Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File:                     QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier:          rNXkA/1Scprr9Qg9j+hyTrae+z+k4w2+LNOcTVwrbpc=
Subject key identifier:   72:AA:4F:D5:0A:06:84:26:36:A6:51:77:AC:9C:EB:6F:D2:15:99:AE
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer:       /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial:       01962FAB0F76791E294C6CEC8BDC8AA9FBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number:          0E08
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
                          2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: 7YxKbdHQzEtWDSIisxqRPRhY7DPCLMgyDfvrOFynP5s=)
                          3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0f:76:79:1e:29:4c:6c:ec:8b:dc:8a:a9:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=72aa4fd50a06842636a65177ac9ceb6fd21599ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:71:d2:e2:0c:58:f2:2b:75:6e:f8:69:e4:
                    3c:8d:94:f9:d2:79:aa:34:b7:41:dc:87:45:60:80:
                    c7:39:ff:5c:94:c2:75:0b:36:b3:a1:ab:1f:c9:a7:
                    9d:f3:e6:ca:d1:1e:2e:1b:c0:82:44:8b:0c:5a:aa:
                    34:d6:b3:3e:ed:59:52:69:7a:22:6f:30:be:d7:05:
                    84:64:60:d9:53:2f:a3:2c:55:26:b2:fc:99:4b:ed:
                    3f:2a:ce:6c:7b:ce:09:b9:07:d8:2b:6b:5b:0e:2e:
                    1d:b8:be:df:62:ed:7d:98:a0:ce:17:67:78:79:da:
                    cf:d3:c3:9a:53:14:e4:fb:e4:2d:04:9b:23:79:a2:
                    be:ed:99:77:eb:8e:21:9d:cc:1e:7f:c0:76:bf:1c:
                    e6:3d:46:2f:9b:de:ce:c5:d8:06:1f:97:ca:61:66:
                    44:e6:c2:e7:55:7f:c2:c2:35:63:1d:ef:e1:63:2f:
                    16:11:af:78:fa:38:5b:4a:b6:80:51:c8:b6:0a:3f:
                    b1:24:8b:2f:48:aa:c9:eb:cd:3d:83:a4:dc:af:51:
                    e3:58:89:b5:81:1b:c1:36:29:1a:51:46:62:04:e4:
                    af:90:96:14:4c:6b:a5:21:47:72:e2:09:00:7e:74:
                    42:ed:61:58:e7:51:5b:bf:c9:70:4b:30:da:1a:57:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:4F:D5:0A:06:84:26:36:A6:51:77:AC:9C:EB:6F:D2:15:99:AE
            X509v3 Authority Key Identifier:
                keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:bc:c2:15:44:fd:ee:ff:28:50:ea:95:15:b6:ba:52:19:
         cc:a8:2e:33:d6:74:6e:f2:c9:64:8f:98:c8:21:be:1b:4a:f4:
         c8:ae:eb:d9:55:58:20:f0:80:e0:ad:8c:0f:a6:40:87:0f:6c:
         28:f1:1c:70:4c:d4:d1:da:71:a1:01:12:a8:8a:08:3c:35:cc:
         e7:94:6f:e0:27:c9:27:4b:6a:34:64:04:31:4b:26:18:ca:a5:
         99:6c:68:f8:a9:b8:fd:6d:64:2b:0a:90:f1:73:01:95:c6:85:
         66:bf:3c:25:3f:e5:88:ef:1c:5f:e4:41:fc:e7:63:28:1b:bf:
         3c:64:0d:0b:61:da:39:fd:16:20:bb:42:02:96:4b:45:e5:9f:
         97:84:b0:ec:31:42:27:02:e1:28:fc:34:24:5a:f0:6a:2c:d0:
         3f:15:29:cd:a7:22:4f:2c:53:69:87:f6:d6:b9:5b:8e:40:a8:
         f6:ff:a9:52:a9:14:8f:ba:2f:4b:0a:92:25:a4:79:e8:9a:0f:
         23:c2:f3:03:7b:79:47:9e:1e:92:73:fc:91:eb:1c:9a:bd:8d:
         88:a2:83:ff:c3:e0:6e:62:a8:5a:2c:9c:56:01:85:98:48:ab:
         d9:b5:1d:63:7b:5f:4c:b6:a8:5e:34:c7:d8:91:0b:b6:2c:ea:
         d0:b7:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----