Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          Snvu/89U9ci+/R48bgFtsqzj9RKiSzMhTq4f3z3r4rs=
Subject key identifier:   DC:C7:05:D1:D6:91:8E:4A:C2:99:1D:BD:39:95:F3:44:F0:21:86:1E
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       01962F074267A4B156E32029CCA84E251D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          1242
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=)
                          2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=)
                          3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=)
                          4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: jJB1uj4bUFhGu7b7c+nGvNG9JUXUsTVzmivV4gABaBs=)
                          5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=)
                          6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=)
                          7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=)
                          8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=)
                          9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=)
                          10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=)
                          11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=)
                          12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:67:a4:b1:56:e3:20:29:cc:a8:4e:25:1d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=dcc705d1d6918e4ac2991dbd3995f344f021861e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:e8:75:8b:c5:86:16:80:e3:8c:35:0a:f5:
                    0d:04:f3:5a:9e:ce:7b:35:74:bd:99:28:24:93:e0:
                    96:e3:d8:03:f6:c4:ee:24:79:43:2f:1d:9b:dc:88:
                    86:3e:7f:42:a2:26:91:cb:bb:75:10:36:4d:75:df:
                    a2:27:3b:bc:f7:6a:7b:07:46:eb:1e:93:d8:db:9a:
                    09:38:24:03:19:66:92:d8:c8:53:c9:86:80:4b:6d:
                    0f:5d:7d:5f:fc:eb:1e:8b:f6:0e:61:6b:62:48:86:
                    02:93:6b:a5:96:52:af:3d:7d:11:6c:7f:11:a9:15:
                    b5:04:87:c9:a2:37:20:87:cb:b2:5f:9f:a5:c5:aa:
                    b0:d1:80:d0:9b:15:8a:06:9d:46:31:7d:d4:04:c4:
                    9c:9a:33:97:d8:13:3d:76:1c:3a:a0:d8:8d:9a:2a:
                    95:4d:f4:5e:9f:ab:b7:6d:1e:3d:31:86:80:b5:e1:
                    09:d7:67:f7:87:54:dd:e6:d6:88:c5:55:af:06:19:
                    09:5a:ad:35:f7:22:9e:fc:15:9c:e7:27:12:77:94:
                    91:2f:14:04:a3:2a:b3:fc:d5:0f:70:21:12:1e:87:
                    6c:71:01:17:75:7b:2f:a2:a9:9c:63:94:6b:66:f0:
                    ce:42:53:a5:de:e8:a7:ea:cb:16:f0:1d:95:e5:aa:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:05:D1:D6:91:8E:4A:C2:99:1D:BD:39:95:F3:44:F0:21:86:1E
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8f:73:8b:50:4d:08:86:b5:e3:76:66:e4:f3:12:88:cf:cf:
         96:63:c8:c6:75:9f:01:78:21:8f:84:bb:d2:4c:1d:63:4f:d1:
         f7:8b:56:e1:f7:a2:ee:af:0e:dd:65:d2:1b:46:61:bd:69:d9:
         8d:4a:b1:87:13:3e:13:43:75:6d:50:aa:9c:f1:8f:b3:30:4a:
         cd:bf:67:7d:7c:da:38:47:19:e4:75:a3:9d:ae:49:88:a2:95:
         d5:e0:18:60:c1:9f:f0:9b:5f:2a:6b:24:5c:c0:2d:41:01:b8:
         40:d5:33:0f:98:1d:71:7d:e4:17:65:ea:2f:70:d7:f1:32:7f:
         4b:1f:c2:cb:1c:e6:63:eb:0f:59:d3:ee:c2:32:90:98:24:c1:
         a6:1c:39:a6:40:b0:69:86:a3:ce:90:65:a7:33:ea:23:00:10:
         5b:dc:bb:f0:7f:b7:59:c8:4f:fb:95:fb:ca:ee:d5:4e:d7:46:
         0a:2c:fc:41:96:73:ed:45:8b:81:c9:75:5f:47:2e:d8:1e:0d:
         26:a8:03:77:67:66:cb:66:24:17:8e:f0:0d:da:0a:59:10:9f:
         1e:b1:d3:63:4d:72:db:fa:73:33:ef:4a:6a:bb:6c:98:de:81:
         01:23:d4:a1:9f:10:61:eb:be:2a:d0:59:3c:62:0e:7e:ef:b3:
         8a:f5:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----