Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File:                     QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier:          O93kktnPKxE0C4dPY9sgoN2pvt1q2WAB6HzxtW3rGOs=
Subject key identifier:   50:2F:81:8D:16:FE:D3:A9:42:AC:25:83:F5:38:6A:F5:85:4F:DD:89
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer:       /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial:       01962F74DC61CFA5D716DA29C33F103FA261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: OaqLEzqtzcY4iSGveN4mB3Ay0yEEBHK0nPCTcdLy/QE=)
                          2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dc:61:cf:a5:d7:16:da:29:c3:3f:10:3f:a2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=502f818d16fed3a942ac2583f5386af5854fdd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:78:86:92:b3:cc:5f:6c:a5:aa:16:cb:bf:55:
                    47:73:6c:f3:10:1b:27:3a:d7:fc:39:59:42:8f:f5:
                    99:f0:06:3b:93:83:91:16:49:98:57:6f:34:15:3e:
                    98:97:58:a7:fc:b4:1a:f7:fb:be:49:c0:d0:f6:4b:
                    0c:06:bc:ce:31:96:63:82:97:b6:7f:f3:62:9f:72:
                    a0:39:bb:7c:46:6c:ab:f1:5e:61:b2:39:d1:e7:37:
                    ef:d4:c2:2b:4f:83:47:8f:59:03:b4:d1:39:93:29:
                    cd:7d:2b:03:db:7f:90:84:55:5e:a3:a3:78:d1:34:
                    16:90:f4:b0:55:e8:57:03:83:6c:2e:23:47:01:69:
                    37:79:3f:2e:ea:53:58:d9:b3:4a:cc:36:ed:7f:1c:
                    ac:a2:d1:be:b4:db:24:01:f7:78:7d:83:c2:66:3f:
                    41:6c:b9:6e:fa:0b:e7:6d:81:5a:11:e8:5a:cc:85:
                    8d:bd:c1:83:b9:a1:58:61:5f:6d:b6:58:d8:14:ef:
                    dd:36:af:13:bd:bd:cc:fc:7a:4d:05:11:e9:c8:3d:
                    57:c7:b8:75:d3:bc:55:78:2e:e0:d5:19:c6:a5:e6:
                    0e:da:7d:c0:be:e2:7d:99:b5:1b:d8:07:a8:32:2e:
                    fd:f6:2d:c1:31:57:31:ee:38:71:66:bf:97:2e:ff:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2F:81:8D:16:FE:D3:A9:42:AC:25:83:F5:38:6A:F5:85:4F:DD:89
            X509v3 Authority Key Identifier:
                keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:6c:c5:56:e1:bd:3c:72:dd:56:c2:4b:1e:9f:28:55:14:
         3c:b9:1a:42:6d:93:16:4e:a3:f4:df:1d:a4:60:72:f7:b9:32:
         60:9c:7d:d9:29:12:7e:2e:8c:07:c9:12:11:14:19:4d:4e:f7:
         8c:10:4e:2d:2a:50:bf:4a:53:f5:f4:b3:55:ac:44:4e:c1:21:
         5d:99:cd:e8:91:e9:18:57:58:2e:1e:e4:5f:23:75:d5:db:b1:
         f3:bd:82:bc:61:fa:e8:00:80:b4:49:c1:8d:92:07:5d:57:e0:
         6a:f1:61:f4:33:bf:eb:d9:9c:b6:ca:c8:08:bb:9d:37:d6:de:
         c2:e7:90:5f:81:81:83:7a:ca:05:07:1a:6a:c8:a6:3d:0a:03:
         d0:b2:3c:97:7e:77:1d:8e:4b:21:bd:d3:63:c1:ce:8d:1a:d6:
         33:37:78:17:d9:41:a3:78:9c:1a:62:43:7e:cd:97:63:bb:d1:
         37:2a:b0:88:ab:e2:46:7c:e4:ae:dd:cf:15:fc:3c:ff:77:1e:
         fd:11:7d:fe:f8:b5:dc:15:08:1b:d7:b9:8e:ee:ff:17:c2:21:
         ee:b3:d2:40:9c:19:0c:bd:70:82:1f:54:bd:2c:e5:70:31:ea:
         9d:26:80:1e:25:ff:62:9f:71:76:8a:e3:f9:bc:fb:c3:db:0d:
         80:ae:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----