Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File:                     Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier:          HliFULt2dFp64S3GyucGnEOFaVe5NHcT7B6T0k5KkHs=
Subject key identifier:   2F:44:10:ED:43:2E:A9:C9:DD:1F:59:AE:80:95:62:04:21:3B:DA:BD
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer:       /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial:       01962E9939B6C4A4655E8C1569C787057E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
                          2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: FXNoXm07v6qrqliuz2KTAuvhcjJz5sXxkx7xnvs1dOM=)
                          3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:39:b6:c4:a4:65:5e:8c:15:69:c7:87:05:7e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=2f4410ed432ea9c9dd1f59ae80956204213bdabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:f3:99:9a:ea:af:59:f4:03:be:f4:cf:19:
                    32:f8:e4:b1:b9:e9:f7:5e:29:da:a4:b3:e7:e8:e9:
                    b4:ad:43:7d:cf:96:b8:6e:73:67:d5:96:1b:2d:7f:
                    16:cd:c6:fb:ab:0f:27:11:d1:ad:ef:69:0c:56:d7:
                    0e:6e:83:ef:4f:b0:6c:31:88:59:5b:69:a2:53:d9:
                    fc:bd:85:9b:02:52:bf:39:4e:1a:db:8b:59:49:31:
                    73:51:da:0d:32:93:f1:e1:38:63:e1:98:46:82:86:
                    71:fc:cb:d2:79:48:82:de:f4:47:6a:24:66:0a:bd:
                    cb:83:61:93:b8:90:09:ed:d8:75:99:96:10:86:9e:
                    94:40:50:48:34:ee:b3:d0:24:74:d9:27:5e:83:3d:
                    4e:ac:8f:3e:1d:88:da:2c:4e:60:1f:60:89:b7:4b:
                    6a:35:f7:84:9d:ef:95:e4:98:12:30:c7:53:93:5f:
                    43:28:f5:17:6f:0c:26:8f:a4:6f:32:84:71:f3:b8:
                    75:d0:be:7e:ae:a9:ff:23:a8:30:f8:4b:a3:75:3b:
                    76:f3:cd:b9:3f:37:1d:4d:33:03:92:76:b5:77:b7:
                    03:4c:10:e0:e3:a1:80:f2:4f:e4:fc:42:53:e1:a8:
                    a9:7a:a4:ad:05:1d:5b:69:be:d6:45:13:42:93:12:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:10:ED:43:2E:A9:C9:DD:1F:59:AE:80:95:62:04:21:3B:DA:BD
            X509v3 Authority Key Identifier:
                keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:6d:74:db:b0:db:fb:8f:bb:11:52:bb:7c:35:51:ed:2b:
         d8:c4:7f:4d:b7:70:0e:f1:0c:11:6f:5e:59:ff:15:14:d6:37:
         14:49:69:fe:0f:f8:af:e3:40:53:5c:3a:af:a5:4f:90:be:dd:
         a9:61:93:f5:76:dd:da:0e:f1:ba:d0:23:8d:1e:a4:34:6b:e9:
         af:5d:86:ff:bc:74:5e:38:66:4d:bb:72:0a:ec:d7:8a:35:1c:
         62:92:b1:d4:bd:5e:66:b4:a2:40:21:c3:61:b0:e2:9e:73:32:
         57:8d:39:0f:ab:7e:c6:4b:2e:6d:91:7c:b6:cb:7d:13:37:2c:
         11:18:16:14:5e:7e:ca:6b:6b:f8:36:d9:9b:da:43:88:ad:8a:
         c8:ae:c8:fb:e0:74:1c:cd:a4:a2:3d:c4:34:39:1b:4e:94:84:
         62:31:74:d1:f3:ae:9f:4f:9f:23:96:82:7f:54:de:d6:31:99:
         4e:a8:cb:07:9f:b2:b9:31:23:83:f4:66:df:f0:1c:b8:69:0a:
         c8:0a:78:da:96:bb:06:9e:15:fd:38:b7:fd:16:e0:1a:89:f6:
         62:06:20:fa:03:0a:60:9f:1a:56:fc:2a:15:d9:40:82:ae:2a:
         97:ea:78:84:88:d5:53:e7:e1:25:28:08:a9:44:e5:13:a0:50:
         71:41:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----