Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File:                     QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier:          u2vcH5s4fn1NxVOVwkWoiAKO2qQWSXESwvlL7esLqX8=
Subject key identifier:   C6:FA:77:F4:E2:FC:0B:A1:CC:02:16:B6:2E:18:4F:B0:63:74:F5:DD
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer:       /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial:       01962F74678FD29105081EFD0EF0BB008858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
                          2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: GjhRVUR54zx43QReYhHNkV6UJWemG7bMOcW9Mr+VvSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:67:8f:d2:91:05:08:1e:fd:0e:f0:bb:00:88:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=c6fa77f4e2fc0ba1cc0216b62e184fb06374f5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:50:7d:46:b2:f9:dc:7d:e9:28:2b:62:dd:
                    fc:b7:f6:2c:fe:54:f0:a2:8e:f3:9c:9c:e8:30:93:
                    0c:93:50:aa:0c:95:58:55:68:4b:2e:c9:21:5e:a1:
                    f2:c7:61:98:fe:60:b3:0c:09:19:04:20:6f:ce:94:
                    af:ba:d6:3f:0f:a9:a7:b7:7e:10:ca:a3:38:55:93:
                    02:b7:99:f4:16:ae:2e:d0:82:c6:2b:47:45:40:35:
                    87:03:65:7c:98:1b:36:6e:4f:b9:1e:ae:e0:df:86:
                    be:31:b3:d5:29:ce:b3:ef:0c:db:9b:41:52:89:10:
                    2a:71:bf:2c:4a:11:9a:19:38:db:c1:ae:55:1a:bc:
                    a5:01:25:55:5c:ca:63:6a:0f:3f:fd:c9:15:12:62:
                    b0:ea:52:95:08:3f:26:0b:d6:db:ce:66:ac:7f:8a:
                    5c:a4:02:64:7e:ee:8c:30:51:eb:35:da:5e:50:8c:
                    7b:08:99:a7:3c:46:1b:cf:7d:19:5a:8b:a6:bc:b4:
                    42:d9:56:54:9e:49:90:00:b7:ae:75:32:27:d3:9e:
                    cd:8e:41:9e:10:2a:f2:a1:4c:91:9f:77:03:94:68:
                    c0:24:d6:58:e3:fc:7f:f2:7f:34:fe:aa:e9:1f:32:
                    d2:6e:55:e9:8c:8f:4e:98:4a:70:1e:29:35:f4:9e:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:77:F4:E2:FC:0B:A1:CC:02:16:B6:2E:18:4F:B0:63:74:F5:DD
            X509v3 Authority Key Identifier:
                keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:f5:31:ec:4d:ce:48:b5:08:80:48:72:62:ef:dc:b1:4c:
         d5:9f:ce:bf:2f:bb:3a:87:20:8c:a7:c1:64:01:32:71:f6:ac:
         2f:28:03:63:5a:01:fd:bb:68:41:c2:c4:1a:a5:fc:ee:e0:4b:
         0b:34:cd:2e:7d:30:44:5a:15:b5:62:b8:26:5d:2a:6d:ad:25:
         68:84:7b:f3:20:7d:a9:0e:d4:13:16:bb:5a:8a:c4:de:cd:6a:
         50:5d:23:22:14:46:6a:eb:2f:c9:ef:70:4e:c6:d2:29:32:cd:
         f7:ab:2a:f0:8e:eb:47:cf:2e:ea:f3:04:3c:92:5e:b4:e5:64:
         cb:0a:12:99:19:b1:81:47:c1:6a:55:1a:18:38:b7:d0:4d:d0:
         39:dd:c6:e7:ba:47:6e:66:6d:28:12:e9:3b:c9:25:4e:a2:82:
         21:83:c2:86:62:4e:8d:ff:bb:f9:af:0d:18:b2:6f:7a:a8:4c:
         af:ce:2a:91:1e:38:76:ff:e5:40:28:21:be:07:1c:db:10:fc:
         7e:22:cc:6f:51:f6:1f:1e:ae:7e:77:55:bb:55:3b:c6:2f:b9:
         9a:06:57:da:5a:9f:79:0d:41:34:2b:19:6c:36:be:5a:bb:18:
         aa:42:10:49:db:95:6a:c1:c6:7c:08:67:f2:2a:9d:9d:9e:76:
         b0:84:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----