Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File:                     QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier:          RWvA5PJWqJdYY3XUkyPYLfiMLB1nFTNZ8422DvzlyA0=
Subject key identifier:   E7:43:02:82:1C:C6:52:AD:8E:83:2D:6F:91:2F:35:1B:17:03:0D:69
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer:       /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial:       01962DF428CD4E8F370D4ABF54B673D2E6DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number:          04D8
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: DhVx4KcrG8RYOi4/1MQeeHrjo6lYfxT84WKcIjgwGcQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:28:cd:4e:8f:37:0d:4a:bf:54:b6:73:d2:e6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=e74302821cc652ad8e832d6f912f351b17030d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:f1:1c:1d:2b:ed:58:c9:8a:b4:b8:1d:1a:
                    ec:6f:11:d6:6b:bb:c8:0d:ed:10:9a:2f:17:50:37:
                    b0:1c:a2:65:24:3c:5a:82:ab:f0:92:83:02:c3:58:
                    37:c7:15:fb:33:3f:bc:71:48:dd:8a:53:16:1c:12:
                    0e:3d:ee:3e:6d:89:1a:9e:f6:12:93:c6:f6:d5:43:
                    ae:05:ba:b7:20:59:d7:30:69:8f:06:a3:f3:8c:d5:
                    83:b8:21:9f:4f:31:ce:fb:3b:0a:95:33:83:e0:84:
                    f3:14:b9:f6:4c:ec:3a:5f:1e:ea:28:b6:f5:43:77:
                    d8:f5:a2:d9:61:4f:aa:a0:c7:d6:79:e4:86:01:50:
                    6c:c5:6b:c2:03:72:b9:63:f4:d9:10:e5:c2:63:1d:
                    de:83:2f:97:5a:0e:67:cc:a2:77:4a:38:51:36:32:
                    64:6d:af:34:8b:74:9a:7d:da:79:6b:bd:58:a8:0a:
                    a3:03:aa:0c:b7:b1:35:76:24:c8:0e:5d:08:d8:13:
                    27:90:4c:d0:1c:e6:97:28:6f:3b:c0:37:65:da:86:
                    c2:5b:05:12:e6:41:b0:20:4c:fe:2c:b1:44:ae:af:
                    97:99:e1:5e:ba:b7:31:f6:4d:41:8b:cf:9e:a1:f2:
                    a5:62:e7:32:b1:54:db:06:eb:2b:a8:21:61:f0:82:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:02:82:1C:C6:52:AD:8E:83:2D:6F:91:2F:35:1B:17:03:0D:69
            X509v3 Authority Key Identifier:
                keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:24:bb:b2:0e:94:ed:7a:36:5e:b8:bf:46:6e:e1:40:79:
         66:fa:30:14:46:dc:0d:92:16:f6:93:da:af:0d:a2:d5:3f:a6:
         51:2e:91:dd:7e:26:ae:16:d5:4b:5e:fd:57:fc:b1:50:3b:f6:
         f1:1b:6e:20:b4:ae:67:8a:0a:4b:66:14:39:72:9e:0e:0d:f6:
         b7:b1:c9:6e:04:a7:27:3f:e1:a6:e9:80:8f:58:de:70:fd:2b:
         b6:cb:dc:4f:a9:08:b6:d8:a4:b0:6b:7d:99:c3:26:e3:7f:64:
         68:47:b9:38:b6:b0:e3:24:7c:63:42:20:27:a6:f8:90:11:12:
         21:62:e3:d4:10:db:b7:1a:34:f4:e7:de:92:d6:05:26:3e:b9:
         5a:40:64:98:c7:2c:6e:5e:53:92:42:6a:8f:ac:11:47:1c:f3:
         0d:54:d3:da:16:7d:67:bf:92:bb:c8:e0:d7:d9:ea:06:9c:49:
         d2:13:0f:ec:b6:b9:19:70:f2:9a:c9:e1:e1:4e:fa:01:aa:24:
         f2:d9:58:13:f3:a8:05:64:be:c3:56:ab:90:5a:10:c1:02:43:
         83:96:b7:42:9b:69:9c:33:18:7b:1b:86:23:2b:73:9c:3f:78:
         90:de:83:54:7f:b2:3c:ec:1d:d2:04:98:d8:69:9c:4a:4c:2f:
         26:c0:7d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----