Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File:                     QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier:          unB4U8nvxN95cFxN0bKqXH5AIUoafYdQaNqQGwuQU5k=
Subject key identifier:   99:4C:63:82:CC:55:3D:8F:DF:11:A1:42:ED:FA:AE:A9:E4:F9:35:F7
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer:       /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial:       01962F7448987C5E65CC9B5E2907011C6BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number:          1382
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: W/0+YOKpGiouIa+UYLa/qWcP8f7QWTY+s6OmZBjJ6pg=)
                          2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:48:98:7c:5e:65:cc:9b:5e:29:07:01:1c:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=994c6382cc553d8fdf11a142edfaaea9e4f935f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:69:48:ed:08:90:90:5e:58:04:40:21:01:
                    0e:b3:0c:8a:23:83:00:7a:4d:08:06:c1:39:a6:d4:
                    23:41:20:97:f6:06:8f:b0:40:ef:9f:a5:b5:ca:6a:
                    0e:dc:57:27:8c:d3:9a:cf:a3:8f:68:75:23:c2:9e:
                    d2:70:21:26:52:10:ca:b1:1c:04:c3:ac:0b:f0:12:
                    10:95:01:85:f1:28:20:13:45:8d:50:cf:20:61:84:
                    8a:0e:a2:42:f9:71:73:60:aa:fc:8e:53:75:98:c7:
                    ec:1d:3a:2c:45:03:4a:8c:84:b1:ed:f7:81:e9:57:
                    79:24:05:e1:10:91:4f:45:3a:be:32:9e:cf:e4:91:
                    5c:27:8e:77:e4:00:e6:33:bd:84:6a:9a:11:6c:1a:
                    bc:15:f0:07:99:3d:b3:10:fb:1f:8c:ba:2b:c2:06:
                    76:66:54:19:3f:57:34:0d:47:73:a1:bf:db:5f:32:
                    1d:85:23:2e:ef:eb:a7:45:01:30:d7:b2:2e:07:f1:
                    da:c0:ea:08:90:1c:16:1e:bb:71:a0:49:0d:3b:eb:
                    16:64:10:44:e8:fe:66:92:5b:cf:25:71:c6:3a:91:
                    a7:20:98:e8:70:8f:37:70:27:62:f7:c1:ad:9a:0b:
                    1e:c1:c1:01:bc:e0:6c:19:fb:85:c1:42:1f:0a:42:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4C:63:82:CC:55:3D:8F:DF:11:A1:42:ED:FA:AE:A9:E4:F9:35:F7
            X509v3 Authority Key Identifier:
                keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:fb:c3:ef:14:27:a7:ee:31:81:94:25:17:70:36:cb:f0:
         d9:0d:37:2e:45:cb:bb:96:3c:3d:c5:59:5d:94:10:f9:10:0d:
         9c:74:ef:87:d4:d0:15:10:19:7c:a3:ff:8d:9a:0d:bf:0e:08:
         4b:69:33:19:a1:52:66:84:0b:1e:52:ab:ce:b0:44:c1:3b:5f:
         66:da:15:dc:8e:14:aa:49:b1:62:bd:a2:97:cb:07:a4:b4:24:
         4b:3a:59:f6:a6:50:ac:3e:97:93:f7:17:fc:f7:fd:cf:3d:99:
         b5:23:81:93:d6:5f:eb:41:00:70:84:42:84:ab:83:cf:00:e7:
         cf:11:7d:23:81:55:fe:fb:a1:e8:c7:cb:f1:25:b4:15:17:3d:
         1c:b9:a1:cf:b5:0a:ab:45:de:92:7c:05:ed:41:74:1c:a8:08:
         da:61:b1:34:93:b4:fe:ce:26:5c:22:6a:a2:cc:c3:73:6e:12:
         5d:52:a5:0b:0c:ff:f3:2c:36:c9:ca:59:4d:71:85:9f:6d:13:
         2b:a1:ed:dc:71:7f:87:8a:22:f2:8f:4a:2c:54:58:0d:f8:20:
         6b:60:3d:4a:d6:50:e9:64:96:00:2e:b6:c7:52:6f:9c:c7:26:
         72:db:03:df:09:b0:15:03:c5:b1:98:fb:40:b0:65:3d:96:16:
         d9:cc:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----