Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File:                     QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier:          redvngggJnAfpiGVIDok3/8lEWuT5Nm5u5HSjp3Ls10=
Subject key identifier:   5A:3B:69:9C:BA:D2:F8:41:F0:F6:1C:79:34:F8:59:21:C2:B1:C5:87
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer:       /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial:       01962F3D8659E2311BBD874D464EE37269BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number:          C8
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: czxeAIpIp15ujEjNAKcQDLTWQSzYXvvpDy0NEne9f4M=)
                          2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:59:e2:31:1b:bd:87:4d:46:4e:e3:72:69:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=5a3b699cbad2f841f0f61c7934f85921c2b1c587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:20:1c:5d:8a:03:a8:55:1d:47:1c:7c:1e:
                    89:77:bf:3d:c6:6c:fb:f1:87:1b:77:73:e4:79:11:
                    61:30:57:14:7f:20:47:0f:0b:7c:c8:36:c6:6f:dc:
                    a9:bb:18:0c:50:9e:77:72:ad:c3:31:42:f0:be:83:
                    09:97:65:e3:3e:2a:46:7e:55:fe:f7:ee:67:35:01:
                    70:ac:e5:57:b9:cc:46:2c:88:3b:eb:c4:93:28:a9:
                    21:37:ee:6c:80:f4:8f:d7:90:94:5e:9a:cb:21:99:
                    f4:bb:0a:6e:26:d6:20:30:5a:02:f9:fe:bb:ad:54:
                    be:3e:62:e5:4a:87:7a:df:1e:2c:37:aa:eb:ee:d0:
                    29:7b:d2:02:e0:3d:7d:e4:66:14:52:ec:c1:7d:06:
                    0b:e6:a9:06:5a:ab:9b:28:08:07:68:ee:56:b9:d5:
                    f1:eb:30:36:34:27:73:75:9b:7f:47:01:07:9b:9b:
                    5d:79:4b:99:3c:7b:11:89:72:ae:4f:53:e5:6e:2f:
                    6c:4f:9b:74:5e:8c:a1:1b:8c:c7:ec:cd:ad:c6:fb:
                    44:a2:45:6e:bd:f9:49:bb:7c:f7:64:12:ca:e8:7d:
                    0d:bc:6c:be:0d:d5:e6:dc:84:db:41:1f:79:a0:6b:
                    96:4d:e2:f6:a4:18:89:1d:e6:d4:16:55:7c:34:68:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:69:9C:BA:D2:F8:41:F0:F6:1C:79:34:F8:59:21:C2:B1:C5:87
            X509v3 Authority Key Identifier:
                keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:3a:5c:50:62:e4:51:99:87:14:81:3c:b5:36:7a:f7:39:ef:
         d1:c9:f8:86:ce:64:b1:b4:a6:7a:1f:34:03:90:b8:0f:7d:b0:
         f7:3c:a8:ed:23:eb:f1:a7:fc:f7:65:6e:d8:cc:21:8b:73:d0:
         74:ce:49:21:31:cc:f6:d5:98:69:58:55:55:54:ff:c7:32:85:
         66:21:14:df:a1:7f:dd:4d:a6:b5:49:b4:7d:44:72:10:91:34:
         d4:af:94:7b:4b:a1:55:ad:50:d3:4c:bb:8d:18:ae:07:3e:c3:
         32:4b:f8:7c:ae:70:ff:db:23:e2:c6:5d:62:a1:a2:92:17:2d:
         aa:6e:c9:9a:c1:c0:51:52:7a:5e:24:6d:52:96:f1:d7:84:5c:
         24:97:bc:53:61:63:f2:a6:dd:67:4d:e7:35:68:6a:4e:39:34:
         1e:63:1b:d2:6e:c8:a6:c6:d3:ce:71:2c:d2:9c:8e:fa:4a:b0:
         d6:8b:ff:70:6c:11:9e:1f:9b:e7:d4:7d:12:5b:3a:da:9a:68:
         99:41:47:02:55:d2:98:0d:d0:42:bb:aa:27:00:d1:90:f2:84:
         a8:a2:39:48:d5:c3:57:53:ba:3d:ff:23:19:21:6a:38:c9:b9:
         93:e4:b9:05:c4:fa:e3:b9:3c:88:e7:f2:04:d9:a3:6a:2c:eb:
         da:04:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----