Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File:                     QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier:          0blXnQQI9p8wAZWZV9kV1cao71Hij08e9JHT/gYsy3E=
Subject key identifier:   68:A2:E9:A2:AE:8F:53:51:D7:D1:BD:41:A3:01:68:CD:66:F0:3C:AF
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer:       /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial:       01962F3D36DCE8DA9C555C47DD8D84322A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number:          080A
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: sUVZ5GvZQHpyqWYFtMX8SXsonqkOL2PVdkWLeXai888=)
                          2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:dc:e8:da:9c:55:5c:47:dd:8d:84:32:2a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=68a2e9a2ae8f5351d7d1bd41a30168cd66f03caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:03:94:55:43:b7:66:aa:47:25:b0:fb:b6:
                    a0:6a:df:b0:9e:96:c6:6a:0f:e0:46:7e:35:1c:10:
                    c5:2b:bd:cb:a0:49:ea:cf:19:3e:67:62:6d:17:37:
                    93:6c:f5:4b:a2:b8:38:06:57:9b:af:e5:e3:e0:3d:
                    80:ec:00:a0:5b:4f:f7:3f:c5:74:28:f7:37:c3:f9:
                    67:b2:e2:16:0a:32:44:3d:83:8f:e4:92:55:eb:27:
                    38:57:0c:30:fd:b2:2f:1a:1a:19:49:26:ad:15:af:
                    2a:db:e2:fa:cc:24:45:46:46:33:24:c6:c9:ce:35:
                    69:d7:b8:ab:54:a2:c3:7b:61:af:af:0a:82:24:cf:
                    e4:a8:f7:92:62:be:c3:7f:77:8a:3c:1c:68:96:fa:
                    55:6c:cc:13:19:06:b0:d7:43:87:f8:b8:78:a8:81:
                    3d:60:9f:a0:90:f9:1f:3c:c8:24:30:f0:fa:fa:2f:
                    81:0a:8c:1b:e0:1d:ef:62:d0:88:9a:8e:f6:4a:30:
                    08:c3:1e:56:08:0e:64:7e:2a:34:0f:25:af:2e:1b:
                    5d:73:d3:5d:b9:b2:3e:a0:57:53:df:f3:e3:3a:0f:
                    28:38:8f:9e:35:a7:4f:cf:ab:6b:8a:7d:54:1b:30:
                    89:56:45:9b:27:e9:58:98:7f:fe:16:0e:fa:f3:10:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:E9:A2:AE:8F:53:51:D7:D1:BD:41:A3:01:68:CD:66:F0:3C:AF
            X509v3 Authority Key Identifier:
                keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:5c:fe:7e:ec:06:a6:3d:87:07:d2:18:ea:9f:9c:54:26:
         c2:a8:ab:e0:6d:f7:b3:48:b5:2d:98:ef:ee:2b:4f:c9:2a:24:
         db:fb:f0:65:18:5e:a9:bd:8c:08:74:95:81:c8:5a:40:26:e3:
         61:78:c6:8b:9d:ae:c1:f9:21:9c:c3:36:6a:e6:62:85:45:51:
         99:f1:2d:38:92:6f:cf:33:92:49:9a:98:90:d1:7d:a4:95:9f:
         2b:83:d5:8c:b2:33:73:6d:db:cd:3b:5b:64:7a:66:b5:54:35:
         6d:c2:55:67:2a:54:f8:cf:ca:61:32:dd:66:ad:7c:8b:62:00:
         16:7b:b8:0a:0d:54:6e:e2:e9:a1:74:86:33:93:d3:ae:4e:55:
         e5:00:78:2e:43:12:7a:db:32:7c:66:19:40:9f:5a:36:29:40:
         7c:15:1e:16:56:8a:c0:25:f5:e2:3c:da:6e:c0:d9:fc:ee:65:
         2d:b3:86:d4:e1:5e:30:44:6f:7e:76:58:03:65:0e:7c:41:87:
         14:ee:6e:3c:22:f8:15:8d:84:53:0a:c8:f3:cc:e3:c7:1a:ec:
         c1:8e:3c:d1:16:82:9a:46:6c:23:04:93:3b:b7:97:a3:8c:f0:
         3e:9e:e4:8a:9f:a2:22:4b:a8:8b:a5:d7:ef:ae:74:21:39:fa:
         b5:98:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----