Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File:                     QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier:          FvarwUZXHZkLo8AapWu0xUNJN6QPX1bFOf8ZWW9MYLg=
Subject key identifier:   60:C7:01:48:80:BE:64:84:47:88:61:39:A3:92:1A:E7:03:D8:8A:F9
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer:       /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial:       01962F0663D2D867D423F80118310EB3F3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number:          05B0
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: 6sq40v7Mf6pw+rL68YoWhgZ8Q4CESxhxDGMiacrW+Jc=)
                          2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:63:d2:d8:67:d4:23:f8:01:18:31:0e:b3:f3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=60c7014880be648447886139a3921ae703d88af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:0d:18:26:00:53:60:7f:14:fe:ec:1c:91:
                    38:65:ed:00:3c:bc:da:05:c2:da:e5:bd:9b:f2:22:
                    36:fb:2b:ed:fd:10:06:5e:7a:dc:9e:4d:8d:78:e6:
                    08:c7:c8:9e:79:d3:65:69:23:6b:60:91:a4:44:a3:
                    96:39:5f:d4:45:57:35:bc:dc:5f:85:82:41:54:d0:
                    9e:20:e7:fc:29:49:70:0d:78:97:bf:53:75:0e:43:
                    21:01:bb:07:22:22:55:57:4f:7d:06:f5:37:bb:7c:
                    20:b5:eb:a0:4c:b5:3c:6c:64:bf:d6:bf:74:00:a7:
                    b6:a1:ea:08:f4:bc:03:a9:a7:d2:37:00:ec:26:03:
                    3b:e9:a5:20:75:aa:28:ea:96:a2:0b:98:9a:06:e5:
                    f4:ba:b0:69:84:39:a4:87:d5:3f:04:3a:a0:c8:76:
                    94:d1:03:80:bd:2c:96:20:62:06:ad:83:22:c6:c0:
                    1c:88:a8:85:5c:bb:ec:0a:0c:25:1e:cf:3b:68:99:
                    3c:ae:18:b1:f9:bb:c8:40:5d:12:c7:64:98:f0:bb:
                    86:e7:bf:72:4a:84:2d:08:23:d0:cc:5d:ff:4e:7f:
                    71:58:6e:e0:5b:25:3e:98:b3:51:65:4e:3d:d3:7c:
                    57:62:ff:c7:71:43:66:66:75:be:78:eb:41:dd:4b:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:01:48:80:BE:64:84:47:88:61:39:A3:92:1A:E7:03:D8:8A:F9
            X509v3 Authority Key Identifier:
                keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:19:07:50:8e:5f:e6:0f:20:42:96:e7:bf:2a:1a:c2:7f:0c:
         08:18:72:4e:41:79:a4:6f:8d:f7:99:33:4c:e9:56:93:c4:22:
         70:0e:86:24:b3:3f:56:bf:3f:9d:c0:9d:8c:fe:3a:62:96:da:
         0b:be:e0:d4:db:1b:44:58:24:98:bc:00:67:88:07:7d:a4:d6:
         7b:6c:93:5a:75:6e:2a:99:38:d4:45:56:4f:1e:7e:31:08:01:
         a4:55:98:d0:32:41:7a:e5:e4:5b:e3:6f:0e:8d:12:9e:c6:93:
         07:45:34:05:8f:c9:6a:e8:9d:61:83:36:80:8a:ff:3b:eb:39:
         69:b6:aa:05:a4:55:a6:84:05:66:e8:17:18:9b:5e:b5:9b:b2:
         85:81:60:c0:07:d8:33:f4:02:58:71:e7:f4:58:91:63:92:40:
         61:68:82:9b:d6:43:d1:07:6a:ac:71:1a:ae:10:04:2c:56:14:
         33:80:33:6e:e0:dc:3c:dc:f7:04:2c:f0:a4:39:81:b3:2b:af:
         3b:e6:b2:ba:43:69:f2:07:ef:c4:de:3e:e0:8f:df:4c:25:0c:
         11:9c:49:0d:2f:29:88:18:4b:fd:60:d9:31:7e:20:83:d9:cd:
         24:7d:9c:01:d3:cf:fd:2e:1d:fa:05:01:19:14:f5:18:68:b7:
         af:74:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----