Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
File:                     QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft (raw, json)
Hash identifier:          bfKB6t5yDz0+Eq2byb85qt9/Wkt0qg12Rj6xQscUzro=
Subject key identifier:   5C:EA:28:51:DD:FC:B6:1E:66:74:65:FD:FA:6D:81:F5:A8:72:D3:07
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Certificate issuer:       /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial:       0193FA419CEB4967EA6FAAFDAAA0257F2754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
Manifest number:          11
Signing time:             Tue 24 Dec 2024 20:00:24 +0000
Manifest this update:     Tue 24 Dec 2024 20:00:24 +0000
Manifest next update:     Wed 25 Dec 2024 20:00:24 +0000
Files and hashes:         1: 1_ruDitg-6LxddfkA6q38XzXkH4.roa (hash: lGp1nMpC3NcaRk79De8I+hSHtyRyafRxC+4jFnplayI=)
                          2: QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl (hash: etHJfZRToJW9NrVswI6F0um6dxRNX18ztaMuhozgi1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:41:9c:eb:49:67:ea:6f:aa:fd:aa:a0:25:7f:27:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
        Validity
            Not Before: Dec 24 20:00:24 2024 GMT
            Not After : Dec 25 20:00:24 2024 GMT
        Subject: CN=5cea2851ddfcb61e667465fdfa6d81f5a872d307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:67:95:2d:c3:fb:21:ec:93:87:7c:7c:5a:
                    9a:e3:1f:0c:c3:1c:fc:ec:92:29:6d:12:d4:5d:10:
                    09:ba:45:ee:79:a3:72:70:36:bd:f0:13:8a:fb:67:
                    9a:f1:29:c5:88:2f:dd:0a:e4:e6:e7:b2:11:04:32:
                    fd:56:8e:4a:24:65:23:45:a4:f1:13:5a:c2:89:ea:
                    8d:02:ba:38:40:84:56:14:22:16:a1:91:fd:8b:6a:
                    ba:59:3c:a4:fb:4a:13:27:92:63:b4:e7:8d:61:8a:
                    f0:b6:7a:94:f7:0c:9b:ee:1e:38:44:40:c7:42:84:
                    b7:7c:08:9f:87:4b:fc:e0:7a:76:86:34:5c:1f:c1:
                    d6:67:a9:03:98:3c:88:7c:fe:73:5f:61:3a:0b:5e:
                    d4:d8:1a:5e:f4:b4:96:62:39:2b:74:36:69:f9:80:
                    1d:4d:4f:e8:3a:df:da:c9:20:e3:2c:e4:c3:9c:30:
                    54:d5:f4:fc:74:cd:2f:7b:d3:ac:47:60:ec:21:a4:
                    24:a7:a5:4e:2f:3a:f8:94:b7:da:3c:d8:70:bc:72:
                    97:42:94:3b:39:76:15:43:2d:24:34:d7:c7:c8:95:
                    1c:0d:aa:09:48:92:b9:88:cb:5b:ab:4b:89:65:4d:
                    78:6a:81:fe:7f:0d:f7:0e:0d:25:02:8f:1a:dc:68:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EA:28:51:DD:FC:B6:1E:66:74:65:FD:FA:6D:81:F5:A8:72:D3:07
            X509v3 Authority Key Identifier:
                keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:0c:01:45:c4:34:7c:be:58:b2:93:e8:b4:d9:60:7d:54:
         14:a6:ef:ea:fa:38:b3:f7:18:2e:a3:57:bc:38:69:93:2d:a8:
         e9:7f:6d:44:64:e9:cb:c8:8f:e5:7c:8b:bf:8c:e3:c1:c3:6f:
         df:5f:8c:3a:04:04:df:ee:37:89:20:7c:a1:dd:11:ae:fd:5a:
         a0:b7:ba:a0:65:35:ab:cb:e6:48:7e:91:7b:fa:49:dc:c5:03:
         4a:20:3c:e3:2f:53:3f:4c:3f:47:01:a0:1f:fb:c8:05:0a:e3:
         a8:e7:de:af:6e:bb:33:33:4c:8c:ff:aa:4f:58:73:8e:28:5f:
         95:39:ba:85:2c:fd:88:0d:8a:a9:16:b0:4a:db:5c:cc:f8:b9:
         33:c0:0a:fe:b4:1d:4f:fc:67:4c:39:49:9e:2b:69:24:48:fb:
         7b:9f:8b:e8:33:31:cd:f6:c5:e0:de:df:46:bf:23:87:4e:9a:
         db:9e:39:2c:8d:ef:7c:03:ec:01:60:07:10:9e:b2:91:61:5c:
         5b:8b:10:fd:63:e8:9b:5c:8c:7b:9a:b4:ee:76:40:dc:d9:3f:
         de:d9:a6:56:67:79:62:0b:1d:26:5c:ba:50:11:68:d9:19:24:
         da:62:7c:7a:50:10:3a:2a:5a:24:ef:c9:d9:cd:6a:11:88:68:
         ad:89:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----