Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File:                     QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier:          /eckNtb6c0uJqkDiV8V6Q5lncaWR5Utql8upfnAiiH0=
Subject key identifier:   0B:4B:C1:8D:09:C5:11:CE:98:8A:05:DF:B8:DD:D7:C9:F0:96:6B:FF
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer:       /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial:       01962E9920B6CC5851676AFE348542FEAB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number:          0888
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: zWvqlzn2VFlEyefFDEl0ZXtFnV4XdPLJyz9g5whwXRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:20:b6:cc:58:51:67:6a:fe:34:85:42:fe:ab:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424c165b6a49349541c65af9b21580163819f284
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=0b4bc18d09c511ce988a05dfb8ddd7c9f0966bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:3b:98:13:24:af:d5:8b:e7:7c:6b:42:32:
                    bd:4e:eb:eb:aa:58:47:7c:7f:bd:4f:d0:39:64:54:
                    62:82:cb:a4:df:77:fb:aa:2f:ef:e3:ba:31:93:9a:
                    05:26:83:69:eb:22:7d:19:5a:55:b2:5f:86:b7:ae:
                    30:46:6e:90:6f:19:03:b7:2a:53:60:65:d2:d0:16:
                    d9:6b:5b:20:fe:67:e3:93:a3:a6:23:de:43:2d:cc:
                    e7:33:85:8d:f6:fe:9a:ec:5a:e0:9c:6a:87:b8:05:
                    4a:aa:da:39:f0:93:b4:e3:a3:7f:1a:73:7c:43:96:
                    92:93:1d:5a:ef:b0:9b:e9:59:4f:98:c8:24:4b:2e:
                    e2:62:b4:cf:f9:b0:d8:7f:9b:f9:8e:31:57:94:20:
                    eb:52:d8:c6:f5:50:df:7f:e4:78:2a:42:2c:b4:79:
                    4b:c7:d0:f5:55:2b:6b:15:53:37:6a:bb:ce:31:8a:
                    a2:b4:cf:a4:d3:3e:c1:20:95:8b:d8:10:ad:5a:a7:
                    bc:e1:22:9f:68:5d:c0:04:5e:dc:8b:b7:98:22:48:
                    f2:a0:c4:1f:8e:9a:af:97:fb:50:60:66:f3:64:14:
                    16:66:a8:3c:ad:5a:13:70:f4:aa:81:2e:14:62:a3:
                    08:d0:5c:c2:f4:ee:4c:25:b6:c3:82:b4:10:ce:ed:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:C1:8D:09:C5:11:CE:98:8A:05:DF:B8:DD:D7:C9:F0:96:6B:FF
            X509v3 Authority Key Identifier:
                keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:e2:c8:0e:e3:91:a3:e4:a6:c6:3d:e3:5f:d0:d4:0e:13:
         7a:2a:72:d7:17:6b:7a:fe:c0:7f:fb:95:10:3a:bc:36:2e:eb:
         a0:34:5d:28:97:a4:bc:0b:59:a7:41:90:07:77:a5:89:2d:14:
         b8:d2:92:0c:52:42:2e:ce:20:0d:2e:b8:d4:5a:a6:12:4f:2c:
         77:86:34:de:5d:05:c1:5e:80:45:26:90:42:9b:12:4f:5a:23:
         98:bd:98:fb:1d:36:60:c5:95:46:3b:44:c4:35:43:09:16:7d:
         35:ec:8d:ea:df:67:c5:b0:64:08:ac:e6:12:a2:aa:68:94:34:
         d0:27:1d:1f:25:af:6a:37:53:0a:a1:75:04:71:34:f9:77:f1:
         ad:31:68:d9:9e:74:46:cf:fc:80:e2:bc:1f:54:14:4d:38:f7:
         5b:23:16:de:52:3a:96:09:f0:23:e8:ad:d8:96:72:a5:82:cc:
         5e:06:56:b2:ed:e3:a4:80:56:c5:ae:93:26:af:95:fe:c0:16:
         87:99:71:9e:19:16:46:2c:a7:88:21:b8:43:5b:c2:03:5c:f2:
         95:d4:b0:83:e3:74:59:27:d2:25:6a:ca:6b:ad:48:cf:e4:ab:
         82:b5:d8:4f:85:43:9e:93:f7:3c:6d:fe:47:67:0b:90:4e:b8:
         84:e0:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----