Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
File:                     QTJyL2byeskHL9x-kx9uGoUTz8Y.mft (raw, json)
Hash identifier:          7/vQPj62ZSNonU8LZ506eGqdDnUmkpxx6uPTJZNbAp0=
Subject key identifier:   05:F9:18:E8:26:03:9A:D4:5C:FC:3A:8E:D1:C3:0C:B2:02:BB:E2:44
Authority key identifier: 41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6
Certificate issuer:       /CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
Certificate serial:       01962E998144A96ECC052FD50B67275E90B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft
Manifest number:          03
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: QTJyL2byeskHL9x-kx9uGoUTz8Y.crl (hash: OXDY4CgnmJs03QQQ9K13Wv8ur4eNsPK+XEjcWPsCGic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:81:44:a9:6e:cc:05:2f:d5:0b:67:27:5e:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4132722f66f27ac9072fdc7e931f6e1a8513cfc6
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=05f918e826039ad45cfc3a8ed1c30cb202bbe244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:da:30:3b:50:a9:2c:75:f8:0c:73:de:ac:
                    67:e2:73:d2:fd:1f:d6:51:72:5d:21:97:1f:d1:c0:
                    8d:59:f4:72:85:75:a5:0d:af:fb:14:b4:e6:97:c5:
                    6f:f2:7a:97:9c:99:c3:da:c5:ea:30:94:58:86:7b:
                    48:0c:fe:65:b6:98:2a:0d:18:e4:6e:14:d1:d8:3c:
                    16:c8:eb:86:c0:60:e1:ee:ed:dc:47:1a:6a:14:46:
                    46:ca:bd:4a:90:1a:32:b3:ae:51:77:3b:c2:a7:1d:
                    5a:41:e2:7c:64:ab:6c:4c:00:e8:8f:2f:82:a3:ed:
                    97:f6:d4:ba:27:c1:5c:24:b6:d3:53:7c:31:dd:62:
                    e5:b8:ea:ba:2c:3e:3e:5b:13:da:f0:de:cd:15:83:
                    86:ed:d2:72:fa:bd:8c:4e:1c:32:91:9c:67:d5:67:
                    cd:1e:48:09:42:30:8a:ed:1f:e5:00:c2:45:6b:b1:
                    c8:4c:dc:34:89:6d:17:e4:9b:20:f5:c0:f9:4e:9b:
                    d6:73:d9:b1:1b:e1:ca:09:67:c4:28:97:ac:f0:01:
                    33:68:31:43:a4:42:c0:89:c8:fc:04:36:4d:15:55:
                    e1:59:b4:a9:29:ca:03:6c:51:2b:5f:5e:f4:b3:27:
                    84:de:89:ab:c1:5b:88:e2:3d:89:0a:85:51:f7:50:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F9:18:E8:26:03:9A:D4:5C:FC:3A:8E:D1:C3:0C:B2:02:BB:E2:44
            X509v3 Authority Key Identifier:
                keyid:41:32:72:2F:66:F2:7A:C9:07:2F:DC:7E:93:1F:6E:1A:85:13:CF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTJyL2byeskHL9x-kx9uGoUTz8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/985056-748f-4b92-b6fe-54c37c02b7ee/1/QTJyL2byeskHL9x-kx9uGoUTz8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:3f:d9:1b:31:fa:7d:46:67:13:dc:93:2f:d9:e4:ed:b0:
         1a:fe:c4:db:3b:af:f5:e0:93:ad:1a:e4:06:86:7d:8d:db:e5:
         02:59:03:e6:db:2f:6a:2c:56:b9:2d:e5:23:a4:d1:61:3a:94:
         a9:74:58:be:db:1c:86:d1:63:9a:81:df:08:8f:d7:5b:fa:85:
         f1:e3:08:51:11:1f:8c:a7:a5:22:f2:1e:03:28:34:e5:d8:2e:
         0c:a8:e4:4b:13:5a:22:c6:2e:3f:5d:02:be:8a:9c:03:8b:89:
         2f:3b:d1:22:47:8a:f8:83:64:37:54:39:a9:bf:e7:72:67:78:
         da:b0:2a:cc:44:74:09:a5:5d:db:99:fe:7c:4f:05:9f:eb:41:
         be:71:a4:69:08:db:96:d4:fc:58:9e:32:75:d2:b8:31:42:b3:
         80:b0:00:63:ff:cb:fb:a2:7a:16:b2:be:04:06:b8:b5:72:23:
         56:db:26:78:27:a0:e4:29:c7:9e:79:b1:db:58:7f:6f:84:26:
         3e:e7:10:ff:f8:78:49:2a:12:8d:92:d3:fd:51:5f:a0:21:4e:
         9c:98:66:6b:b4:b5:ae:c0:35:84:73:4a:81:d5:f0:74:09:86:
         62:c8:57:0b:96:0e:fb:de:df:e3:73:62:48:38:ca:61:8f:6f:
         49:68:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----