Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File:                     QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier:          2IKNOyZVU6BnVURonqoT446+1hH7e1V4zZAprs4t4IU=
Subject key identifier:   CF:29:BB:B1:61:B4:2A:25:BD:44:9C:B5:2C:FF:D1:20:1B:F6:1C:C0
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer:       /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial:       01962F06FFAD4CD1F075C99375669792F728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: ANiQEcIqi9fWjj1Nyd3SVod6gRPN0xqg9eFBLf0zhh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:ad:4c:d1:f0:75:c9:93:75:66:97:92:f7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=cf29bbb161b42a25bd449cb52cffd1201bf61cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:42:92:07:fd:15:bb:41:a1:38:19:c3:6c:
                    37:66:e1:86:90:3d:08:08:81:d5:b4:fc:96:38:53:
                    28:8c:24:4a:54:3d:9a:cd:a8:4f:42:0f:94:26:02:
                    df:24:22:f6:62:b4:a1:cc:16:99:b0:83:d8:3a:e4:
                    bc:93:04:99:5f:58:7a:7c:95:31:8c:1c:1f:e2:0b:
                    95:0a:ad:a0:dd:94:30:ee:7f:29:25:0c:ca:ea:ae:
                    a3:1f:f4:16:fc:bb:ac:57:d3:2e:fb:32:1b:8c:b0:
                    d1:a6:16:f8:82:64:04:71:7d:f7:93:06:70:f3:51:
                    1e:44:3e:16:57:f5:3c:df:6d:0a:2d:04:61:fb:09:
                    30:80:35:53:ae:93:9d:f5:ca:a2:d0:e0:97:e6:f0:
                    02:38:ad:8b:7b:57:74:2e:2d:df:3f:f6:4f:98:a9:
                    14:23:48:07:5f:5b:77:28:28:a0:2a:49:00:d2:6c:
                    e1:7f:c5:55:8c:36:df:bc:20:77:7c:5a:1f:0d:0a:
                    b7:18:47:99:77:c7:7e:e8:16:a4:f3:13:da:18:88:
                    3e:1e:df:cc:45:d3:79:14:4a:c6:ef:2a:9a:31:dd:
                    62:c7:4c:0d:68:61:fc:76:ce:c9:60:50:fe:4f:d5:
                    d3:fb:fd:f2:2f:b1:24:ec:9f:58:46:68:39:4a:ec:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:BB:B1:61:B4:2A:25:BD:44:9C:B5:2C:FF:D1:20:1B:F6:1C:C0
            X509v3 Authority Key Identifier:
                keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:2d:6c:fc:41:2a:87:a5:8e:10:e8:f3:76:25:0d:8d:99:
         21:4a:b1:30:43:f4:e4:af:d8:e0:5f:bb:f2:33:ce:17:27:e3:
         c5:d0:31:a3:d7:0b:c6:a1:0b:87:34:3e:8a:d3:85:df:25:83:
         36:95:89:a8:48:3f:e3:01:38:34:50:ec:bc:69:ae:72:1e:e9:
         eb:a4:64:e3:d1:4b:df:92:00:b8:94:0c:65:2b:d0:5c:6b:84:
         a5:a3:3f:d5:06:af:51:86:77:ba:01:ef:34:0d:09:11:ba:a7:
         22:30:cb:1a:9e:4b:3c:fc:f1:a8:b2:8a:19:07:59:e3:46:3b:
         03:0c:e7:25:c2:aa:be:47:e7:cf:5e:06:2f:48:5c:53:ed:e5:
         81:4a:d1:26:6c:a9:b6:c6:01:5e:84:e3:4f:7a:de:1c:98:27:
         15:63:b7:54:a3:f7:1c:ef:f9:ae:19:5f:76:4c:31:13:66:3a:
         43:ff:28:df:7c:79:78:20:15:93:ac:d7:92:67:1d:97:61:dd:
         2c:11:6e:2f:53:25:93:70:68:f1:f7:89:37:39:57:9e:cf:86:
         5d:c2:3f:40:4e:67:98:4a:9f:94:a1:83:fb:ca:19:0e:ba:a9:
         2e:99:64:0a:d8:02:e6:05:6a:f1:47:ec:46:d9:eb:06:39:89:
         38:4f:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----