Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File:                     QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier:          4iCiMwodWmTJxCmtrOURWMhrjWdmu0D6qd8n47WTo6w=
Subject key identifier:   86:61:A6:EF:7D:4A:F8:5E:C5:3C:B3:79:A2:EB:29:41:FD:1D:92:59
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer:       /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial:       01962E61D870D6D5D0A429C01AFA9BD3573B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number:          05F9
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: 2rYks+enVRBEJO02Li9ze8LSPDoUpP1Qhdttp7pcvsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:70:d6:d5:d0:a4:29:c0:1a:fa:9b:d3:57:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=8661a6ef7d4af85ec53cb379a2eb2941fd1d9259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:65:10:a9:92:59:f9:56:ce:42:7d:16:9c:
                    27:d3:18:07:6f:ae:1c:eb:41:f4:bf:f1:ca:4a:e1:
                    97:0b:2c:18:25:b3:7c:4e:67:00:52:b7:e5:a2:df:
                    0f:c8:de:c5:f5:99:f0:0c:06:30:9a:06:64:6b:22:
                    7a:76:35:ed:99:b8:48:e4:02:0c:e8:1d:d4:39:49:
                    fb:5b:5f:9e:ac:a2:5f:3c:c9:75:77:fc:34:aa:23:
                    dd:6e:d6:72:bf:2b:7d:34:fc:4e:c8:54:50:2d:b8:
                    c9:04:0e:b3:65:90:7a:d1:3c:be:d7:08:df:18:e7:
                    57:5f:64:1c:85:99:a0:e3:24:c8:e2:5e:46:59:cd:
                    a5:39:52:bf:c1:bb:40:64:2a:8b:66:7d:a5:87:ab:
                    ac:31:25:8c:fe:47:c9:f8:56:e4:21:e2:1f:f4:3a:
                    69:88:d8:fd:1a:63:5b:58:11:08:22:03:e1:79:24:
                    8d:83:0b:79:45:e1:a8:07:e7:cb:3f:f3:af:df:9c:
                    1d:4a:3a:d2:85:77:6e:82:89:13:79:17:61:a9:63:
                    a0:bf:8b:87:ba:f2:86:23:84:95:46:36:52:cb:20:
                    23:4a:66:05:8c:24:b0:dd:c5:8a:d1:b6:8a:4c:7c:
                    17:e0:59:ea:10:a3:3a:4e:91:6e:b7:6f:a2:ba:57:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:61:A6:EF:7D:4A:F8:5E:C5:3C:B3:79:A2:EB:29:41:FD:1D:92:59
            X509v3 Authority Key Identifier:
                keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:be:67:b4:a8:07:9b:06:9a:49:95:43:8e:a5:9d:78:f4:72:
         69:ee:46:16:ec:8a:57:a4:df:d3:60:67:be:df:52:97:e0:44:
         10:bf:45:b5:71:01:01:1a:9c:ec:12:2d:8f:54:d1:99:5e:a6:
         98:5c:05:ed:3d:e0:92:ba:4e:6e:11:d5:5a:a5:6e:4c:b3:0a:
         a1:1f:6f:74:06:7a:b4:5b:f7:4e:5e:b7:fd:57:10:eb:45:6e:
         47:31:4f:5d:5d:11:c3:54:ee:f4:b0:a5:c6:c7:1a:ce:14:b1:
         3b:27:41:dc:d7:26:a8:99:89:18:36:16:ab:5b:5f:13:e5:94:
         e1:58:3b:9f:8d:48:01:4b:f2:72:53:ec:35:a5:b1:fd:af:31:
         95:4b:d7:dd:98:66:68:d0:39:51:55:9d:3d:e6:1c:32:ee:cc:
         ca:2a:97:0a:9d:7d:97:7e:e8:bd:67:1d:3b:8e:37:4b:e4:47:
         77:06:6b:dd:43:97:55:08:fc:81:f6:3d:c6:0b:f5:29:49:3a:
         2b:9f:b9:10:c0:78:d4:9b:05:cb:a9:f7:61:67:21:8b:d1:1d:
         a7:10:0a:1f:92:8a:99:50:ad:b7:8f:78:ef:56:2b:d8:4f:6c:
         70:7a:d5:28:12:8f:ce:cd:90:7f:1e:90:aa:4b:5e:8f:25:f7:
         25:98:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----