Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File:                     QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier:          KAAJySefVlMcDIkl1kWWoVsQy1EfpncAFOrAGrqptBk=
Subject key identifier:   12:8C:52:CE:51:6E:2D:96:DE:68:11:A4:61:17:4C:B4:80:F4:A7:E3
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer:       /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial:       01962F3DB12C315DC66E3B8E30531AA57BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: +IIfM2uNabNucU0nRFWdcI8Hsmc+mLMCHnSqfJHAqFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b1:2c:31:5d:c6:6e:3b:8e:30:53:1a:a5:7b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=128c52ce516e2d96de6811a461174cb480f4a7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:f0:88:d5:28:63:39:f7:25:ce:05:5f:cc:
                    3e:58:c2:d6:17:82:75:0f:2a:4e:f1:62:71:d1:dd:
                    99:29:9c:96:57:7c:91:41:00:e9:a9:30:fa:12:19:
                    2a:b0:bd:17:92:bf:49:bb:a4:06:65:d2:8b:79:8c:
                    7e:69:09:25:96:15:88:b1:5d:39:1a:5e:11:aa:77:
                    6f:2b:a7:fd:9a:4c:22:45:14:ed:a6:ba:95:7a:77:
                    d5:a2:85:0d:53:e6:e6:0f:35:87:c9:4c:cc:32:9a:
                    01:87:38:8a:3e:a9:a0:b4:00:8f:4f:79:b2:f6:13:
                    eb:af:15:43:8f:85:8d:0f:d0:9f:67:14:a8:4f:c6:
                    5d:06:87:bf:63:d6:fe:2c:9d:64:78:98:16:4b:62:
                    ec:d6:b5:d0:70:49:65:95:e3:a8:f6:0d:b8:0d:15:
                    33:4e:e8:48:ae:e3:9a:58:2e:07:fb:e5:92:ee:37:
                    3f:dd:13:da:44:4b:d1:79:26:61:b5:d0:e5:60:b6:
                    1e:88:9c:c0:14:77:01:2f:a0:bf:66:59:df:99:df:
                    b5:0b:54:8c:2f:6d:90:d0:08:3f:30:1a:fc:25:70:
                    e6:24:fa:85:f5:57:0b:18:cc:36:8f:e7:cd:1c:90:
                    7f:62:df:2f:0e:9a:a7:b0:37:33:9a:eb:84:3f:48:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:52:CE:51:6E:2D:96:DE:68:11:A4:61:17:4C:B4:80:F4:A7:E3
            X509v3 Authority Key Identifier:
                keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ed:3a:0b:64:67:6d:99:7d:00:8d:a6:a1:40:58:56:fe:53:
         af:69:04:4e:a3:a2:e9:79:7b:16:e2:48:69:d3:f1:a0:1a:1b:
         43:81:45:83:a3:54:4d:8a:b0:f0:96:ff:02:cc:2a:2c:94:2e:
         e9:35:52:bb:07:f1:05:c6:ee:fa:3d:df:48:24:8a:93:eb:0d:
         70:fa:01:c4:71:32:d4:4f:12:f4:0b:be:ad:e0:30:1b:55:06:
         73:00:b5:bd:99:0d:3f:a0:89:69:6d:6e:99:2e:3c:ab:ca:77:
         95:4a:1e:28:09:f2:22:85:f2:9c:d6:0c:3a:fd:5f:bf:61:0f:
         a5:31:99:59:d3:9b:31:30:22:bf:ff:e8:99:f7:77:23:d0:7e:
         b9:3c:b5:b7:ae:3c:bd:b3:e5:99:94:72:02:d5:e6:93:76:a6:
         db:e7:59:27:73:be:d0:e3:2c:bc:8f:14:c3:94:50:a1:54:17:
         e4:0b:da:d9:40:83:8a:aa:eb:81:52:dc:2e:46:00:73:c7:87:
         63:b1:06:03:d2:e8:fc:eb:f9:bd:89:2f:e3:af:0b:72:35:96:
         77:be:a1:8b:a3:e2:17:68:9f:cd:fc:23:6c:89:f0:8b:46:54:
         20:d5:6d:ca:d3:a4:d1:c1:b6:da:d4:bf:8c:b4:4a:38:54:d8:
         9b:2b:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----