Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File:                     QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier:          u+AdTxhHuY2GZF0TY+qK/LvniBZk+lWI0GDP4Ns22Xo=
Subject key identifier:   05:10:C6:67:A0:DA:39:34:CE:30:EF:7B:A9:F5:62:64:A0:4B:3C:A2
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer:       /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial:       01962FAB58800D02AF1BFD33268C6B50F3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number:          1092
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: iqwI8Py6bWT0AjLN7WbfjRl5yfpKbZmxACeDkCniKEQ=)
                          2: zKB5P57_JFOmPOkzrUulhGBC8DI.roa (hash: h7EFcyZ6LShlPLoYWIs86uc36W4TF89jakB1BT9rojo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:80:0d:02:af:1b:fd:33:26:8c:6b:50:f3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=0510c667a0da3934ce30ef7ba9f56264a04b3ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:09:d5:a1:07:78:cb:65:a0:f1:fa:08:93:
                    16:f2:a6:08:a4:2a:b0:0e:4a:f2:36:3e:4c:ba:0a:
                    15:63:86:f3:a3:01:a1:7d:47:56:92:34:60:9e:7b:
                    0f:a1:b2:e2:3e:3f:c6:ff:2f:49:4e:59:be:29:b4:
                    63:dc:a5:58:ee:6e:1d:2d:b8:58:66:bb:b4:28:37:
                    3d:f2:c7:f5:4e:3d:bc:18:f0:cd:49:69:31:7b:6a:
                    4b:6f:c2:ee:c2:ba:38:22:41:00:d9:c3:9e:94:52:
                    51:51:8f:b1:ec:a8:43:8e:41:52:31:80:15:f5:4e:
                    87:68:e3:a0:a8:2c:f1:8f:3f:87:a4:80:05:5b:93:
                    cc:b4:be:7d:91:f4:4c:2f:e2:f9:f0:33:f1:41:6c:
                    b4:6e:cd:a6:e8:0b:a5:04:f3:3f:6f:40:9c:f7:8f:
                    b7:5b:b6:42:f9:26:ba:ed:69:e4:97:79:23:03:e7:
                    69:b6:5b:34:52:78:d6:d7:2a:40:d2:48:62:bd:05:
                    06:81:a0:c7:c3:5d:3a:a4:10:6c:07:28:50:d6:ce:
                    eb:50:81:21:61:6a:13:7b:99:4b:f2:f4:ee:9c:34:
                    cd:3e:4d:20:c0:38:c6:3e:3b:42:9c:d4:71:00:f3:
                    15:84:51:21:ea:82:05:5e:dd:b3:1a:90:3c:0d:cf:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:10:C6:67:A0:DA:39:34:CE:30:EF:7B:A9:F5:62:64:A0:4B:3C:A2
            X509v3 Authority Key Identifier:
                keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:e9:dc:fc:71:09:b1:28:50:ae:dd:09:c6:e5:2d:f4:c4:
         97:56:c9:42:da:5b:cf:9a:a1:48:a8:48:8c:ce:68:b0:bf:6e:
         05:8f:df:3b:ff:6b:43:78:6c:07:05:17:cb:97:b7:e1:97:f6:
         68:23:bc:0e:e9:88:75:6e:4e:cc:bc:c0:4d:af:e7:c3:f5:01:
         6a:d1:6d:92:16:b7:9a:10:5a:ad:4c:41:96:8f:68:46:89:15:
         f7:96:91:49:37:71:62:ad:dd:4e:30:f8:a4:a1:2f:5e:c8:0c:
         4c:cd:f0:79:4b:59:9f:ca:8e:f1:f7:a6:95:84:1f:70:68:31:
         f3:f5:5b:48:68:ee:2e:75:03:2b:fd:7e:e7:d6:f5:28:46:6d:
         67:ca:13:a4:b4:34:24:c0:88:b1:e3:21:6a:00:2c:62:85:37:
         28:ee:40:33:e6:75:33:f2:66:17:3b:41:0a:da:19:7a:b0:04:
         26:f5:b7:64:b3:b1:6b:e6:f6:35:0e:bd:d7:ae:2d:8c:94:39:
         2b:f5:2a:55:90:fc:39:8e:e9:3d:91:bf:3e:7a:0a:76:84:b8:
         94:39:d0:b6:6d:22:8d:3f:f0:26:cc:1c:28:d7:de:21:8b:f4:
         d0:3c:5b:f1:16:ec:8a:30:82:69:f8:53:05:76:18:23:31:9a:
         04:bc:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----