Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File:                     QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier:          /CXwLih2WnYJ1KJmf/BnTItz+WYKYlTIViisLvwpmRM=
Subject key identifier:   9F:7C:43:90:1F:04:0E:45:EC:8D:A2:70:2C:8C:BD:BF:35:47:7B:2F
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer:       /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial:       01962F7453563BFB4129A8EFA7FD1FBFDD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number:          0F81
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: PyaW2Yeiiz/iz0uM2V/jWRcwe1eYs/eiIYmBWAMvO1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:56:3b:fb:41:29:a8:ef:a7:fd:1f:bf:dd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=9f7c43901f040e45ec8da2702c8cbdbf35477b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:7b:e9:6a:87:87:9c:9c:f7:84:9d:6e:69:
                    ee:7a:5f:71:9e:82:9a:da:4a:c0:8f:40:b2:9c:5c:
                    de:68:35:f8:d2:3c:ae:f4:39:bf:fa:10:ce:25:23:
                    0a:cb:96:4c:f7:de:10:66:60:23:6e:0f:f1:1a:6c:
                    cd:9c:36:48:44:34:1f:95:2a:ee:e3:19:6b:67:4e:
                    50:6c:fe:91:16:da:17:6d:5c:c0:3e:13:3e:83:a7:
                    de:7d:22:42:53:74:82:43:21:c8:23:d6:9c:94:6f:
                    de:14:7e:e1:e6:ed:06:51:8c:f0:4d:57:eb:93:0d:
                    5e:19:bb:c2:f8:d2:59:56:24:c4:06:6c:e6:c8:d7:
                    82:9d:58:b3:81:a8:c0:c5:6f:b0:6e:bc:db:cf:1e:
                    b8:97:9b:f3:01:6a:c3:ba:d9:7a:eb:89:7c:a5:01:
                    f0:75:6c:4e:ee:66:69:74:a1:9d:bb:56:df:c1:74:
                    af:3d:7c:fe:8f:2d:38:a4:aa:ee:47:da:61:52:ba:
                    33:f8:24:c7:56:1d:4f:bd:de:86:7b:9c:02:36:fc:
                    35:7b:43:ae:85:06:86:68:d8:fd:1a:9e:0f:b4:44:
                    48:7d:70:2c:cd:8f:2a:35:3e:f9:70:42:d3:2b:43:
                    02:50:83:83:6d:e7:ee:13:0a:f2:5f:af:5a:0f:91:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:43:90:1F:04:0E:45:EC:8D:A2:70:2C:8C:BD:BF:35:47:7B:2F
            X509v3 Authority Key Identifier:
                keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:23:64:35:da:f3:4d:ef:6e:95:0c:cb:39:dc:06:83:2a:7c:
         f6:02:7e:1d:47:45:b5:ae:16:e3:c0:23:e1:48:16:53:6c:d5:
         0f:ec:1d:33:e3:51:e7:8e:f0:c8:47:02:3f:02:42:0c:eb:5b:
         8e:22:88:f3:dd:30:fd:db:70:1e:d4:b3:e3:8e:33:8d:30:43:
         16:66:4f:0f:f4:01:af:48:9b:bf:ae:04:88:d6:a1:77:b0:01:
         b1:f6:18:23:cf:e1:f0:33:87:c9:d0:85:83:54:11:91:d7:26:
         40:da:2a:3b:87:4c:c5:71:a6:b6:22:74:45:05:75:6f:39:57:
         7c:a6:96:e5:94:7c:bf:28:6a:e4:06:59:14:7a:67:9f:0d:8c:
         45:8a:9e:56:31:1d:35:11:bd:28:76:b8:11:21:76:f0:a1:83:
         fb:49:42:05:5f:32:63:bf:58:82:11:6e:7d:80:26:a5:3d:82:
         1d:ef:4f:56:f1:77:1e:ee:e7:be:2b:f3:f2:f2:93:19:f8:94:
         68:ff:72:7c:f5:33:51:df:a3:73:48:72:b8:33:86:36:4f:e3:
         e9:79:e3:fb:5c:7e:ad:41:a1:1f:8b:63:2e:fb:80:dc:fb:a8:
         58:5f:8e:94:c3:6a:bb:88:35:b3:ed:9e:90:93:d8:c6:71:f3:
         7a:53:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----