:38:48:63:b5:41:36:1f:59:ad:d2:fa:94:94:57:
                    40:64:a7:c0:12:1e:ac:05:d5:ab:40:44:07:43:0a:
                    25:8b:02:7b:ae:55:b6:19:87:62:8b:ab:16:52:94:
                    1c:ec:dc:5e:ed:fa:51:26:4d:a1:24:39:f1:75:09:
                    0e:d7:68:c4:34:a6:d7:b2:72:a8:9e:d5:97:0d:57:
                    8f:0b:13:56:28:07:74:7e:82:64:dd:16:51:f6:47:
                    80:fa:cd:12:9b:26:f8:f5:83:69:bc:1a:b3:59:96:
                    96:27:7e:96:79:94:1a:02:1c:f2:1b:34:4e:37:c6:
                    fd:60:fa:20:f5:cc:e6:70:9c:0a:0d:cf:a4:5c:3d:
                    a5:9e:6a:62:e6:74:39:96:f3:b3:da:45:ca:94:1b:
                    9d:28:c8:61:5e:d2:e5:2e:43:93:40:01:47:f6:bf:
                    45:5c:49:97:92:72:e2:9d:5b:f6:01:d9:25:51:92:
                    52:8a:b0:04:09:02:cd:69:ca:47:3a:13:7a:55:77:
                    34:84:2a:60:51:eb:8a:f0:fd:b9:3d:d2:90:98:37:
                    dc:dd:c5:d5:a3:8b:4a:cf:ae:32:ea:d2:ab:0d:41:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:74:03:0B:5C:6D:09:3E:DC:2A:DB:C4:A6:9B:7B:3D:7D:8D:09:B6
            X509v3 Authority Key Identifier:
                keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fd:f7:e4:67:a4:29:1b:1c:8b:d7:dd:75:3f:a1:0e:91:22:
         85:ac:cc:20:05:a0:78:ce:f9:3b:81:a8:7e:a1:da:90:3b:22:
         bc:9f:6c:7d:59:aa:c4:ec:d1:ae:16:e5:f7:02:6c:6d:8e:54:
         68:91:2e:95:bd:64:41:0d:be:b0:fd:9a:1d:0c:89:2f:c4:57:
         c0:97:6f:59:16:84:bb:da:36:99:2f:90:78:36:e4:2a:45:6f:
         e8:7d:f6:6d:73:c4:86:b7:7e:ad:f8:39:64:c0:1a:64:93:c6:
         3e:cb:b2:05:35:04:c6:c7:59:b7:ee:09:c9:8b:0b:16:63:7f:
         18:62:69:4c:15:75:d8:2d:05:89:7c:08:5b:98:ea:3a:2a:f7:
         1a:51:9c:3a:63:77:7e:c6:ab:4c:93:1e:cc:b1:81:d5:d4:9d:
         d8:e8:24:79:b1:a7:9e:bd:d7:bb:51:00:81:31:3d:01:54:36:
         39:a5:9d:47:e3:45:eb:6d:6c:cb:21:d5:de:4b:cd:4b:53:ee:
         00:d5:85:63:6e:df:77:25:e4:01:15:3a:3d:82:30:0a:e2:f4:
         48:d7:81:77:7e:df:3b:ae:0d:c3:a1:f1:8f:f8:87:5c:e2:ef:
         44:85:fe:e7:b2:95:4e:77:4f:55:87:f7:a1:4d:92:33:0e:db:
         56:b2:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----