Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          TkyolBen4TPakIs6rdYyu2A7ASGf6k+zFFg/gnTq4zM=
Subject key identifier:   C9:D3:F8:67:FC:30:56:15:02:25:A2:A2:C0:32:46:35:5D:EA:8D:DD
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       01962F06B198DF4DDDECD43E85AF53CBB3F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          0622
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: HF0LqW6Nn7yrC4zWZGNegGbZJQI.roa (hash: ZufShUH8VmdZ1SaW4ZA1zfhMayCSiwCUVqOn6kPrIf0=)
                          2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: bVcjvJFhcKdBW+4zmHgZHbnOpJ/kDLb0FEn95VrtX+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:98:df:4d:dd:ec:d4:3e:85:af:53:cb:b3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=c9d3f867fc3056150225a2a2c03246355dea8ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:cf:db:62:d7:de:8d:95:59:ac:55:09:36:
                    a6:b3:12:3b:dd:ff:e8:1f:89:bd:62:2e:a2:0a:1a:
                    a0:e7:ce:3c:45:59:9d:ad:91:ec:ff:fb:cf:4f:6d:
                    cd:5a:f4:b0:1b:e1:8d:35:9d:bf:eb:67:7e:1b:1d:
                    19:f6:d3:84:01:80:f7:02:21:7b:ca:9c:c9:ba:ef:
                    83:1d:d3:5c:33:74:ab:cb:f6:1a:44:6b:6d:71:c6:
                    29:ee:39:2c:d1:94:71:c3:75:89:69:a4:7f:02:e7:
                    35:ef:d8:a4:3f:be:2d:fc:8d:7e:ee:d5:72:db:1b:
                    ad:5b:51:4e:54:52:ff:9f:97:7a:f2:ea:26:ef:3c:
                    10:c3:cc:ae:a9:08:c4:12:ac:66:35:a3:5b:d2:01:
                    d3:97:5a:d4:30:a3:9d:e7:c3:8f:07:cb:ca:8c:32:
                    4c:ae:d0:4a:7f:90:48:c4:f0:68:c5:cd:99:05:36:
                    3c:3d:73:9b:3e:6f:9a:25:b1:3f:ca:f5:b3:51:5d:
                    02:4c:c2:8f:13:ce:e7:78:5f:0f:c3:14:29:8c:a3:
                    5c:0e:16:88:ce:b5:4b:ab:f3:e3:2b:f6:c6:ba:35:
                    fe:f1:5f:71:8c:00:40:20:00:72:d5:71:c2:23:38:
                    84:6c:3b:44:f7:b5:b3:c6:5a:d5:d7:c2:38:94:63:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D3:F8:67:FC:30:56:15:02:25:A2:A2:C0:32:46:35:5D:EA:8D:DD
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:bd:e7:22:54:65:7e:db:af:d5:d8:4a:c0:bd:a4:fc:b2:
         a6:dc:c1:0f:96:72:11:af:0f:bc:ba:9a:14:02:22:69:a4:ce:
         be:46:a3:2d:75:7f:f7:3e:c2:59:27:dd:1f:92:41:0d:ea:99:
         ca:f5:9c:40:49:69:c7:9d:b2:a6:7d:70:8a:45:68:62:29:02:
         8f:45:49:6c:ee:a2:6f:56:a0:8d:4e:f7:8a:53:71:57:c8:7c:
         27:57:be:5d:ab:37:78:48:64:2a:e2:8a:a1:06:87:2f:d3:87:
         a2:72:27:b2:8c:33:bb:01:13:28:63:be:e5:77:6a:58:9d:3a:
         28:ee:10:8a:4b:76:b4:10:d3:7f:17:3a:48:71:76:e3:65:36:
         19:2a:ff:be:1d:6c:e9:5a:6e:b4:7f:ec:78:54:ec:ad:2f:94:
         62:2c:aa:e7:ff:7e:6b:d4:ae:f7:89:64:ba:4e:30:55:ab:6e:
         32:e7:ab:e1:fd:b4:c6:93:43:f8:3c:7a:1c:7b:ce:6c:63:43:
         5a:27:7c:94:ee:4f:f9:d5:68:cc:51:b4:0a:dc:0d:45:b2:5c:
         42:87:21:6f:52:8b:90:31:4b:99:e5:30:66:f9:ef:48:5a:73:
         3a:95:1e:45:52:84:d9:5f:37:c8:5a:0b:cd:96:75:71:9d:44:
         31:b7:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----