Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          VCaFb5tAgdV46xrJCXHG4d2Hnzs5f+IYfj5KN5TvIYw=
Subject key identifier:   CE:F3:3A:2A:EF:2E:2E:29:D5:25:61:F5:6E:27:44:CF:94:1B:7C:DF
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       01962F3D5B258E70E76DAAA0E1863964D4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
                          2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: vX/nuW9nK8aMSeDvYQOPsHvOjmIwmvhf8v6itdWH4qE=)
                          3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
                          4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5b:25:8e:70:e7:6d:aa:a0:e1:86:39:64:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=cef33a2aef2e2e29d52561f56e2744cf941b7cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:23:18:2f:32:d9:56:a4:a2:b5:48:05:a9:
                    95:5b:38:33:b1:88:5b:02:61:ed:62:38:1a:f9:6d:
                    96:3a:0c:2b:99:4e:36:67:ac:72:04:cf:7c:76:6f:
                    d8:59:8b:cc:d2:0f:ae:d7:04:85:21:a7:d1:8c:3c:
                    7e:a2:72:b1:07:dc:80:b7:1a:c6:96:1a:d6:da:7b:
                    9b:9b:08:af:ea:c3:21:75:72:94:72:99:52:6d:eb:
                    4a:86:0b:d9:3f:9d:66:39:91:d4:a9:0f:b3:f7:49:
                    8c:85:63:33:6d:8e:5e:df:9c:31:c3:60:78:02:f0:
                    21:40:0e:14:e5:3d:12:3f:e7:78:c8:33:f8:6d:01:
                    d1:bd:a2:db:44:85:ef:92:bf:44:24:8b:4a:07:0e:
                    18:67:6f:f2:26:2a:d0:56:0d:17:a9:f4:25:8e:2b:
                    0f:22:c2:b6:08:1b:56:b2:25:57:fe:6e:48:be:34:
                    76:e8:ac:84:9d:6d:5e:da:d5:cb:31:fa:b3:f5:60:
                    79:c5:d2:c3:c6:af:8e:99:82:e2:e1:eb:a9:cb:92:
                    88:9a:f4:1c:91:21:93:64:a7:fe:6f:98:03:e8:6a:
                    4e:ba:68:71:40:69:4c:01:62:e4:3f:c8:9e:f3:14:
                    a2:2a:b5:4e:11:af:ec:75:d5:13:9a:51:66:0f:7e:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:3A:2A:EF:2E:2E:29:D5:25:61:F5:6E:27:44:CF:94:1B:7C:DF
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:99:d2:89:d9:fc:43:da:da:44:a3:21:3a:1b:46:89:bf:49:
         8c:4f:84:e2:b8:e5:62:b0:ab:8b:57:c0:d7:bc:97:e5:8c:66:
         22:49:8d:f1:b2:52:97:e7:66:8b:07:a3:51:f8:43:aa:08:67:
         ee:f7:de:78:98:c0:da:79:af:43:c7:19:69:6a:a7:ec:52:df:
         9e:0d:ee:cb:6c:2a:61:a2:24:a3:8f:28:69:7b:23:08:01:e9:
         93:81:bf:20:2d:81:ad:61:b6:23:5e:c7:54:31:8f:f1:2c:f5:
         dc:fa:b5:e9:d4:f9:df:e2:bb:93:3a:f6:dc:3c:28:c6:5f:74:
         46:dc:d0:43:df:ca:4c:6e:0b:0a:eb:9c:dd:ae:09:c4:fc:74:
         cc:0a:f4:50:05:da:a6:0d:b5:5e:18:6c:bd:55:41:80:40:66:
         05:d3:61:60:24:8b:05:a9:61:de:74:5c:ff:e9:bc:b7:7b:71:
         cf:44:45:2b:b2:5c:f5:4e:ae:59:7a:f1:69:a7:63:67:eb:f7:
         9e:b9:c8:c6:53:10:e5:5f:03:fa:bd:7a:f8:49:ef:58:33:b4:
         0f:5d:f0:92:86:9d:40:11:69:1a:9c:78:96:3c:35:aa:48:ff:
         15:14:9c:f3:7a:bd:a3:99:a0:b2:d7:4c:20:0f:4d:be:7e:42:
         0f:4e:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----