Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          wNshwIN+PjAwp1ZBrrSZWKY308ykrouFKAqUc4csa/Y=
Subject key identifier:   D6:EB:8A:3B:F4:0E:F9:E2:45:A6:21:8D:F9:4A:65:51:EE:97:96:15
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       01962DF3FCBCE1D44152AFDB2EC4CEB1433C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          143E
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: utazy86eIOkEedHr0QPeaS/4LC3sxXfmqc8z3d+2zPk=)
                          2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fc:bc:e1:d4:41:52:af:db:2e:c4:ce:b1:43:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=d6eb8a3bf40ef9e245a6218df94a6551ee979615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:2e:71:16:b7:11:a0:19:e1:a6:df:eb:29:
                    b9:17:a7:ad:c8:f7:63:54:83:bb:35:55:de:ad:b3:
                    18:c8:2e:cb:ba:a3:69:bf:f1:18:dd:9c:c1:0f:3d:
                    f3:4a:42:1b:c9:18:3b:ea:ac:3d:56:fb:9e:b1:39:
                    54:75:cf:c1:b1:87:e5:5a:da:cf:79:bb:34:e4:46:
                    f3:c2:59:9e:1c:9e:7a:56:ae:d6:c6:41:58:35:b1:
                    1d:6b:67:fc:23:63:98:c0:a2:f1:f8:22:8d:6e:c7:
                    b0:59:af:86:de:28:99:09:ce:b6:a2:6d:4a:20:37:
                    3d:bd:3c:be:2f:c9:69:af:db:23:f3:62:46:44:98:
                    9d:a4:ca:ea:82:19:e5:ae:46:ec:85:cb:93:94:61:
                    ae:e8:8d:f4:af:2c:8f:0a:f6:4c:d4:f2:08:12:01:
                    93:08:8f:77:d0:0f:6c:94:dd:20:f9:3b:80:02:c3:
                    49:16:a7:b5:1a:d5:65:98:13:8c:2f:72:aa:94:c2:
                    9f:87:fe:bf:2c:33:a7:b2:1e:b3:93:1b:7f:2a:3c:
                    19:92:1b:4e:60:0f:67:bf:cc:4e:86:f7:f8:a4:5c:
                    62:7a:f7:dd:24:f1:ac:a0:97:61:15:9f:68:90:fd:
                    cb:94:68:5d:ad:fb:04:46:a6:a6:56:90:24:7f:bb:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:8A:3B:F4:0E:F9:E2:45:A6:21:8D:F9:4A:65:51:EE:97:96:15
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:14:14:4b:cd:99:20:9b:4f:87:31:64:4e:02:33:2d:03:
         1e:c2:2f:01:ea:e8:76:c7:ac:4e:2e:b8:6a:49:c9:8f:60:f0:
         49:61:82:ff:86:f0:87:7a:ab:c3:53:65:fc:f7:9a:85:fe:dd:
         ac:6c:34:b4:f3:7e:45:14:23:09:66:fc:75:bf:c3:03:f6:ca:
         87:7f:e4:f5:88:91:ff:d0:58:46:d3:d5:5f:9a:42:34:33:47:
         f7:20:79:86:8e:29:44:94:84:70:fa:59:9c:b0:cc:29:35:c4:
         e8:19:ce:24:57:73:9b:c3:bd:fa:d1:88:04:7d:0a:8d:a1:b3:
         58:c5:54:18:0a:49:23:88:11:f7:30:ab:c0:a6:f2:35:3a:4f:
         ff:3e:5f:9a:90:a7:0b:d9:3e:70:46:34:c6:9b:2d:cf:77:cc:
         24:ac:3c:fb:96:e7:f5:19:5d:2d:13:da:f0:13:2b:b6:65:54:
         24:d2:3f:98:2d:c3:9b:02:47:44:bc:15:ce:df:2c:11:13:60:
         ed:a3:ef:1a:fd:62:28:30:05:85:e9:9e:56:db:2f:2b:84:e6:
         63:9c:0b:34:df:aa:2e:6e:e1:f2:22:68:0d:9d:aa:81:3a:63:
         aa:62:fa:f2:0a:08:1a:24:0b:fe:1a:04:7c:fb:78:0f:f7:cc:
         42:aa:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----