Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File:                     QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier:          gBD50lu8Hc73iOumgiajJfZ9GdN7J+KRL1YYuwKz5o8=
Subject key identifier:   CD:96:0B:60:31:A6:BB:8D:4B:F8:9E:4E:0E:88:CB:6A:24:F7:F1:FB
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer:       /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial:       01962F068AB3C18CBFDE3E5F738FBD914C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number:          046B
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: VjKe4X8ZL4h1VxgGk7jEQ01cWpJvkSG6A1cKu6r5AQw=)
                          2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:b3:c1:8c:bf:de:3e:5f:73:8f:bd:91:4c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=cd960b6031a6bb8d4bf89e4e0e88cb6a24f7f1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:70:ee:f6:24:a8:18:43:21:a3:1b:e9:d0:
                    9c:3c:a9:6d:98:23:ce:71:9b:d8:2f:60:8d:0a:45:
                    da:41:83:45:ed:c7:6b:f4:bf:18:2a:a8:66:8e:e0:
                    4d:a5:b6:9d:a8:2e:59:dc:5d:ac:91:e1:36:f8:a8:
                    e7:35:fa:3a:14:ae:6b:be:16:10:28:bc:0c:b2:29:
                    75:41:a8:71:70:a0:75:19:cc:fa:6a:29:bf:9e:10:
                    e3:4b:92:57:ae:ff:e6:8c:1f:47:05:5a:c1:a8:a0:
                    48:4b:2e:de:8a:05:47:34:a2:f5:5f:f5:82:0a:20:
                    3d:2f:18:6f:d4:f4:47:34:92:a2:ba:79:de:2a:3e:
                    19:9a:46:25:1f:52:aa:c1:e2:7b:87:92:e0:4b:cd:
                    2b:cd:9e:e8:42:2d:1a:ab:6f:9c:26:35:65:24:21:
                    f2:a2:1e:fa:10:7d:f2:4b:5b:b7:21:6f:ab:c0:35:
                    bd:60:ec:e1:28:f1:66:bf:52:2b:fe:9e:52:71:84:
                    b9:0d:cf:ff:bd:d0:f6:a0:04:e5:e4:6c:88:33:d0:
                    3f:8a:4b:8e:82:0b:c8:bb:5e:16:34:9e:2b:a0:75:
                    e0:11:d2:df:56:76:f6:5a:3a:40:13:d5:eb:53:02:
                    4d:61:b0:44:8c:1f:a7:e1:23:75:55:c8:93:ea:3b:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:96:0B:60:31:A6:BB:8D:4B:F8:9E:4E:0E:88:CB:6A:24:F7:F1:FB
            X509v3 Authority Key Identifier:
                keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:5c:45:42:b6:f3:50:ec:df:80:28:84:d5:12:ab:81:88:
         5e:d7:80:0a:c1:ac:ea:52:cd:ad:25:39:b0:6e:0b:f8:b1:7d:
         bd:a5:95:69:59:a7:4e:a0:4f:da:ac:37:5a:9f:ba:e5:80:06:
         70:80:c7:c1:09:96:78:04:88:de:57:28:63:54:72:fc:fc:5b:
         f7:0a:61:3f:78:db:b4:7b:ea:13:03:ba:25:b9:fe:fc:d1:28:
         8b:72:70:dc:2d:63:7d:b5:36:d1:24:80:cd:42:65:49:aa:ca:
         fb:c9:b1:35:67:c5:5d:aa:80:b7:1b:62:6d:16:6c:46:e4:d4:
         cd:b2:5a:11:6a:ae:75:b5:2c:bf:86:b9:ff:62:74:fb:5f:ed:
         0d:1e:08:68:bf:d5:16:02:c7:66:c6:e5:86:cc:c1:e0:3a:28:
         47:51:70:05:f1:5f:93:2b:86:52:6d:91:34:9c:2f:4f:f5:e9:
         3b:fb:f4:87:ff:2f:aa:12:8e:d5:0e:af:30:59:21:e9:04:eb:
         43:3f:44:92:e4:cb:b0:39:ee:f4:f4:55:f6:73:e2:40:7a:af:
         8a:64:07:b7:13:81:ff:3f:23:ac:5d:43:5e:97:9d:63:15:a8:
         02:1a:b3:a7:ee:5f:c4:48:04:c6:df:7b:de:57:6f:44:b2:84:
         e3:b1:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----