Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          6ADTrr8+jfvUi8agYaTcmhR5+i5NiYeWHBPY9e+WkP4=
Subject key identifier:   A7:BF:8A:AB:23:C2:4E:EC:F1:58:D1:EA:7B:55:B1:18:7D:96:F9:B1
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       01962F06BC3437D00F5F82D40B90778DDF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: yveDXb2SpPgyaj98TExwIz0IF2nTd5jjvQ26YxwZ22U=)
                          3: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (hash: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:34:37:d0:0f:5f:82:d4:0b:90:77:8d:df:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=a7bf8aab23c24eecf158d1ea7b55b1187d96f9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:f5:eb:0e:9d:2c:85:17:9f:02:4d:bc:8e:
                    70:b2:f9:bf:bc:a4:9f:6f:d9:d3:6e:b0:19:20:69:
                    13:ff:71:a8:cc:da:cc:ad:ae:9d:95:e7:06:2b:78:
                    bc:d4:81:63:69:4f:24:f9:61:20:22:34:23:2a:da:
                    43:e2:c8:4c:da:a0:92:f8:d1:e4:ea:eb:98:4a:fe:
                    79:eb:6d:38:4d:a7:2c:24:b2:42:7d:ca:2e:7c:0d:
                    e2:9a:be:31:fe:4a:56:5c:f0:da:9a:86:52:62:3f:
                    cb:42:4c:68:32:8b:1e:ef:6f:7f:ca:7c:76:7b:d8:
                    52:25:82:57:f7:b8:af:37:d0:cf:36:23:07:2c:0e:
                    a8:10:9c:aa:2e:73:03:96:e2:e4:6f:de:9f:97:98:
                    3b:0c:8d:5a:f0:37:b3:1e:8c:f2:64:05:7c:73:f8:
                    58:60:68:45:29:ed:7f:1b:3f:42:1f:38:c8:65:46:
                    1e:73:31:92:87:ed:0b:b0:f6:fd:1d:37:0d:b6:9b:
                    f2:34:bd:6b:cf:4f:a1:59:8c:7c:98:d1:aa:74:ae:
                    d0:ca:ee:66:86:12:e6:4b:43:fd:da:7f:5a:bd:54:
                    ed:a0:22:d4:33:af:d4:12:b5:1e:39:e7:24:a6:ab:
                    39:aa:11:13:6d:fe:8d:7b:67:71:0e:c0:ef:d0:ee:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:8A:AB:23:C2:4E:EC:F1:58:D1:EA:7B:55:B1:18:7D:96:F9:B1
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:63:0d:7c:45:95:22:ed:e5:01:bb:99:c4:a8:d3:54:c0:
         1b:a1:dc:fb:f4:5a:8a:32:48:51:b1:68:b6:e5:5c:5d:60:0e:
         fd:a4:65:44:8c:97:9e:12:71:b9:0a:ff:fe:25:66:16:79:0e:
         58:83:55:15:e1:76:ae:3d:f0:93:38:4c:9e:38:54:72:4a:69:
         f0:25:24:0e:54:20:ab:65:4a:4f:8a:f6:6a:61:ad:6b:2c:89:
         ce:c5:f0:f0:cf:34:56:eb:ff:cd:98:2d:04:4b:41:b9:19:50:
         14:a1:76:60:73:8d:f5:1e:43:36:c6:bc:84:28:66:9d:5c:9f:
         54:fe:e2:d6:1e:99:64:ec:7b:21:e7:29:ca:a6:a2:15:df:5f:
         21:66:7c:5d:07:84:cb:02:ac:94:f8:dc:7e:e1:c6:3c:5c:62:
         78:9f:df:f1:1f:b3:d6:84:91:5d:9c:0e:6a:06:f2:f9:5f:01:
         a0:74:69:f5:01:44:bb:f3:28:5f:61:09:23:f3:c8:8a:e9:e9:
         ac:95:4d:63:8e:f9:0f:8d:42:3c:b0:86:a7:2c:dd:25:a3:98:
         b3:0e:43:3d:d9:8d:01:8a:a0:0c:d2:62:c3:84:b7:c8:4d:c8:
         19:9f:c1:de:dc:69:9e:5a:f5:cf:b3:b5:8c:c6:43:82:dc:69:
         24:a5:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----