Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File:                     QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier:          BtB6t230AMs4gw0aihFcyDtpPdnPQFeS22t/sWpiumQ=
Subject key identifier:   09:5C:9F:69:59:E5:87:B6:CD:47:06:D4:5B:2D:59:F4:D3:0E:D5:A0
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer:       /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial:       01962F3D5E45862412697A32C1B063654C97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number:          06A9
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
                          2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
                          3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: jsPxgs5Uj+mfvnDui0w2BJcsr/gI3mO36W46gE6gnjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:45:86:24:12:69:7a:32:c1:b0:63:65:4c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=095c9f6959e587b6cd4706d45b2d59f4d30ed5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:0e:2d:24:a9:74:d2:af:9d:49:33:cf:b6:
                    b5:03:cc:ff:6b:d3:b2:2e:cf:c2:6d:d2:2b:ea:f0:
                    bf:0a:79:49:ae:6b:81:53:3f:35:34:12:96:6f:ab:
                    5e:b0:5e:63:76:bc:92:95:88:79:a9:8f:8f:ae:3a:
                    e6:81:3c:6b:90:2d:80:23:a6:a2:b3:c0:f5:a2:a4:
                    b6:94:37:ac:7c:9d:9b:23:44:84:d5:ef:be:e4:1f:
                    52:ce:f1:97:4a:9c:6b:c5:12:14:f9:f9:bf:e2:bd:
                    13:e0:56:03:27:7c:84:96:75:35:34:90:be:fc:93:
                    c1:03:3d:e5:6a:c4:d3:cf:b9:88:b6:cb:f3:4e:37:
                    7e:bf:d2:ce:33:bc:26:3b:c2:db:c0:2a:31:7b:8d:
                    a5:f3:33:ee:2e:23:f9:43:67:3c:5c:54:4e:f7:32:
                    bd:bd:65:a2:16:65:19:a3:e5:73:0c:c1:6e:8f:3e:
                    88:ed:ae:92:c0:b1:4f:21:91:d1:77:8d:d9:6e:e8:
                    e5:8c:59:db:02:ff:2d:31:9d:41:4e:6e:e3:4a:a4:
                    99:0d:8e:78:fa:8f:f7:54:cb:8a:c3:6f:0d:a8:69:
                    c1:0f:dd:43:5b:66:ac:16:7a:cd:de:75:47:31:01:
                    ce:17:bc:0c:a4:99:17:a4:99:35:3e:8d:c2:2d:c8:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:9F:69:59:E5:87:B6:CD:47:06:D4:5B:2D:59:F4:D3:0E:D5:A0
            X509v3 Authority Key Identifier:
                keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:b5:01:5e:8f:31:96:24:88:e3:cd:f9:5a:d8:06:f0:71:
         75:b2:83:52:0d:b4:e1:d3:fd:ca:64:c9:d9:51:07:76:d0:93:
         55:0b:d8:ab:e1:06:e7:6b:dd:b9:ce:92:6c:3a:4d:db:1c:d6:
         82:88:4c:b7:f6:99:5f:3b:91:32:74:0b:2a:eb:84:e5:29:9f:
         7d:58:9a:6e:30:9b:5a:87:2f:d4:19:7c:ed:f2:12:5f:d1:59:
         d5:83:7d:6a:2e:56:ec:79:fc:60:71:b9:6c:19:3c:eb:d3:d8:
         12:c3:82:47:53:67:a8:8f:4d:6e:e1:48:eb:f2:57:a6:fe:b9:
         44:d6:c2:15:cd:f3:1a:1b:bc:91:1c:22:56:ad:4c:d7:e5:6e:
         70:56:99:b8:17:20:04:be:d5:7a:e6:c6:f7:f4:9d:31:20:97:
         ce:d6:74:04:ca:e5:22:8c:55:b7:ce:da:07:9d:b2:b4:63:06:
         8f:79:2f:79:4c:0e:78:fc:dc:09:c4:85:5c:91:17:eb:c0:9e:
         47:3a:c7:58:79:32:9c:3b:e5:e8:df:a9:26:07:fe:ee:af:f0:
         d4:84:b7:70:56:47:3c:9b:8a:4f:ad:23:c0:61:84:c0:5e:68:
         5c:03:8d:f2:65:d5:38:9c:ed:1a:03:29:2d:e5:4b:32:f5:4f:
         cf:0a:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----