Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File:                     QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier:          8lKrSKlA2l4UnH5OY/EzlD5FboK8QlI78qkVtGrjveM=
Subject key identifier:   16:D3:87:DF:6D:B4:DB:63:B2:1D:6F:4D:07:39:DF:32:83:DE:AA:E5
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer:       /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial:       01962FAB3BA7719E5A6852354B0B7C8984BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: IepIHAEmoqnLAwZQF+FcfZLHyjOBP//8yuVobaaWciI=)
                          2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3b:a7:71:9e:5a:68:52:35:4b:0b:7c:89:84:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=16d387df6db4db63b21d6f4d0739df3283deaae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:00:cd:b9:aa:0b:4d:68:92:88:fd:8d:98:
                    24:0e:cb:d8:7f:e6:a2:7c:fd:82:d8:45:54:fa:a5:
                    83:a8:06:b2:68:a4:6d:61:a3:2a:33:ea:77:99:f5:
                    83:75:76:cd:a9:26:d3:14:f8:82:dc:8d:63:27:b0:
                    0c:b0:f8:51:41:35:e8:23:97:eb:8f:c9:69:a7:50:
                    31:2f:8d:34:02:f9:68:d6:67:b8:68:43:a9:33:9c:
                    df:fe:81:ed:96:46:50:fc:ed:67:1a:74:a2:b4:a6:
                    b5:dd:67:26:93:6d:7a:0f:f4:f6:17:8e:86:7e:48:
                    0a:d1:67:46:2d:26:b2:60:a2:65:bd:60:6e:b1:66:
                    31:db:5f:6b:33:89:19:80:f8:27:05:20:2b:37:10:
                    2a:cd:80:7f:09:4f:c2:8e:42:4e:e4:08:87:83:61:
                    52:28:c9:58:ac:de:6d:8d:81:f5:6a:ed:9d:9f:97:
                    f0:5f:42:ff:f1:15:fc:84:fd:81:5a:86:5a:65:14:
                    62:3b:14:e8:9d:37:f2:c2:c1:82:88:d5:81:90:99:
                    22:61:96:d9:61:79:97:72:13:15:fb:58:0b:49:49:
                    05:29:be:ea:fd:d1:e9:0a:ab:e8:24:d6:4e:5b:98:
                    82:68:e3:74:3f:f0:0b:c4:45:5c:0d:92:ae:f0:9e:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:87:DF:6D:B4:DB:63:B2:1D:6F:4D:07:39:DF:32:83:DE:AA:E5
            X509v3 Authority Key Identifier:
                keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:86:e9:d7:4b:cb:81:ca:21:9c:2a:77:52:2c:92:51:14:ba:
         ad:96:15:06:fa:d4:d7:58:ad:4b:7c:50:1e:6f:ba:2a:5d:ba:
         53:88:83:a1:ae:9e:4a:48:fe:ba:db:4b:15:c1:67:a0:38:ef:
         79:32:12:e4:df:ea:54:a0:6c:63:60:b6:f4:ee:b2:2c:40:97:
         7a:2e:1e:2e:b1:c2:14:a2:9e:5f:54:26:28:f2:84:bf:92:a9:
         9d:8e:26:da:4a:46:60:e8:c8:98:38:22:e2:6a:55:b0:a7:7a:
         1d:58:18:85:73:26:8e:06:dc:6f:a9:cb:72:d0:cc:55:fa:2e:
         96:9c:19:b4:53:e3:b1:3e:4b:f5:6d:d7:19:94:00:62:e9:73:
         8e:b5:d7:29:a9:10:31:b8:72:fb:cb:9e:b2:78:5d:03:eb:07:
         cd:17:b6:5b:dc:e2:94:12:04:a5:0f:7d:46:f0:c3:01:24:63:
         af:40:bf:ab:60:06:eb:72:c3:f9:04:1a:aa:41:dc:31:b6:59:
         26:d3:51:53:5e:e1:de:71:1d:59:ce:42:38:26:bb:60:79:71:
         ce:6d:6c:33:d9:ae:ba:ae:79:b6:0d:32:46:b3:96:d1:e5:11:
         6e:35:8d:a5:b5:c7:50:08:58:59:58:ca:d0:1b:0c:6a:f5:51:
         de:65:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----