Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File:                     QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier:          7w078oATxTRQWYMIA9KeBt6h46UEEc9hP9HZq8+qEp0=
Subject key identifier:   3E:2A:DE:D1:0D:92:53:1E:CD:90:60:BF:A2:B4:92:21:2A:37:C4:D2
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer:       /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial:       01962E2AE921D2D1BBBE88E4C4DE1BDF7F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number:          1196
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: t0krgg51WuJ+eCLIRCRpsDDUKNQmxHtzSI2zy6mNa1Q=)
                          2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:21:d2:d1:bb:be:88:e4:c4:de:1b:df:7f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=3e2aded10d92531ecd9060bfa2b492212a37c4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:2c:1a:4f:70:67:0a:4d:3d:d2:48:6c:3c:
                    ef:4e:d5:af:28:85:5a:86:fd:8a:12:03:1e:66:b7:
                    7f:8a:27:22:7b:c4:ab:fe:2a:e0:c8:c2:86:73:bf:
                    cf:0f:0e:fd:70:07:65:65:d3:09:a2:da:02:31:a6:
                    aa:3d:a2:d0:54:75:81:26:a5:bc:73:b1:af:9c:ad:
                    52:d2:ba:36:4f:2b:6a:59:39:89:f6:d0:76:3c:8e:
                    3e:be:e6:5f:7d:a5:e8:cd:9e:e1:e2:6f:6c:b0:b7:
                    4d:cb:54:b1:3a:04:96:28:8a:2f:ab:9d:e4:db:ab:
                    c1:ad:bb:49:0c:4f:7e:47:af:6b:5b:0b:97:57:0e:
                    4f:e7:1e:98:1e:12:bd:d8:8e:c2:49:d1:81:57:1f:
                    20:9a:de:0c:33:86:87:bb:01:31:b4:59:17:35:11:
                    81:5f:b5:58:2e:3c:3d:4d:ab:67:07:20:59:49:73:
                    63:61:4d:61:05:9e:b0:66:23:10:0b:38:cc:96:e3:
                    dd:9d:39:0f:26:ff:51:95:80:5a:01:2f:0e:aa:97:
                    38:af:5a:27:de:cb:f4:d3:c7:17:a5:22:c1:57:ce:
                    1d:2d:2b:72:10:24:7a:15:80:56:0a:eb:c0:73:ed:
                    e1:fa:ef:3e:db:57:b4:64:81:56:06:e4:0d:dd:68:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:DE:D1:0D:92:53:1E:CD:90:60:BF:A2:B4:92:21:2A:37:C4:D2
            X509v3 Authority Key Identifier:
                keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:75:57:aa:c8:25:c1:a9:b3:2d:3d:32:18:87:e9:81:48:32:
         18:ee:4a:0f:3d:36:65:3e:11:b2:fe:64:ec:f5:4b:89:6a:ef:
         cb:61:8c:89:01:07:f4:f5:ed:26:90:d7:88:b2:ba:78:b1:8d:
         15:2d:bd:02:12:2b:f8:97:d4:a0:c0:87:da:c6:a5:cb:23:4f:
         bf:14:b6:b5:48:68:fe:ad:d6:8b:4a:8b:f8:37:69:03:43:aa:
         cf:f6:0b:41:df:e2:6f:ab:28:2f:00:7b:5e:bf:21:59:41:4b:
         00:ab:b2:f5:f6:b0:26:51:e3:0f:25:01:92:c9:ba:b7:cb:d2:
         d5:68:a8:53:1c:f3:87:06:9e:bc:96:5c:99:ac:c3:76:a6:67:
         88:f6:ed:dd:4d:30:88:24:7a:1a:7b:f3:96:ef:d4:c0:28:66:
         3a:7c:a5:ef:5d:68:79:fc:27:11:2e:7f:9c:11:7a:e4:f0:7e:
         3f:7e:30:09:73:78:24:d7:16:52:79:95:40:54:22:12:e2:ba:
         2c:2b:55:4b:11:93:08:e3:ee:26:64:99:29:29:5b:87:aa:87:
         8d:ac:ba:fe:40:3b:87:43:60:c2:9a:a9:f0:55:a6:00:d0:6f:
         7d:40:37:1d:d2:ae:a5:bd:67:c7:fb:70:d9:2c:08:99:64:f2:
         25:2a:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----