Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
File:                     QLnKyTUxHngDS0BzgwqBo897Rdk.mft (raw, json)
Hash identifier:          /NgPjT/EZ/CXc/eT+uA/sKmoFmqS0lwo2APoP2MpIVI=
Subject key identifier:   93:80:89:0B:63:40:93:B1:3E:01:19:C9:18:16:0E:98:0F:AA:63:AB
Authority key identifier: 40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
Certificate issuer:       /CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Certificate serial:       01962E99C2E64F7F7AD596F70FFE69629AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: 1q_nnAgndZaIqez5io_HHZB7TIg.roa (hash: fcE6bMGj83Q0hVMFOv0EAXM92bWkreUUh6T69N1a/Yo=)
                          2: QLnKyTUxHngDS0BzgwqBo897Rdk.crl (hash: PO0Fuqy75VnhDrLs03IDN7pdR8CgSrgoPDIVB+HQvRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c2:e6:4f:7f:7a:d5:96:f7:0f:fe:69:62:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b9cac935311e78034b4073830a81a3cf7b45d9
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=9380890b634093b13e0119c918160e980faa63ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:86:23:f7:e5:a7:4f:fe:0e:07:52:c3:63:
                    b5:9a:5a:3e:69:13:46:f4:20:6e:35:f8:3c:fc:98:
                    de:49:ba:ca:dc:9c:12:49:09:b8:c3:71:40:67:84:
                    fb:1e:ac:6e:18:97:e7:42:34:34:57:d6:60:b7:42:
                    0c:a9:54:00:c3:0d:12:27:bd:88:9f:f6:89:ff:04:
                    d6:6d:fa:4f:12:14:72:41:4e:3e:d8:0f:2d:ce:2b:
                    65:53:28:12:ca:76:d1:a9:38:08:9f:7b:20:92:28:
                    d3:22:84:aa:2f:d0:8c:bf:00:bc:11:31:3f:31:7c:
                    54:40:f0:bd:92:f3:23:a5:13:c7:eb:b2:62:09:2d:
                    f5:3c:61:5d:2d:d6:84:e5:28:82:c8:de:d2:f7:19:
                    be:c9:93:bc:0c:20:ba:7f:9d:b5:47:15:b2:f8:a8:
                    00:eb:43:82:f4:d5:ef:80:5b:c5:9e:46:cb:04:a3:
                    af:01:0c:b2:b0:e4:6e:0a:7f:3a:2a:d2:27:8c:a6:
                    41:c1:c4:1f:f6:84:96:e3:bf:c0:bd:3a:12:d2:6c:
                    20:ea:27:1f:4d:fe:88:ce:91:84:1c:08:1b:2b:ea:
                    8e:03:8f:37:46:3b:15:5b:bf:db:49:f1:39:39:9c:
                    3b:82:e0:b2:a8:92:c2:38:ef:ca:1c:78:fe:41:be:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:80:89:0B:63:40:93:B1:3E:01:19:C9:18:16:0E:98:0F:AA:63:AB
            X509v3 Authority Key Identifier:
                keyid:40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:c3:32:b7:76:e7:3b:9f:e1:d9:50:f1:30:8e:15:5f:99:
         cf:d3:ef:cb:ef:93:ea:a4:51:d1:e3:c8:53:48:85:c5:06:ce:
         0d:ba:ba:6d:42:ed:6c:5e:0f:29:ee:12:61:26:37:66:69:41:
         a4:b5:78:5d:6c:93:aa:61:ba:df:87:08:66:c6:4c:d5:e2:e9:
         42:cd:b7:bb:e0:9a:02:29:8d:f0:5c:b9:d4:19:2c:db:fe:e1:
         f7:0b:39:de:c9:02:b4:9e:a8:3d:8d:07:2e:1a:7f:5b:8c:5e:
         f3:c7:fc:2d:ba:bc:25:be:41:13:84:bc:13:b1:6b:51:88:67:
         32:17:3e:97:6e:c8:de:20:99:39:93:e8:90:15:b3:2a:c3:65:
         15:1b:ac:a7:d0:be:f6:16:0e:31:9d:b4:40:b3:f3:03:33:28:
         3a:a3:da:7b:ae:e2:21:a7:aa:33:69:b4:f6:21:09:9a:8c:a6:
         92:0c:49:32:a2:cd:65:b2:75:71:df:c7:7c:45:df:00:30:43:
         59:1a:45:44:0c:fe:6e:04:40:47:f8:01:e3:16:ca:bf:ca:62:
         0a:be:d7:df:1a:62:3f:a7:0e:fa:3a:84:16:28:fa:68:1b:33:
         fc:ee:60:df:06:6e:61:1d:f5:9f:06:23:34:a3:16:6a:99:cc:
         21:a3:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----