Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File:                     QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier:          byFaOCK0u652ee3i5WqL0usJ4v+X5m/Srnku2as3SBo=
Subject key identifier:   0D:3A:EB:6C:44:40:D0:A1:5D:2C:5E:65:01:93:C8:E6:CB:4D:BD:34
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer:       /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial:       01962F067AC4271BF9656C3AD21F7F8530F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number:          11D1
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
                          2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: bewhqVqdVNNmPLnqmxzEdoRn/DKwUEbBAanSK70nz3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:c4:27:1b:f9:65:6c:3a:d2:1f:7f:85:30:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=0d3aeb6c4440d0a15d2c5e650193c8e6cb4dbd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:db:d2:bb:88:3d:11:db:ec:13:46:e8:42:c2:
                    a3:b6:d9:74:96:3e:97:52:c0:a0:ff:d5:ce:f3:4c:
                    40:56:5a:76:16:13:e5:f8:98:6c:a1:ae:6f:d5:c1:
                    e0:3c:4d:08:12:2d:48:89:95:c4:eb:03:1b:0b:c0:
                    21:cc:4b:0a:32:6b:19:a8:ef:c5:15:c4:88:c4:a2:
                    b0:1d:a7:80:97:6a:c5:a9:bb:69:d2:4d:0f:13:be:
                    ed:64:a1:fe:b2:5b:cd:4d:48:d1:3f:79:12:9d:c5:
                    14:50:5c:98:15:c3:4f:81:26:e7:75:93:ee:19:ac:
                    2d:b7:2f:88:0c:98:6f:b3:f5:d3:72:8b:5a:48:f1:
                    eb:50:ff:20:e3:23:07:a0:8c:fa:e3:e7:30:95:7b:
                    0d:e0:0d:6c:ab:b7:3b:1a:9a:89:9c:d1:c0:12:01:
                    64:a8:26:6c:c0:7f:88:26:b2:6c:a5:08:a0:ec:5f:
                    8b:19:23:01:f8:93:d7:40:7f:c3:c0:db:f9:91:d4:
                    10:e3:2d:d7:36:be:84:7f:d7:55:e5:a2:d2:dd:cb:
                    8d:41:42:c4:be:6c:b3:82:39:67:e4:a5:e1:06:f1:
                    1f:38:02:d8:ad:5a:ce:bb:d8:a9:55:eb:a3:cf:bc:
                    de:84:ef:c4:92:62:de:b1:0a:9f:82:35:7b:0b:d5:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:EB:6C:44:40:D0:A1:5D:2C:5E:65:01:93:C8:E6:CB:4D:BD:34
            X509v3 Authority Key Identifier:
                keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:f3:0f:a2:ab:ea:28:48:da:b4:47:a9:d6:35:ab:5d:24:
         ca:22:69:a4:c3:cc:31:c4:de:97:d3:8d:c3:6f:bb:59:44:4d:
         0a:45:52:84:ec:0d:1f:c4:d9:f5:46:c4:d8:69:52:49:fe:ea:
         f1:b3:c8:4f:5b:9d:c2:94:73:d3:b3:a5:fc:db:70:71:19:cf:
         93:82:10:41:83:6b:84:be:6a:54:99:66:15:b7:75:73:5c:c2:
         63:f9:f7:bc:f7:4f:ad:17:81:1f:3d:56:23:6e:00:c6:b3:1b:
         e5:8f:d0:bf:d1:ab:65:50:fb:80:61:22:74:ce:af:69:d5:fa:
         86:ef:97:f6:27:08:58:dc:aa:a8:cd:f9:d9:22:bf:4d:67:d6:
         ba:b0:3d:78:4b:42:1b:c3:fe:f3:ef:e1:9d:ac:24:f4:06:cc:
         8a:33:2d:c7:1c:df:f1:d4:5c:fc:3e:51:ff:ec:40:3e:7f:ba:
         d2:8e:d2:b1:98:6d:d1:71:23:ec:55:ea:bf:7d:8a:8e:3b:fb:
         0f:be:7f:e7:3e:3d:fc:3b:fe:6a:44:fc:ff:65:1a:db:db:ce:
         ba:f5:56:29:b6:9c:d5:18:6a:95:66:1e:40:97:46:85:3b:88:
         39:1c:4a:41:85:ac:04:e5:71:ee:dc:2d:ba:21:c0:e5:df:7d:
         08:01:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----