Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          O6Pm2nM1jfMtfJQOGd975FbDZnRx8uNVQqY7+qWpRRM=
Subject key identifier:   EC:F9:75:89:6B:E0:7E:F5:31:1C:25:47:EA:AA:8E:63:BF:AB:37:11
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       01962FAB1A5D39CC3C49650464206DEF6073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          06FD
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: xdmLitJWqgmoZhrJzH5urJjbCkOMivpHLafkQ6TnNhw=)
                          2: pOmwZuP6Q-BxWvua_azIxnDrtaY.roa (hash: 1Gh5sWhYQZnz90m+gcSVdtSatfk353c30A4J7Tl7xJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:5d:39:cc:3c:49:65:04:64:20:6d:ef:60:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=ecf975896be07ef5311c2547eaaa8e63bfab3711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:5d:c7:f7:91:16:04:b7:17:20:a3:4e:3d:
                    32:64:6b:a0:43:13:0f:4f:f6:9d:7f:7b:f1:93:a8:
                    b2:5c:3e:bf:c5:a8:ff:6a:4c:c1:30:27:9a:92:28:
                    c8:3a:b2:50:73:9a:a6:4e:5b:74:79:93:51:4b:bb:
                    71:91:a8:c1:4d:54:e3:c6:c3:a2:2d:91:5c:fd:63:
                    1a:36:f1:09:b7:b6:57:e2:35:77:ed:87:b1:61:b9:
                    02:90:04:f9:c9:39:3e:70:65:b8:96:87:52:db:7e:
                    70:eb:54:d9:af:9d:95:1f:a8:e6:19:a3:93:94:40:
                    98:26:d8:6b:63:af:96:b0:e5:4e:e2:1f:f1:59:2e:
                    8f:bb:e0:58:f2:da:11:2d:8f:9b:20:6e:60:68:4c:
                    84:e2:7e:76:d0:5e:fd:65:7a:13:20:be:eb:f0:65:
                    d6:e6:df:f1:c1:ae:3c:25:f7:c8:56:ab:78:fc:1d:
                    c0:73:1e:1d:3c:87:62:8d:2a:36:6c:94:29:08:66:
                    6b:2e:3b:c1:4c:03:98:01:4e:10:33:aa:c3:5b:10:
                    bf:7f:dd:be:d6:b2:65:cc:4e:c2:88:0e:c8:ab:b0:
                    32:a4:a0:f2:5f:c6:6b:b2:09:c8:ad:22:73:91:ea:
                    9c:71:14:56:5e:66:f4:07:38:91:9a:ef:fe:2c:5b:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:75:89:6B:E0:7E:F5:31:1C:25:47:EA:AA:8E:63:BF:AB:37:11
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:45:13:9e:ba:06:c4:2f:82:85:56:18:b1:6f:5c:01:a6:f2:
         2d:bc:46:08:55:b1:fe:4c:45:86:0c:20:80:d2:e5:71:13:87:
         af:69:c8:36:12:ce:56:1a:7f:af:94:2b:dc:12:90:a8:01:8a:
         b6:12:75:9a:c7:b0:c8:88:d2:5e:f7:89:b4:78:64:63:b0:65:
         09:79:e7:32:f5:54:18:6d:30:56:75:af:a9:dc:9a:22:6b:dd:
         92:44:35:62:d4:0d:d7:1c:bc:18:4c:16:9c:6d:87:3e:53:c5:
         69:db:1a:df:7d:52:ed:f8:08:62:ab:75:84:67:64:0d:a7:da:
         28:17:1b:f2:5d:58:ca:b9:1c:a5:18:7b:88:55:67:68:2c:e9:
         5f:d8:1e:5f:58:2b:0d:6a:40:5d:3c:07:44:ab:11:20:18:45:
         26:53:13:91:ac:b1:e0:56:e3:10:8c:fb:f2:a6:39:2e:3b:10:
         2b:f6:24:f4:8d:93:be:a2:5b:ec:1a:7d:ec:0b:50:2d:3b:bb:
         79:02:f8:a4:35:ef:6f:33:75:21:19:68:65:cc:78:bf:d0:a4:
         55:7e:d5:87:43:ae:20:6e:c3:9b:a1:90:22:4c:e4:f6:c9:66:
         43:41:95:68:d9:ae:b0:ae:f5:8b:80:68:24:8a:6f:69:50:6c:
         68:7c:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----