Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File:                     QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier:          s+h9030iczrN3QS+oWE3oZMnJX9gV5M+bG1ZQRnTOj4=
Subject key identifier:   93:BC:BB:65:9F:7D:86:03:0F:71:86:B8:73:C0:FF:77:89:65:4C:9D
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer:       /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial:       01962E2AC998CED12C55F050235F78610ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number:          0873
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
                          2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: aroZoykcRscbiKceXHC7wCGssvsYuRJZdxDiymswmv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c9:98:ce:d1:2c:55:f0:50:23:5f:78:61:0e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=93bcbb659f7d86030f7186b873c0ff7789654c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:02:da:1e:d7:33:6f:0e:06:56:6e:2e:33:
                    27:05:0f:17:95:9f:2b:37:e1:6c:fd:e9:c8:4f:c9:
                    36:34:ec:28:a4:52:55:cb:01:48:35:90:56:0e:61:
                    27:c0:6a:b0:ca:58:c9:23:e3:af:bf:7d:1e:2c:bd:
                    09:d7:cf:1b:0a:ff:4b:a2:fa:59:6c:fe:13:a4:72:
                    65:86:8c:58:51:60:fb:12:f6:35:08:06:5a:8c:4f:
                    84:35:44:ea:00:95:ae:ec:e5:22:4f:cc:69:ea:98:
                    72:98:40:8a:57:57:c1:b4:7e:82:e4:fb:fb:61:90:
                    17:3e:b9:e3:3a:14:e3:4f:f6:b4:22:ef:9f:c5:06:
                    d0:17:ff:94:74:92:ab:53:5f:7a:d8:f3:76:48:bf:
                    33:7b:42:76:80:35:82:7c:32:cf:c3:c0:5f:dc:a2:
                    43:d2:e7:3f:e3:b1:01:f3:39:61:53:bc:72:b6:80:
                    13:a8:6f:87:a4:31:07:32:c1:88:db:8d:60:d7:79:
                    85:5b:38:74:f1:00:85:89:56:be:f7:b5:a6:0b:98:
                    e2:49:fc:75:5a:ac:78:97:a1:1d:8e:80:09:32:dd:
                    b4:8c:b0:a4:bb:a0:c9:e0:44:86:0e:57:8f:c8:a8:
                    52:b7:6c:9b:23:93:d9:28:34:4a:89:6a:d1:84:89:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:BB:65:9F:7D:86:03:0F:71:86:B8:73:C0:FF:77:89:65:4C:9D
            X509v3 Authority Key Identifier:
                keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:98:bc:e4:17:ec:4d:19:57:e0:10:b3:2e:58:f4:0f:03:
         96:08:3e:a2:1c:64:3e:b2:20:d9:a9:62:df:e0:7a:20:6c:5d:
         d7:6d:88:38:69:a5:23:ee:40:cd:e6:c1:ca:50:32:30:43:20:
         f9:a9:98:d2:47:85:32:e3:cb:3f:e2:10:c4:ec:67:40:83:43:
         af:c1:37:a2:5d:f0:4f:dd:51:9d:7f:d7:0e:b3:54:a5:1d:14:
         4a:f3:49:14:53:81:4c:71:ed:8b:86:57:6e:d9:79:92:0b:0f:
         12:95:1a:7d:a8:16:26:c6:01:e2:33:17:ce:36:96:08:d1:10:
         fb:0d:19:4b:5a:f1:4a:09:52:67:9f:b3:3b:e6:53:ac:e6:85:
         83:64:cc:a3:e2:b9:66:ed:5b:17:f2:c6:0f:5d:85:47:6f:ca:
         8a:0d:8e:58:8f:96:fb:bb:2b:43:4d:f1:f5:17:00:a6:e0:d4:
         15:67:29:07:44:db:8b:d8:88:ed:d5:23:ad:82:50:df:9a:55:
         8a:84:0a:48:1f:05:69:c0:27:47:c6:20:99:5a:ef:57:38:e7:
         20:92:4d:9a:21:bb:2c:88:8d:64:fe:6b:45:d7:73:2c:31:b5:
         04:50:5c:b6:6d:d7:18:26:63:45:08:94:40:16:ce:9a:36:80:
         15:99:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----